Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: 9Qt+raR+zwTpCG1Ahxhb85VClFCQgDAF19stKEg6e5c=
Subject key identifier: 1E:01:55:F5:49:29:E7:DE:1F:2A:7A:3D:2B:FF:9B:A0:16:61:13:AE
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019D382E7970E6F34B272FF0ACC6F0981776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 1451
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 1Xm89aaBpVMV9cKG43MJiEDRyXM.roa (hash: xvK5vKdtM3Q6AqquyM/QFwGngU91NCTC/sOOpP25kiI=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: 354xkr0Xyd1S7ZlLXCUGl2V8G1kfFPaaqKLtcbh1A3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:79:70:e6:f3:4b:27:2f:f0:ac:c6:f0:98:17:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=1e0155f54929e7de1f2a7a3d2bff9ba0166113ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:d1:9a:25:d4:ce:3d:66:da:37:34:ec:26:
4d:6d:61:c1:f4:1f:fe:ce:f2:6a:91:46:c1:cc:a6:
14:91:af:85:a1:9a:1a:43:12:43:0e:74:ac:5d:bb:
84:f2:77:1e:63:d0:32:c7:a4:9d:5b:dd:c7:ff:5e:
ee:d6:74:bf:57:2f:d0:b0:c2:39:83:53:fc:18:d3:
87:cf:6e:4f:2b:06:2a:9f:e3:28:31:1f:cc:7a:03:
14:b1:ed:0d:1b:ed:bc:11:04:ce:c8:a2:da:1b:19:
ca:a5:da:ff:c5:f2:8a:4b:62:da:a4:c6:2e:bc:08:
65:9f:67:5a:6f:9f:cc:ca:1b:5f:1f:32:a9:a4:b7:
5b:6e:b7:8a:a7:13:87:6d:ef:3c:96:70:19:14:38:
57:ce:cc:c8:54:76:66:28:47:03:a9:cc:7d:f7:ce:
3f:92:99:25:bd:67:da:71:6f:77:3f:21:5d:8b:c3:
8d:b4:f6:e2:e4:0f:d7:bf:36:d1:c0:e7:cb:b5:04:
02:48:bd:54:90:8d:4f:c4:61:1b:62:bf:45:85:73:
c8:7e:04:5e:8e:a1:83:1e:14:47:f7:21:73:af:52:
9e:2e:c9:4e:8d:d9:a2:62:b4:88:ea:69:a1:ac:4d:
4e:54:48:9c:a0:e2:9f:7d:98:b1:3c:5b:a8:ee:77:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:01:55:F5:49:29:E7:DE:1F:2A:7A:3D:2B:FF:9B:A0:16:61:13:AE
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:6d:83:87:ec:f6:b5:ea:29:5b:28:ca:56:34:48:46:56:
8f:c6:a1:71:ae:cd:e5:c2:9d:b6:2a:b0:ff:64:4e:62:8b:33:
21:36:16:0f:7a:d2:32:e0:79:96:ba:6a:cd:e3:c2:62:b7:7c:
70:f2:e6:51:12:6a:da:1a:0e:b0:84:d9:c1:e3:2e:68:8a:7c:
31:d4:1a:70:a4:fa:bf:2a:68:e1:4f:39:fc:2e:26:1f:74:a6:
5e:01:15:aa:8c:5e:05:66:65:e5:0e:2a:a7:4c:60:c5:53:cf:
de:52:5c:f7:06:2e:cd:9b:79:7c:32:d1:d4:f5:16:c4:50:97:
e8:b9:5e:c9:85:c3:d0:26:8e:61:82:86:9a:f3:50:a5:7e:eb:
e8:d0:44:ac:28:5c:8a:67:2e:d5:35:5b:ea:0b:c0:91:a8:18:
07:02:1e:5c:90:dc:af:8e:ff:e9:42:aa:63:e6:79:f1:7a:99:
ff:0e:ad:0a:ea:af:08:ed:9e:38:f8:c8:61:7e:f3:16:71:b7:
33:57:1c:95:0a:67:72:9e:72:79:bb:ff:8f:b3:24:da:73:62:
63:30:1c:e0:40:6c:60:c3:c4:12:36:7f:d0:49:fb:eb:5b:db:
2c:a9:32:4f:55:1b:d9:dc:56:15:7c:6a:2d:10:d9:b8:23:98:
62:16:d0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lnlw5vNLJy/wrMbwmBd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw
NThlNjkwHhcNMjYwMzI5MDYwMTAyWhcNMjYwMzMwMDYwMTAyWjAzMTEwLwYDVQQD
EygxZTAxNTVmNTQ5MjllN2RlMWYyYTdhM2QyYmZmOWJhMDE2NjExM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomrRmiXUzj1m2jc07CZNbWHB9B/+
zvJqkUbBzKYUka+FoZoaQxJDDnSsXbuE8nceY9Ayx6SdW93H/17u1nS/Vy/QsMI5
g1P8GNOHz25PKwYqn+MoMR/MegMUse0NG+28EQTOyKLaGxnKpdr/xfKKS2LapMYu
vAhln2dab5/MyhtfHzKppLdbbreKpxOHbe88lnAZFDhXzszIVHZmKEcDqcx9984/
kpklvWfacW93PyFdi8ONtPbi5A/XvzbRwOfLtQQCSL1UkI1PxGEbYr9FhXPIfgRe
jqGDHhRH9yFzr1KeLslOjdmiYrSI6mmhrE1OVEicoOKffZixPFuo7nfvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4BVfVJKefeHyp6PSv/m6AWYROuMB8GA1UdIwQY
MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt
ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl
LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmChtg4fs
9rXqKVsoylY0SEZWj8ahca7N5cKdtiqw/2ROYoszITYWD3rSMuB5lrpqzePCYrd8
cPLmURJq2hoOsITZweMuaIp8MdQacKT6vypo4U85/C4mH3SmXgEVqoxeBWZl5Q4q
p0xgxVPP3lJc9wYuzZt5fDLR1PUWxFCX6LleyYXD0CaOYYKGmvNQpX7r6NBErChc
imcu1TVb6gvAkagYBwIeXJDcr47/6UKqY+Z58XqZ/w6tCuqvCO2eOPjIYX7zFnG3
M1cclQpncp5yebv/j7Mk2nNiYzAc4EBsYMPEEjZ/0En761vbLKkyT1Ub2dxWFXxq
LRDZuCOYYhbQ6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:51 2026 by rpki-client