Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: cpLIACybLNGWyvC+VU4Qzsg2QZpd9wuxtPEE9/h9dIo=
Subject key identifier: D3:EC:82:CE:1D:A8:AA:D0:D1:2C:CA:97:A4:20:59:AF:6A:03:19:7D
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019D382E1FD336F5A19E9CA1DA54816A2DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: dEHja7wD11f5sSwTDJ46fgi6Mdz1bpTd1l6J7du+tpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1f:d3:36:f5:a1:9e:9c:a1:da:54:81:6a:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=d3ec82ce1da8aad0d12cca97a42059af6a03197d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:ba:ba:4b:17:5f:2b:5c:1d:2c:f9:85:26:
a2:da:88:ef:2b:3d:b5:a6:49:d1:c6:d3:bd:67:83:
99:6a:2f:7b:30:09:fd:fc:dd:f5:16:92:ff:c6:b4:
0e:52:f9:34:fc:7b:05:75:39:c4:29:e9:a2:5a:01:
b0:ce:c5:dc:0b:61:ab:bc:36:cb:08:62:2d:ce:76:
5b:83:e0:96:c7:67:61:c9:ef:bc:2c:bd:b5:a4:df:
eb:a3:e4:d2:8e:3a:eb:a1:04:6c:74:35:f5:c4:ab:
98:05:d9:11:10:0d:e4:cc:af:7a:1c:81:66:34:d3:
c7:63:8e:dd:31:c1:9a:c9:a8:a7:8e:7f:3b:99:82:
71:4f:17:ed:21:81:94:57:e8:4a:6b:db:80:12:30:
fe:ab:ba:a8:15:a0:b0:a0:fa:d4:2f:dc:b4:d1:dc:
71:e6:17:9e:23:58:5b:f0:98:53:df:78:8c:f0:64:
84:e9:1f:59:d6:21:11:04:2d:34:5d:6c:ec:58:07:
30:50:08:d9:fc:7b:05:5f:19:80:7d:a5:db:38:ea:
89:63:02:f9:a4:f8:b7:20:69:a8:69:fa:a3:fb:b0:
0e:cd:e4:16:b0:1b:85:0e:81:10:63:c3:87:24:b1:
c1:da:69:08:3f:ce:45:51:fc:38:4c:4c:c0:ae:04:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:82:CE:1D:A8:AA:D0:D1:2C:CA:97:A4:20:59:AF:6A:03:19:7D
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:7c:7e:a9:6e:cf:b3:4d:78:5f:f4:af:28:98:f4:59:21:
a2:e1:55:e2:0a:66:12:42:c3:43:7a:2e:11:27:8c:e1:91:1a:
20:1f:9d:a6:c4:13:56:37:b0:29:b4:3e:ae:65:b1:45:c2:2f:
ce:98:d2:4f:b7:2a:b1:8e:7f:b0:d5:b0:0c:58:2b:13:d5:2e:
61:9f:12:91:b8:2a:e6:64:2e:38:1a:60:bb:e6:cf:8f:36:8a:
29:73:03:79:b4:f3:18:16:19:d8:c4:d2:54:9d:9c:6b:57:cb:
c7:c5:90:49:23:8c:7f:bf:08:c4:f1:a9:19:b3:5d:64:db:8e:
23:d2:00:9f:16:71:78:51:5f:60:ca:b3:a0:69:8d:a0:1d:8b:
90:76:32:8d:64:77:82:e1:3d:26:e4:b2:68:b1:b0:79:f2:56:
81:4f:e4:6c:4a:89:a1:c9:89:2e:b5:83:5d:c6:1b:8a:50:80:
4c:c6:2f:ef:a5:57:af:73:24:d9:d3:85:6a:06:53:97:76:e5:
ed:4e:a1:64:ba:f4:49:4c:ac:05:21:23:34:79:7b:48:ee:36:
1c:14:fb:50:29:cf:88:31:b4:7c:b4:a3:2f:07:30:e0:54:fb:
8c:36:5f:f6:e6:2c:9d:2e:53:f1:46:21:ef:66:b4:11:1a:d6:
48:34:23:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lh/TNvWhnpyh2lSBai3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjYwMzI5MDYwMDQwWhcNMjYwMzMwMDYwMDQwWjAzMTEwLwYDVQQD
EyhkM2VjODJjZTFkYThhYWQwZDEyY2NhOTdhNDIwNTlhZjZhMDMxOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rm6uksXXytcHSz5hSai2ojvKz21
pknRxtO9Z4OZai97MAn9/N31FpL/xrQOUvk0/HsFdTnEKemiWgGwzsXcC2GrvDbL
CGItznZbg+CWx2dhye+8LL21pN/ro+TSjjrroQRsdDX1xKuYBdkREA3kzK96HIFm
NNPHY47dMcGayainjn87mYJxTxftIYGUV+hKa9uAEjD+q7qoFaCwoPrUL9y00dxx
5heeI1hb8JhT33iM8GSE6R9Z1iERBC00XWzsWAcwUAjZ/HsFXxmAfaXbOOqJYwL5
pPi3IGmoafqj+7AOzeQWsBuFDoEQY8OHJLHB2mkIP85FUfw4TEzArgQQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPsgs4dqKrQ0SzKl6QgWa9qAxl9MB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr18fqlu
z7NNeF/0ryiY9FkhouFV4gpmEkLDQ3ouESeM4ZEaIB+dpsQTVjewKbQ+rmWxRcIv
zpjST7cqsY5/sNWwDFgrE9UuYZ8Skbgq5mQuOBpgu+bPjzaKKXMDebTzGBYZ2MTS
VJ2ca1fLx8WQSSOMf78IxPGpGbNdZNuOI9IAnxZxeFFfYMqzoGmNoB2LkHYyjWR3
guE9JuSyaLGwefJWgU/kbEqJocmJLrWDXcYbilCATMYv76VXr3Mk2dOFagZTl3bl
7U6hZLr0SUysBSEjNHl7SO42HBT7UCnPiDG0fLSjLwcw4FT7jDZf9uYsnS5T8UYh
72a0ERrWSDQjZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:59 2026 by rpki-client