Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: uRkw9jL0lV0MYTtqcdSzcHea8nB/+qoDOwzoRhR1xX8=
Subject key identifier: 0B:AF:1E:D7:7F:D0:CA:A1:F6:40:30:C9:6C:64:72:28:B3:2B:7B:BA
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 019D389BAFACE793E79611291737769D9A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 14A0
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: GV0fCaS92B/C/Amcd1tRsA0ruhDeXy6l6EMNrMSPT1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:af:ac:e7:93:e7:96:11:29:17:37:76:9d:9a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=0baf1ed77fd0caa1f64030c96c647228b32b7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:2e:5a:eb:2b:cd:b5:8f:bf:bc:f3:1e:4a:
7d:e3:d9:0f:5c:06:2a:d5:f7:57:aa:ae:3a:09:87:
96:4b:a2:f6:67:e4:09:eb:6d:a6:40:5e:e4:4d:3d:
43:74:17:ac:3d:50:62:85:e9:54:fc:74:63:3c:4b:
18:13:e7:47:20:e7:5b:54:02:c8:f7:6f:cd:43:0f:
fe:57:11:c6:14:04:92:a6:c9:6b:a0:d1:d5:ba:6c:
5f:47:4e:55:38:d2:bf:8a:3e:cd:77:47:c3:db:9a:
8c:ae:da:d6:a1:7a:7d:61:56:46:2c:0e:c6:b8:0c:
ac:76:a3:ef:b8:36:bb:fb:41:c0:94:f0:c8:75:d5:
e2:af:07:14:6a:50:36:d8:ac:de:b7:9d:ab:6f:1e:
0d:09:0e:a7:24:5c:7f:7b:34:73:0a:5d:b9:6c:07:
ce:7b:01:a6:c9:ad:86:cf:e0:dd:f9:76:c9:da:38:
fa:93:ca:45:9c:76:a2:1b:c2:f0:ed:ca:2c:4b:73:
b0:7a:d6:86:0c:2f:37:f4:fe:3a:12:5d:eb:29:0d:
28:69:fa:03:63:53:bc:cd:40:54:bb:6c:a7:ac:2b:
04:2e:fa:61:3c:8e:8d:d5:ac:44:5f:28:fd:d2:ef:
6d:74:dd:df:47:9e:13:63:df:06:0f:2a:f4:c8:29:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:1E:D7:7F:D0:CA:A1:F6:40:30:C9:6C:64:72:28:B3:2B:7B:BA
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:83:60:a8:16:07:3e:04:25:00:ec:da:fd:ae:8d:de:76:
6e:37:09:47:b2:5c:65:82:31:b4:02:c3:4f:6d:91:34:7a:ed:
8a:12:91:a9:d6:76:ad:ac:21:58:1b:db:93:7b:53:9a:22:f2:
29:4c:f3:5b:ab:a2:36:ea:34:f0:4e:20:5d:76:1f:9f:fc:6f:
68:c4:30:78:36:32:89:6d:f3:86:60:58:48:64:84:0f:9f:bf:
dc:1f:3b:0a:50:95:46:09:8c:aa:4a:cb:ee:cd:c4:7f:a7:71:
df:7c:e7:bb:a1:0b:43:6c:e3:43:8e:89:77:99:9e:d2:c3:f8:
dd:3b:6c:02:be:d9:78:ec:10:0d:16:0a:de:eb:fa:ed:a2:e6:
2b:a9:54:f2:c3:73:9f:a3:72:41:e6:d8:5c:43:ec:6e:93:a0:
d1:1b:01:b0:64:35:4f:29:9f:a8:62:67:2d:41:98:d0:c7:a1:
51:b8:df:0d:bd:db:b2:af:ab:3b:ce:f1:7b:09:05:de:b8:b6:
32:8f:cb:76:a0:62:89:85:ba:99:47:70:cf:f0:97:8b:b8:98:
41:c5:27:61:7d:7a:f7:ae:5f:ce:46:79:7d:53:0e:79:14:eb:
99:53:a5:2a:03:8a:26:bb:f7:be:7b:5f:06:6d:c4:9c:d6:e3:
a0:a8:b9:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6+s55PnlhEpFzd2nZppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjYwMzI5MDgwMDIwWhcNMjYwMzMwMDgwMDIwWjAzMTEwLwYDVQQD
EygwYmFmMWVkNzdmZDBjYWExZjY0MDMwYzk2YzY0NzIyOGIzMmI3YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ4uWusrzbWPv7zzHkp949kPXAYq
1fdXqq46CYeWS6L2Z+QJ622mQF7kTT1DdBesPVBihelU/HRjPEsYE+dHIOdbVALI
92/NQw/+VxHGFASSpslroNHVumxfR05VONK/ij7Nd0fD25qMrtrWoXp9YVZGLA7G
uAysdqPvuDa7+0HAlPDIddXirwcUalA22Kzet52rbx4NCQ6nJFx/ezRzCl25bAfO
ewGmya2Gz+Dd+XbJ2jj6k8pFnHaiG8Lw7cosS3OwetaGDC839P46El3rKQ0oafoD
Y1O8zUBUu2ynrCsELvphPI6N1axEXyj90u9tdN3fR54TY98GDyr0yCnNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuvHtd/0Mqh9kAwyWxkciizK3u6MB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJreDYKgW
Bz4EJQDs2v2ujd52bjcJR7JcZYIxtALDT22RNHrtihKRqdZ2rawhWBvbk3tTmiLy
KUzzW6uiNuo08E4gXXYfn/xvaMQweDYyiW3zhmBYSGSED5+/3B87ClCVRgmMqkrL
7s3Ef6dx33znu6ELQ2zjQ46Jd5me0sP43TtsAr7ZeOwQDRYK3uv67aLmK6lU8sNz
n6NyQebYXEPsbpOg0RsBsGQ1TymfqGJnLUGY0MehUbjfDb3bsq+rO87xewkF3ri2
Mo/LdqBiiYW6mUdwz/CXi7iYQcUnYX16965fzkZ5fVMOeRTrmVOlKgOKJrv3vntf
Bm3EnNbjoKi5XA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:14 2026 by rpki-client