Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: 0CMqr2IVhGru+ADJoBvaM1So8k+GMwWWztTezh7pMXs=
Subject key identifier: EF:51:49:9A:05:15:EE:D2:58:FC:C1:29:AA:DD:CD:E6:09:7F:87:1F
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019D38D3BD7000C096398F66DBBEB51CE1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 14EE
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: uaLPOCQi/RCR7RH/SOFiZAHRvOfdRQ9kJNpdlRPSHqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bd:70:00:c0:96:39:8f:66:db:be:b5:1c:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=ef51499a0515eed258fcc129aaddcde6097f871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:7b:d4:be:de:42:83:cf:40:0f:19:50:6e:
3c:ee:e2:6d:c1:05:20:b2:1d:68:c9:63:22:36:67:
7b:3d:77:b5:b4:a3:10:dd:cd:d6:8d:bb:52:64:3a:
4f:fe:c6:99:ab:3d:2f:59:bd:f3:2e:47:ea:77:c7:
00:eb:3c:10:6d:37:4f:d5:85:b6:0a:82:54:23:10:
4d:91:ef:1f:bd:cb:0c:a5:4c:d6:84:97:ce:75:a8:
0e:8e:8b:1f:fb:67:51:ac:8e:ad:ce:cf:47:40:82:
70:1b:17:0c:26:f2:cf:20:71:fc:04:ad:27:c7:e9:
20:51:c0:b6:87:2d:91:0b:f9:28:40:76:5a:8a:74:
26:77:72:af:2a:8b:34:5f:96:8b:cd:a7:5c:b1:35:
ed:fb:4e:43:89:3c:3a:ce:20:47:c9:5f:cd:73:a2:
62:ee:5c:1e:72:5f:d1:72:96:18:ae:d6:f3:51:01:
e2:62:d0:36:bf:9d:c3:e4:98:5f:90:b8:52:6a:3a:
8d:49:35:d6:a5:8e:af:e5:27:8b:40:f0:c1:f8:be:
8a:d9:9a:27:3b:f8:e9:e0:5a:b2:46:32:aa:e5:ad:
19:c0:36:82:a3:69:bc:8b:c7:ed:ce:63:16:be:d6:
81:ad:66:d4:b8:1f:ef:09:9d:39:e5:32:34:93:92:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:49:9A:05:15:EE:D2:58:FC:C1:29:AA:DD:CD:E6:09:7F:87:1F
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:51:93:ef:93:84:02:b0:d2:4c:11:44:0d:7e:a5:24:f0:fb:
6a:7d:23:bc:55:bc:7c:2d:ea:15:9a:52:12:12:07:a1:33:05:
c2:b9:e1:59:7e:12:24:02:d0:f5:00:c4:8f:95:8e:fc:d5:48:
10:61:c3:d1:e3:cf:bc:e2:80:90:dd:d8:de:d3:91:5b:f1:24:
a7:d3:d3:29:78:38:82:1e:8e:cd:cf:dc:6a:27:bf:8b:b1:76:
82:57:82:22:13:82:85:08:a1:66:4d:e8:36:07:a9:fc:f7:d8:
e1:d7:32:cd:11:da:b5:f6:7c:ae:9a:9d:95:11:2f:b9:ab:cc:
e6:c6:32:f5:c4:6f:61:31:05:fa:85:7f:e1:72:74:ed:2e:1e:
3a:3d:21:28:e0:d3:03:e2:c4:c2:12:f5:8a:c6:db:b3:17:78:
38:e3:21:41:ee:c6:69:2e:a7:9e:31:a1:10:52:ca:81:63:d3:
38:56:c4:d5:ab:0c:40:1e:88:18:97:0b:17:46:57:60:84:e6:
4b:47:bd:b5:76:22:6c:08:59:69:12:51:77:a6:3a:56:42:16:
c1:3d:7c:cd:c6:08:0d:2f:bf:86:78:33:50:d3:70:df:dd:e0:
36:2c:cd:61:0e:88:94:9c:07:41:28:e3:b2:03:e2:02:a2:fa:
bb:13:be:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04071wAMCWOY9m2761HOGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2
Mzk4OTgwHhcNMjYwMzI5MDkwMTMzWhcNMjYwMzMwMDkwMTMzWjAzMTEwLwYDVQQD
EyhlZjUxNDk5YTA1MTVlZWQyNThmY2MxMjlhYWRkY2RlNjA5N2Y4NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O571L7eQoPPQA8ZUG487uJtwQUg
sh1oyWMiNmd7PXe1tKMQ3c3WjbtSZDpP/saZqz0vWb3zLkfqd8cA6zwQbTdP1YW2
CoJUIxBNke8fvcsMpUzWhJfOdagOjosf+2dRrI6tzs9HQIJwGxcMJvLPIHH8BK0n
x+kgUcC2hy2RC/koQHZainQmd3KvKos0X5aLzadcsTXt+05DiTw6ziBHyV/Nc6Ji
7lwecl/RcpYYrtbzUQHiYtA2v53D5JhfkLhSajqNSTXWpY6v5SeLQPDB+L6K2Zon
O/jp4FqyRjKq5a0ZwDaCo2m8i8ftzmMWvtaBrWbUuB/vCZ055TI0k5JI5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9RSZoFFe7SWPzBKardzeYJf4cfMB8GA1UdIwQY
MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt
NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl
LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1GT75OE
ArDSTBFEDX6lJPD7an0jvFW8fC3qFZpSEhIHoTMFwrnhWX4SJALQ9QDEj5WO/NVI
EGHD0ePPvOKAkN3Y3tORW/Ekp9PTKXg4gh6Ozc/caie/i7F2gleCIhOChQihZk3o
Ngep/PfY4dcyzRHatfZ8rpqdlREvuavM5sYy9cRvYTEF+oV/4XJ07S4eOj0hKODT
A+LEwhL1isbbsxd4OOMhQe7GaS6nnjGhEFLKgWPTOFbE1asMQB6IGJcLF0ZXYITm
S0e9tXYibAhZaRJRd6Y6VkIWwT18zcYIDS+/hngzUNNw393gNizNYQ6IlJwHQSjj
sgPiAqL6uxO+NA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:29 2026 by rpki-client