Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File: c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier: IhGwOPhYOsQHkG/itnBSSrIkgoz9mtC0dQ5x45Cme2Y=
Subject key identifier: 5A:45:1C:68:C3:C9:17:98:FC:F2:18:08:F9:23:D4:5B:10:02:1B:14
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer: /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial: 019D37C09B5C2F2DE73265D939E55D978BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number: 0CA3
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: Eyj/+TGhpYdjwZQXDPpxIxI5myHyH8eOv5bhLZt0qeM=)
2: xenNFJCmXjXG5F3kgOfPTRtR0L0.roa (hash: Rs1MjItgO+A6sueh9XicARxqQOJ7zkW0Gr1nwJ+Ebtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9b:5c:2f:2d:e7:32:65:d9:39:e5:5d:97:8b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=5a451c68c3c91798fcf21808f923d45b10021b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:50:e2:da:52:1e:65:da:65:fc:b2:8a:85:
bb:c9:88:95:ce:70:ab:b2:85:06:0c:c1:4e:19:2d:
92:9d:64:15:d5:cb:0e:c2:de:94:54:db:bc:df:8e:
1f:db:da:cb:27:02:03:8f:62:c3:36:50:b1:76:93:
ff:35:8a:31:eb:da:29:bd:99:01:65:e4:cd:1c:4c:
96:af:c1:ae:80:ef:2e:a5:2b:03:5a:24:af:46:c9:
60:59:ac:bc:0e:ea:8c:34:86:91:cf:5c:b8:24:a0:
fb:ee:70:c3:15:99:18:4c:2a:bd:7b:f7:b3:f6:a1:
d6:2b:fd:c5:8f:6d:e0:5a:9a:b7:5f:64:54:79:dd:
a8:26:5b:ce:38:0a:ad:56:c4:e6:8b:7d:a1:ac:15:
26:20:07:a0:05:2c:2b:6d:b1:d4:87:78:99:94:b1:
f9:64:39:85:e6:59:80:d2:a8:99:23:7a:69:82:c5:
9b:9b:28:67:49:cc:b2:a8:c5:e1:14:55:57:e8:86:
b6:5f:8e:99:70:22:59:a8:6a:67:5b:63:2b:81:1f:
25:f2:33:bd:78:a6:4d:34:d9:66:33:8e:45:77:bd:
14:dc:26:e2:07:d8:53:ea:15:fb:9e:f0:3e:de:e9:
dc:1c:de:c9:ea:52:f6:48:5b:01:b8:96:a5:11:b4:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:1C:68:C3:C9:17:98:FC:F2:18:08:F9:23:D4:5B:10:02:1B:14
X509v3 Authority Key Identifier:
keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:be:09:05:cd:37:9e:a4:b0:a0:62:71:fb:7f:f9:34:68:
66:2d:f6:73:00:69:25:76:e3:f1:bf:6b:34:a7:f5:fb:56:7a:
d0:62:df:46:e8:58:56:b2:6a:1f:98:d8:10:10:bb:9b:56:3a:
57:34:39:9b:b2:c6:8c:43:f7:c0:b9:02:14:7d:45:ca:fe:f8:
f8:f4:30:a9:2e:50:92:a8:1c:71:f8:c6:bb:29:42:e2:b9:49:
7b:56:d4:b9:fd:f9:ce:56:8f:76:51:6f:47:fe:3d:11:b9:f5:
c6:d7:c0:80:bb:4b:a4:2c:48:04:57:af:10:25:ca:b1:63:30:
d6:c6:c9:44:b0:27:b5:ca:82:ad:49:7e:b4:77:57:91:dd:e9:
f1:42:bb:92:26:26:27:d7:eb:c4:c0:02:fc:40:85:43:d9:5f:
4c:2b:01:88:3b:2d:36:e0:ed:77:06:f4:34:37:30:a0:40:4b:
5b:b5:00:d1:cd:01:ed:77:48:31:95:c4:13:f2:e3:45:05:e6:
88:d0:31:17:41:9c:7a:cc:76:45:9d:be:f2:dd:01:6b:b6:fa:
c4:85:0a:dd:d0:6a:24:b7:0d:a9:b9:d0:a0:8f:ae:e8:34:9b:
59:8d:23:f6:f3:da:48:6a:78:df:d5:48:dc:68:dd:cd:ee:ed:
84:82:5c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJtcLy3nMmXZOeVdl4v+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmM4OTAyM2VhYzc0YWIyOTg1NjNmOTlkZGI3MWY2ZjE1
Zjk1MzgwHhcNMjYwMzI5MDQwMTAyWhcNMjYwMzMwMDQwMTAyWjAzMTEwLwYDVQQD
Eyg1YTQ1MWM2OGMzYzkxNzk4ZmNmMjE4MDhmOTIzZDQ1YjEwMDIxYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RQ4tpSHmXaZfyyioW7yYiVznCr
soUGDMFOGS2SnWQV1csOwt6UVNu8344f29rLJwIDj2LDNlCxdpP/NYox69opvZkB
ZeTNHEyWr8GugO8upSsDWiSvRslgWay8DuqMNIaRz1y4JKD77nDDFZkYTCq9e/ez
9qHWK/3Fj23gWpq3X2RUed2oJlvOOAqtVsTmi32hrBUmIAegBSwrbbHUh3iZlLH5
ZDmF5lmA0qiZI3ppgsWbmyhnScyyqMXhFFVX6Ia2X46ZcCJZqGpnW2MrgR8l8jO9
eKZNNNlmM45Fd70U3CbiB9hT6hX7nvA+3uncHN7J6lL2SFsBuJalEbSMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpFHGjDyReY/PIYCPkj1FsQAhsUMB8GA1UdIwQY
MBaAFHP8iQI+rHSrKYVj+Z3bcfbxX5U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYt
NWRjZDgyZGVmODRmLzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTMwM2EtZjIyNS00YTNmLTgyNWYtNWRjZDgyZGVmODRm
LzEvY195SkFqNnNkS3NwaFdQNW5kdHg5dkZmbFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgW+CQXN
N56ksKBicft/+TRoZi32cwBpJXbj8b9rNKf1+1Z60GLfRuhYVrJqH5jYEBC7m1Y6
VzQ5m7LGjEP3wLkCFH1Fyv74+PQwqS5QkqgccfjGuylC4rlJe1bUuf35zlaPdlFv
R/49Ebn1xtfAgLtLpCxIBFevECXKsWMw1sbJRLAntcqCrUl+tHdXkd3p8UK7kiYm
J9frxMAC/ECFQ9lfTCsBiDstNuDtdwb0NDcwoEBLW7UA0c0B7XdIMZXEE/LjRQXm
iNAxF0Gcesx2RZ2+8t0Ba7b6xIUK3dBqJLcNqbnQoI+u6DSbWY0j9vPaSGp439VI
3Gjdze7thIJccA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client