Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
File: yZjCo92k9OyII3In9dqlkw3uZ-U.mft (raw, json)
Hash identifier: /u0kJvK4TM8XcaSvp6z6p+Uu/hkocrDMeIiP9QSzsFg=
Subject key identifier: 94:2F:10:E0:2D:B3:18:26:1C:B7:26:66:FD:2E:5B:A6:16:02:82:AD
Authority key identifier: C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
Certificate issuer: /CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Certificate serial: 019D3A53E320AAE42DC00F83363AEBE9EF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
Manifest number: 01E1
Signing time: Sun 29 Mar 2026 16:01:09 +0000
Manifest this update: Sun 29 Mar 2026 16:01:09 +0000
Manifest next update: Mon 30 Mar 2026 16:01:09 +0000
Files and hashes: 1: yZjCo92k9OyII3In9dqlkw3uZ-U.crl (hash: N6LIiBfp+RQ5Gxopzfg6F1n5dJHNmKSywlLK/xLqsck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e3:20:aa:e4:2d:c0:0f:83:36:3a:eb:e9:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Validity
Not Before: Mar 29 16:01:09 2026 GMT
Not After : Mar 30 16:01:09 2026 GMT
Subject: CN=942f10e02db318261cb72666fd2e5ba6160282ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:78:2c:0f:69:62:b6:bd:7e:a1:40:43:37:
a2:c4:d5:91:9d:20:6a:13:48:bd:28:48:dc:de:62:
6c:34:ed:0c:1b:3d:9d:74:88:96:b7:ad:e0:b6:ee:
ca:a2:d7:6a:b6:26:fd:9d:25:1a:bb:fa:da:0e:64:
c9:fc:b9:3e:28:b7:6c:0a:cc:18:32:15:80:23:25:
c9:15:fe:d2:a9:f2:5e:08:34:a2:c3:cd:3e:67:b4:
23:1c:06:7a:00:70:e7:cb:18:1f:27:8b:2a:87:85:
fa:05:7f:e0:ac:f8:59:0a:c9:0b:cf:5b:83:98:af:
af:e5:b5:f1:cc:9a:66:55:f1:bc:93:59:b3:c7:d8:
49:a2:ac:b2:58:a2:90:f7:1a:af:c8:ca:7f:58:e4:
af:9d:d8:c7:72:69:9b:10:bc:24:95:95:a7:cb:4d:
23:0b:f5:06:bf:ed:bc:8e:c7:19:4e:eb:05:51:25:
c9:41:7b:12:4a:a6:fd:b8:e0:61:69:61:68:93:c6:
03:e0:f1:17:ab:a4:b8:48:d6:1e:2a:dc:c2:7a:49:
0a:e4:de:68:ee:fb:47:2c:77:fe:8b:3a:fa:6a:e6:
74:55:d9:0c:5d:f0:a1:9d:2d:db:2b:8d:77:d8:3c:
68:91:d4:3d:6b:0b:8f:10:b0:eb:72:29:86:cf:f7:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2F:10:E0:2D:B3:18:26:1C:B7:26:66:FD:2E:5B:A6:16:02:82:AD
X509v3 Authority Key Identifier:
keyid:C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1e:3f:46:24:92:d7:7e:8f:68:7c:e5:ad:2b:34:6f:ce:78:
08:e4:0a:14:7a:43:55:01:63:ec:9e:27:31:f0:6d:b4:ac:ea:
72:3d:48:65:c4:60:d8:96:30:40:5c:40:99:a6:c7:e5:13:09:
2b:52:42:da:bb:83:b3:9c:08:c7:e6:00:bd:03:88:c5:cd:2e:
5a:3d:b2:de:74:6e:09:f3:f6:ac:19:28:01:78:97:bb:f4:78:
cb:9a:0c:35:5f:b7:27:ad:2d:13:d1:2a:9d:64:66:b9:59:10:
2c:50:05:34:f1:67:4f:c4:8f:e7:fa:f6:ac:07:92:9e:70:f6:
83:dd:e1:1a:29:5f:89:4e:2b:ae:19:5f:f7:75:34:e3:2b:17:
31:35:d6:d8:8e:c8:35:45:49:22:cf:58:fd:58:b5:26:8c:6d:
70:6a:ae:8e:6d:1d:20:20:d2:21:3c:fd:ea:ae:3d:af:b1:78:
9d:5c:54:5d:94:70:2a:33:f2:e1:84:f5:a9:7e:df:64:a1:e2:
68:3a:42:dd:b6:a4:18:d5:04:23:de:82:7d:69:82:dc:33:e9:
5a:f3:5f:ee:42:54:22:10:75:d6:01:41:24:7e:34:8a:d1:6b:
da:89:b7:37:14:b8:79:fe:f4:fb:56:e4:0a:85:26:e4:87:2f:
bb:b8:72:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U+MgquQtwA+DNjrr6e+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OThjMmEzZGRhNGY0ZWM4ODIzNzIyN2Y1ZGFhNTkzMGRl
ZTY3ZTUwHhcNMjYwMzI5MTYwMTA5WhcNMjYwMzMwMTYwMTA5WjAzMTEwLwYDVQQD
Eyg5NDJmMTBlMDJkYjMxODI2MWNiNzI2NjZmZDJlNWJhNjE2MDI4MmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZ4LA9pYra9fqFAQzeixNWRnSBq
E0i9KEjc3mJsNO0MGz2ddIiWt63gtu7Kotdqtib9nSUau/raDmTJ/Lk+KLdsCswY
MhWAIyXJFf7SqfJeCDSiw80+Z7QjHAZ6AHDnyxgfJ4sqh4X6BX/grPhZCskLz1uD
mK+v5bXxzJpmVfG8k1mzx9hJoqyyWKKQ9xqvyMp/WOSvndjHcmmbELwklZWny00j
C/UGv+28jscZTusFUSXJQXsSSqb9uOBhaWFok8YD4PEXq6S4SNYeKtzCekkK5N5o
7vtHLHf+izr6auZ0VdkMXfChnS3bK4132DxokdQ9awuPELDrcimGz/eY5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQvEOAtsxgmHLcmZv0uW6YWAoKtMB8GA1UdIwQY
MBaAFMmYwqPdpPTsiCNyJ/XapZMN7mflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMt
MWU0YmJjZmJhMjEwLzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMtMWU0YmJjZmJhMjEw
LzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh4/RiSS
136PaHzlrSs0b854COQKFHpDVQFj7J4nMfBttKzqcj1IZcRg2JYwQFxAmabH5RMJ
K1JC2ruDs5wIx+YAvQOIxc0uWj2y3nRuCfP2rBkoAXiXu/R4y5oMNV+3J60tE9Eq
nWRmuVkQLFAFNPFnT8SP5/r2rAeSnnD2g93hGilfiU4rrhlf93U04ysXMTXW2I7I
NUVJIs9Y/Vi1JoxtcGqujm0dICDSITz96q49r7F4nVxUXZRwKjPy4YT1qX7fZKHi
aDpC3bakGNUEI96CfWmC3DPpWvNf7kJUIhB11gFBJH40itFr2om3NxS4ef70+1bk
CoUm5Icvu7hyyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:26 2026 by rpki-client