Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: MhNhg6kEDQZdu68lToOek1mBh0JK3zp3ESxr0qqiBn8=
Subject key identifier: 21:A1:39:07:9A:56:4F:23:E2:04:BE:96:28:29:0F:9D:50:82:CE:B8
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019CE5C87E14A531B8FC5580B3821F0EF2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 08CB
Signing time: Fri 13 Mar 2026 06:00:47 +0000
Manifest this update: Fri 13 Mar 2026 06:00:47 +0000
Manifest next update: Sat 14 Mar 2026 06:00:47 +0000
Files and hashes: 1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: YP8NHy/bsvSXlU3xdJIc0hZhstUwyX9pZs2Tg1zcqgs=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:7e:14:a5:31:b8:fc:55:80:b3:82:1f:0e:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Mar 13 06:00:47 2026 GMT
Not After : Mar 14 06:00:47 2026 GMT
Subject: CN=21a139079a564f23e204be9628290f9d5082ceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:7e:ff:28:91:b6:5a:8c:40:4b:00:f7:f9:
07:b3:a1:5a:08:63:3d:4a:17:b8:f2:a9:c1:7f:90:
ad:fc:cf:47:be:25:b3:da:1e:18:ae:8c:cf:75:9f:
8a:fd:5d:51:cf:f2:84:2c:7a:18:c2:f1:97:6d:22:
e8:56:a7:97:aa:3d:88:fc:0f:03:6c:e1:65:c9:66:
9b:ec:e7:d0:7e:6b:7d:5e:b9:6e:d4:11:3a:95:90:
28:b0:5d:cb:52:6e:91:bd:03:54:a0:d3:c7:fd:a8:
6e:26:6a:92:1f:52:aa:5d:7e:6a:48:8f:2e:ff:84:
98:0a:b8:e8:9a:19:57:cd:07:8a:47:6c:af:ab:f8:
fb:bc:33:eb:40:50:1f:6e:5f:8d:5b:47:85:a5:c7:
bf:02:b8:a4:c1:fd:b1:b9:92:d3:4e:24:07:ef:d4:
cd:d3:d3:b2:f1:f3:4f:42:bc:ce:0e:aa:21:dd:ab:
c7:0d:a7:3c:fb:d8:9b:26:b1:f5:ea:74:c9:94:04:
ae:e6:cc:2e:45:5c:59:ac:53:e7:89:1e:3b:de:0d:
68:b1:22:02:d7:15:5b:64:56:34:ab:fd:eb:24:74:
59:06:2a:c0:f2:59:54:7c:0f:54:7a:13:76:b6:5e:
26:f4:c8:10:7c:2d:f4:0d:f3:d9:0b:5c:d2:ee:67:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:39:07:9A:56:4F:23:E2:04:BE:96:28:29:0F:9D:50:82:CE:B8
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:e5:88:42:86:96:e0:6f:bc:28:5f:55:e3:29:c3:5a:2d:
cb:ac:ae:a3:44:45:44:86:5c:c0:63:87:e6:34:4c:5c:7d:6c:
ad:ad:89:78:d9:36:af:01:9e:5e:cc:d7:00:fa:e8:34:84:58:
14:1a:86:83:ed:19:df:e7:ef:a0:f8:e9:28:e6:e9:96:31:64:
8d:38:55:22:7e:9c:2e:39:eb:58:d1:b0:bd:aa:23:30:37:7f:
55:17:01:b2:56:d0:86:99:6a:6b:46:ea:5a:ee:1b:ad:f1:3e:
21:b1:a1:00:72:0a:5f:32:2e:87:bb:7f:77:2a:86:fc:05:66:
5c:ca:97:97:2b:d5:c9:f4:c2:b4:8e:02:72:ae:2a:8e:ea:27:
d4:b7:49:f8:51:40:4b:bd:f9:87:12:97:a4:96:c5:a3:67:17:
d4:ea:29:2a:83:17:8b:a3:fc:41:c6:fc:a9:7c:6f:2b:19:9b:
2c:a9:f2:f1:25:6b:43:57:87:75:07:15:66:23:e8:63:4c:20:
32:a2:0f:12:e7:48:4a:2b:59:b9:74:f9:a1:07:61:53:24:f1:
de:04:7b:0e:32:8c:8e:6d:39:75:31:80:ba:e4:d8:ae:12:66:
08:75:3b:4b:7d:88:3e:9f:24:e7:5d:c7:e8:55:9d:26:e9:cd:
98:3a:d6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyH4UpTG4/FWAs4IfDvLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjYwMzEzMDYwMDQ3WhcNMjYwMzE0MDYwMDQ3WjAzMTEwLwYDVQQD
EygyMWExMzkwNzlhNTY0ZjIzZTIwNGJlOTYyODI5MGY5ZDUwODJjZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBt+/yiRtlqMQEsA9/kHs6FaCGM9
She48qnBf5Ct/M9HviWz2h4YrozPdZ+K/V1Rz/KELHoYwvGXbSLoVqeXqj2I/A8D
bOFlyWab7OfQfmt9Xrlu1BE6lZAosF3LUm6RvQNUoNPH/ahuJmqSH1KqXX5qSI8u
/4SYCrjomhlXzQeKR2yvq/j7vDPrQFAfbl+NW0eFpce/Arikwf2xuZLTTiQH79TN
09Oy8fNPQrzODqoh3avHDac8+9ibJrH16nTJlASu5swuRVxZrFPniR473g1osSIC
1xVbZFY0q/3rJHRZBirA8llUfA9UehN2tl4m9MgQfC30DfPZC1zS7mf41wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGhOQeaVk8j4gS+ligpD51Qgs64MB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRXliEKG
luBvvChfVeMpw1oty6yuo0RFRIZcwGOH5jRMXH1sra2JeNk2rwGeXszXAProNIRY
FBqGg+0Z3+fvoPjpKObpljFkjThVIn6cLjnrWNGwvaojMDd/VRcBslbQhplqa0bq
Wu4brfE+IbGhAHIKXzIuh7t/dyqG/AVmXMqXlyvVyfTCtI4Ccq4qjuon1LdJ+FFA
S735hxKXpJbFo2cX1OopKoMXi6P8Qcb8qXxvKxmbLKny8SVrQ1eHdQcVZiPoY0wg
MqIPEudISitZuXT5oQdhUyTx3gR7DjKMjm05dTGAuuTYrhJmCHU7S32IPp8k513H
6FWdJunNmDrWsQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:47 2026 by rpki-client