Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier: 7v6P9iFxR4b7l06GmW0YWCpSQ+PfE2H0XJEmoyY7kgI=
Subject key identifier: FD:3F:C1:97:A8:09:68:4F:2D:94:51:AC:97:F7:B3:C3:FA:3D:DB:95
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial: 019D371BF76667B5936F0A7FFAC21AFF03AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number: 032C
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: uRVZk3xeEH2UDSiV2e9ZkSAlJ2oLnDE2ZK7Bd4Dlz5I=)
2: sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa (hash: SJvy+b4frEQGMy5gxf3VawAH0CiFxMKXegFK+YmGabE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f7:66:67:b5:93:6f:0a:7f:fa:c2:1a:ff:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=fd3fc197a809684f2d9451ac97f7b3c3fa3ddb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:0c:dd:42:d0:74:d0:f5:a6:b6:9d:d1:e4:
70:c4:76:21:1d:83:2e:d3:15:2f:1e:d6:cd:3b:d3:
b8:10:e5:9f:e5:e6:77:b8:bc:18:b7:b2:52:1a:5a:
46:9d:b9:71:1d:0c:00:84:6e:6c:10:69:d3:0c:ab:
93:2c:c3:92:bb:eb:b6:fa:3a:6d:f2:94:b9:eb:37:
66:9d:fc:2b:7a:6e:82:73:36:14:0f:a9:17:7d:b9:
67:59:ce:c6:e9:8a:b1:2e:f3:1f:3d:f9:7b:88:4d:
e9:a5:fa:e2:c5:1c:b2:23:8b:c7:90:bf:54:7b:ba:
cf:a2:5e:63:7b:e6:2f:c1:61:5b:1f:80:91:25:78:
16:11:24:af:d2:20:a2:f1:f0:f4:58:1d:ef:12:f1:
34:b0:ee:83:bb:7e:c2:47:89:38:12:71:54:bc:e4:
9e:04:75:a1:7f:82:f3:b9:62:3f:10:15:8a:8e:5e:
7a:8a:3a:ad:32:e8:5a:76:02:7a:22:63:0e:16:2d:
f7:ed:ce:82:8c:96:59:75:38:81:5c:ab:17:a3:b2:
f8:2b:01:fd:4b:7c:69:43:ce:02:40:39:fe:87:29:
82:b6:e2:91:e1:2e:41:cf:11:49:35:fd:0e:51:04:
aa:e7:bb:5d:72:7f:af:9b:33:15:04:af:13:af:38:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:C1:97:A8:09:68:4F:2D:94:51:AC:97:F7:B3:C3:FA:3D:DB:95
X509v3 Authority Key Identifier:
keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ca:8f:26:b9:e5:26:d3:2b:e9:ad:58:7e:b6:1e:22:06:c0:
81:54:63:94:d5:e7:4d:9e:68:42:15:6f:66:10:4a:4d:de:7a:
4b:d2:b9:57:1e:00:4a:32:cc:e8:79:60:ca:b3:7d:ae:7f:88:
83:5f:eb:aa:a8:c1:77:76:7d:c2:7c:42:6d:e7:16:55:e4:8d:
a2:7d:a2:cc:19:3e:2c:22:8b:54:e1:18:92:32:25:13:9c:58:
b2:4d:87:53:38:2d:b1:a8:f9:57:43:b4:2d:56:3e:98:e7:8d:
a2:6b:29:cd:43:fa:a6:a6:2d:d2:85:12:03:f4:21:dc:4f:28:
41:04:e4:62:00:aa:ef:a1:a2:ee:34:3e:3a:78:7b:bd:28:5b:
e6:ba:1a:40:7b:17:f5:74:36:19:26:f2:de:8b:8b:8d:79:84:
af:6a:cd:bb:b9:23:e2:c1:a0:98:b9:66:8b:f8:ed:15:07:82:
10:0f:28:f3:26:3f:2f:de:cf:f5:34:8c:93:52:d1:32:8e:a9:
95:e6:5b:25:2f:40:24:a4:56:b4:95:0d:b4:60:c8:54:57:b7:
19:87:57:2e:5e:a8:76:43:34:42:7d:3c:1e:b2:23:1a:9c:b5:
2b:9f:3a:02:cd:4b:5a:42:04:18:ab:61:04:a8:b1:ea:4e:b0:
99:ff:67:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/dmZ7WTbwp/+sIa/wOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWU5Y2ZhMmQ2NWI0MTU0MmQzN2VlZmYxZDFjNmMzODdh
YWExYjUwHhcNMjYwMzI5MDEwMTEyWhcNMjYwMzMwMDEwMTEyWjAzMTEwLwYDVQQD
EyhmZDNmYzE5N2E4MDk2ODRmMmQ5NDUxYWM5N2Y3YjNjM2ZhM2RkYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA724M3ULQdND1prad0eRwxHYhHYMu
0xUvHtbNO9O4EOWf5eZ3uLwYt7JSGlpGnblxHQwAhG5sEGnTDKuTLMOSu+u2+jpt
8pS56zdmnfwrem6CczYUD6kXfblnWc7G6YqxLvMfPfl7iE3ppfrixRyyI4vHkL9U
e7rPol5je+YvwWFbH4CRJXgWESSv0iCi8fD0WB3vEvE0sO6Du37CR4k4EnFUvOSe
BHWhf4LzuWI/EBWKjl56ijqtMuhadgJ6ImMOFi337c6CjJZZdTiBXKsXo7L4KwH9
S3xpQ84CQDn+hymCtuKR4S5BzxFJNf0OUQSq57tdcn+vmzMVBK8TrziDXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0/wZeoCWhPLZRRrJf3s8P6PduVMB8GA1UdIwQY
MBaAFGGunPotZbQVQtN+7/HRxsOHqqG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEt
ZTkyOGVmNjQwZGY4LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEtZTkyOGVmNjQwZGY4
LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMqPJrnl
JtMr6a1YfrYeIgbAgVRjlNXnTZ5oQhVvZhBKTd56S9K5Vx4ASjLM6HlgyrN9rn+I
g1/rqqjBd3Z9wnxCbecWVeSNon2izBk+LCKLVOEYkjIlE5xYsk2HUzgtsaj5V0O0
LVY+mOeNomspzUP6pqYt0oUSA/Qh3E8oQQTkYgCq76Gi7jQ+Onh7vShb5roaQHsX
9XQ2GSby3ouLjXmEr2rNu7kj4sGgmLlmi/jtFQeCEA8o8yY/L97P9TSMk1LRMo6p
leZbJS9AJKRWtJUNtGDIVFe3GYdXLl6odkM0Qn08HrIjGpy1K586As1LWkIEGKth
BKix6k6wmf9nXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:41 2026 by rpki-client