Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
File: YhBMyFNVHixMLSKBXsEcYMLVu8s.mft (raw, json)
Hash identifier: YjS3tNt6hweyp83Jw7AJ3ixOUppkJorDSdRTqkIqXyo=
Subject key identifier: B7:A6:8F:AB:DA:ED:E3:F1:1B:A3:C6:75:CF:91:AD:3A:8F:CE:12:3E
Authority key identifier: 62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB
Certificate issuer: /CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
Certificate serial: 019D37F7460373DBC14D98AE984A260B5C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
Manifest number: D3
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: T-rY0qRo1e14m28Gif45TSalcCQ.roa (hash: uqzM/eYecGektorBHHReJyonRfAQRMoZKQLvLEOFZIQ=)
2: YhBMyFNVHixMLSKBXsEcYMLVu8s.crl (hash: nj6gLhA9KbMwjAbruyLYGshxF6xxVW1qbaifBgFhVIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:46:03:73:db:c1:4d:98:ae:98:4a:26:0b:5c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=b7a68fabdaede3f11ba3c675cf91ad3a8fce123e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:14:06:a6:2e:c4:c1:aa:77:c2:d6:fe:ce:
f9:bb:8d:4e:84:e7:09:fb:c8:83:55:0c:f2:85:28:
d8:6f:f6:1b:a9:e8:b8:b5:41:14:ec:22:64:d5:75:
fe:66:0a:89:55:a3:e6:98:7b:6f:1d:48:a6:19:52:
02:af:4e:53:08:0e:b1:de:c4:57:e2:2d:f3:f9:53:
0e:cb:ea:96:68:f3:e0:14:44:be:28:04:12:59:55:
b9:83:d8:c5:11:fb:59:9a:9e:13:d1:0d:b6:6d:bd:
b3:d2:96:9f:43:5b:fe:25:63:9e:1a:e8:03:b3:38:
62:82:f2:80:cf:91:9d:a4:3d:21:f2:1d:1b:d1:ef:
5f:b4:c9:06:c3:fb:db:34:75:eb:c6:3d:e0:c2:c8:
c2:04:ac:50:3e:26:3a:77:98:61:6c:6f:7a:de:7d:
cb:02:db:ad:8d:d5:c9:27:f5:06:03:66:e0:0c:ca:
da:57:7a:8d:0d:7a:c3:d2:c5:b9:27:ee:de:8e:d3:
71:6e:4a:37:17:29:e3:db:f8:1f:cb:0a:60:b9:9a:
97:d6:a1:bb:7a:5a:a8:60:74:c3:41:3d:f6:b6:ad:
78:77:1f:88:d6:dc:0d:7b:8b:b0:eb:ce:ab:ae:76:
38:3e:0c:2f:1a:14:ba:4b:d8:51:e9:7b:cc:cb:9e:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:8F:AB:DA:ED:E3:F1:1B:A3:C6:75:CF:91:AD:3A:8F:CE:12:3E
X509v3 Authority Key Identifier:
keyid:62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:de:67:5f:0a:01:6a:ce:2e:e6:f4:32:a9:95:9a:b9:60:76:
04:32:a0:85:74:ea:36:ae:0f:fe:2a:c3:56:44:3b:a1:2d:e0:
2f:a9:99:6f:13:33:af:61:bb:f3:e9:b3:97:15:60:4b:d3:20:
fb:f8:70:c9:ce:1e:57:fb:ab:e7:4a:7d:f8:06:8f:7a:86:53:
ba:c9:6d:e5:64:3f:05:8f:d7:02:33:e8:ce:4b:60:98:cf:e4:
1c:39:ab:30:b2:7b:bb:ce:d9:6b:80:e4:07:67:8d:dd:e3:a7:
53:15:ea:e4:bd:d8:f7:e3:79:32:40:71:e1:4f:c0:95:14:f4:
d7:fd:23:a8:fd:2a:69:d8:55:d3:e9:7e:2d:9e:83:e5:8b:f9:
51:34:a9:c7:64:52:30:37:b4:22:4f:d9:9d:89:07:67:a8:d7:
ed:ed:b2:8d:f8:d0:d9:94:ea:9e:ca:b1:75:b1:40:5e:43:cf:
33:a6:43:8e:5e:2e:fc:af:78:e0:28:3c:90:a7:f3:a6:ef:6c:
04:68:45:5e:08:c8:21:24:f3:c9:d0:93:3e:56:5e:74:37:68:
a0:09:51:76:a2:be:20:3d:a7:5e:a6:60:7e:bc:35:f3:7a:84:
71:61:1c:d5:19:39:f0:f1:e9:37:8f:75:27:b4:15:66:ed:37:
05:01:6e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390YDc9vBTZiumEomC1xgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTA0Y2M4NTM1NTFlMmM0YzJkMjI4MTVlYzExYzYwYzJk
NWJiY2IwHhcNMjYwMzI5MDUwMDQ1WhcNMjYwMzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EyhiN2E2OGZhYmRhZWRlM2YxMWJhM2M2NzVjZjkxYWQzYThmY2UxMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP0UBqYuxMGqd8LW/s75u41OhOcJ
+8iDVQzyhSjYb/Ybqei4tUEU7CJk1XX+ZgqJVaPmmHtvHUimGVICr05TCA6x3sRX
4i3z+VMOy+qWaPPgFES+KAQSWVW5g9jFEftZmp4T0Q22bb2z0pafQ1v+JWOeGugD
szhigvKAz5GdpD0h8h0b0e9ftMkGw/vbNHXrxj3gwsjCBKxQPiY6d5hhbG963n3L
AtutjdXJJ/UGA2bgDMraV3qNDXrD0sW5J+7ejtNxbko3Fynj2/gfywpguZqX1qG7
elqoYHTDQT32tq14dx+I1twNe4uw686rrnY4PgwvGhS6S9hR6XvMy57ELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLemj6va7ePxG6PGdc+RrTqPzhI+MB8GA1UdIwQY
MBaAFGIQTMhTVR4sTC0igV7BHGDC1bvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhCTXlGTlZIaXhNTFNLQlhzRWNZTUxWdThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jYWFkMWQtOGU3ZC00NWQ0LTkwNzct
YTgwOTg3ZjJkY2Y1LzEvWWhCTXlGTlZIaXhNTFNLQlhzRWNZTUxWdThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jYWFkMWQtOGU3ZC00NWQ0LTkwNzctYTgwOTg3ZjJkY2Y1
LzEvWWhCTXlGTlZIaXhNTFNLQlhzRWNZTUxWdThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN5nXwoB
as4u5vQyqZWauWB2BDKghXTqNq4P/irDVkQ7oS3gL6mZbxMzr2G78+mzlxVgS9Mg
+/hwyc4eV/ur50p9+AaPeoZTuslt5WQ/BY/XAjPozktgmM/kHDmrMLJ7u87Za4Dk
B2eN3eOnUxXq5L3Y9+N5MkBx4U/AlRT01/0jqP0qadhV0+l+LZ6D5Yv5UTSpx2RS
MDe0Ik/ZnYkHZ6jX7e2yjfjQ2ZTqnsqxdbFAXkPPM6ZDjl4u/K944Cg8kKfzpu9s
BGhFXgjIISTzydCTPlZedDdooAlRdqK+ID2nXqZgfrw183qEcWEc1Rk58PHpN491
J7QVZu03BQFuxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:18 2026 by rpki-client