Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier: WGwp2bufle1HsSvRjv1YJ4PlitJhfOg/K6+XfBFCS34=
Subject key identifier: 64:C2:E4:70:0B:50:42:22:85:DE:4F:E8:A6:92:15:68:CC:4C:3B:47
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 019D38664578AE5516052E61BD96DFAA8197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: 5NqTopSlII6JPE2Fkok92z49RLCotz+kKenzdLLbuas=)
2: zdnYCkiNuOv7XI-YYcTI782K0s4.roa (hash: K34FiGl2KBdBAOAH0emFvCcnnIpkLK1MVs53GxTVksQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:45:78:ae:55:16:05:2e:61:bd:96:df:aa:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=64c2e4700b50422285de4fe8a6921568cc4c3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:98:32:05:3d:30:d5:a0:e2:fb:1e:0a:db:
8f:2b:5f:5d:17:4f:31:b6:96:68:fa:6f:95:36:b2:
ec:db:76:36:74:e4:3c:cf:7d:fd:fa:ec:af:4f:f4:
26:d6:74:11:44:57:c4:3b:7f:d6:72:4c:99:82:d1:
60:54:e2:c2:05:35:ab:96:29:14:0b:4f:04:7d:b7:
8a:d5:04:30:ea:4c:f7:42:5e:35:2f:f6:48:f4:da:
b6:23:92:6a:4b:d3:80:74:01:69:5c:1d:e0:30:d2:
9e:d7:74:ce:16:5e:3e:2b:97:89:1f:78:b2:47:5d:
ab:9f:78:9d:78:d9:f3:db:c4:cf:13:1a:0c:a6:ab:
d8:40:4e:af:6c:6f:8a:9f:43:0d:bd:b4:c0:4b:f5:
2d:30:43:f8:e9:76:eb:71:91:bf:1f:92:2b:2d:ac:
33:44:78:74:6a:98:c1:6c:87:ff:b3:79:c1:7c:44:
10:c9:1e:63:26:55:1b:d2:a5:aa:04:23:cf:56:36:
67:01:16:e0:28:d5:f5:08:03:87:f6:3a:b7:e5:26:
d4:e0:2d:bb:fa:59:10:a7:17:d0:ab:18:fc:30:0f:
aa:43:c7:0a:5f:90:ed:54:d8:11:53:82:be:5a:61:
8d:42:97:fa:b7:53:5f:d3:0a:cb:03:19:6d:7a:28:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C2:E4:70:0B:50:42:22:85:DE:4F:E8:A6:92:15:68:CC:4C:3B:47
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f3:c1:cb:90:f7:04:8e:cd:3a:ff:d9:4a:d4:d8:87:61:d1:
bb:bb:df:15:59:3b:21:2f:b5:4c:81:7f:c7:e3:c2:34:f5:31:
40:61:70:c5:fa:83:1e:69:5e:31:e3:a3:47:11:6f:a6:27:68:
6f:18:79:71:e0:90:98:4b:38:9c:fc:17:cb:63:44:a2:5d:ab:
c3:fb:c9:76:6d:aa:2a:87:a1:2a:3a:e0:dc:6c:fc:13:58:fe:
43:b3:1c:0b:ae:51:52:73:5a:fd:d4:66:3b:ab:a8:eb:26:07:
74:77:d4:52:e9:d2:c2:51:54:3d:b6:b0:2a:d3:b3:8b:a1:ba:
c6:cf:e8:26:cb:13:3f:63:06:ff:59:df:d4:96:99:93:e3:50:
e8:a8:55:1d:6c:e8:31:68:2f:69:97:02:40:2c:9f:ca:27:1d:
ff:56:33:b4:d6:92:b2:c4:10:73:7a:73:ca:2d:ad:0b:f8:87:
d6:07:72:fc:e6:ee:f1:a1:4a:09:03:fa:2c:b5:3b:ab:e6:d2:
00:11:77:db:a0:18:51:40:40:f5:60:d2:e2:e5:3f:2e:17:bc:
60:e1:44:ac:7c:67:90:19:57:a1:75:a5:b7:89:cc:8f:62:aa:
8e:b0:29:75:9c:d3:ba:82:7b:f1:74:f6:37:e0:ee:56:ef:25:
9c:91:75:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkV4rlUWBS5hvZbfqoGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNWZiYmRmYzkwMWU4ZWIwZWNkMGRkM2Y0MDg1YzEyODlj
ZmVkZjcwHhcNMjYwMzI5MDcwMTU5WhcNMjYwMzMwMDcwMTU5WjAzMTEwLwYDVQQD
Eyg2NGMyZTQ3MDBiNTA0MjIyODVkZTRmZThhNjkyMTU2OGNjNGMzYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnyYMgU9MNWg4vseCtuPK19dF08x
tpZo+m+VNrLs23Y2dOQ8z339+uyvT/Qm1nQRRFfEO3/WckyZgtFgVOLCBTWrlikU
C08EfbeK1QQw6kz3Ql41L/ZI9Nq2I5JqS9OAdAFpXB3gMNKe13TOFl4+K5eJH3iy
R12rn3ideNnz28TPExoMpqvYQE6vbG+Kn0MNvbTAS/UtMEP46XbrcZG/H5IrLawz
RHh0apjBbIf/s3nBfEQQyR5jJlUb0qWqBCPPVjZnARbgKNX1CAOH9jq35SbU4C27
+lkQpxfQqxj8MA+qQ8cKX5DtVNgRU4K+WmGNQpf6t1Nf0wrLAxlteiilowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTC5HALUEIihd5P6KaSFWjMTDtHMB8GA1UdIwQY
MBaAFGFfu9/JAejrDs0N0/QIXBKJz+33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYt
NzljNzIyYzU0ZTE5LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYtNzljNzIyYzU0ZTE5
LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvPBy5D3
BI7NOv/ZStTYh2HRu7vfFVk7IS+1TIF/x+PCNPUxQGFwxfqDHmleMeOjRxFvpido
bxh5ceCQmEs4nPwXy2NEol2rw/vJdm2qKoehKjrg3Gz8E1j+Q7McC65RUnNa/dRm
O6uo6yYHdHfUUunSwlFUPbawKtOzi6G6xs/oJssTP2MG/1nf1JaZk+NQ6KhVHWzo
MWgvaZcCQCyfyicd/1YztNaSssQQc3pzyi2tC/iH1gdy/Obu8aFKCQP6LLU7q+bS
ABF326AYUUBA9WDS4uU/Lhe8YOFErHxnkBlXoXWlt4nMj2KqjrApdZzTuoJ78XT2
N+DuVu8lnJF1Hw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client