Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: /XdxQyM7kFJAmr9dSsXemouIvCjvdneP7z6iLqY55+I=
Subject key identifier: 02:94:20:AF:D8:1B:BF:57:CE:94:C4:42:91:EC:3E:AA:BB:15:A5:5B
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 019D39AEE04DC0809C9B7AD748E5549A191E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 14AA
Signing time: Sun 29 Mar 2026 13:00:55 +0000
Manifest this update: Sun 29 Mar 2026 13:00:55 +0000
Manifest next update: Mon 30 Mar 2026 13:00:55 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: 93re/IJDuQvCpvBdKPVtAXjPcYC05GpHRKn43Ql/d78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e0:4d:c0:80:9c:9b:7a:d7:48:e5:54:9a:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Mar 29 13:00:55 2026 GMT
Not After : Mar 30 13:00:55 2026 GMT
Subject: CN=029420afd81bbf57ce94c44291ec3eaabb15a55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:64:83:56:88:6d:7d:20:48:83:57:e0:8a:
df:a3:bf:e6:51:e8:4e:d3:82:7d:98:b3:b3:05:88:
a8:81:45:bd:90:49:fa:52:c7:79:da:a0:85:3f:4a:
f0:7c:bc:e1:25:fe:63:0b:02:85:aa:b2:03:aa:85:
bb:82:aa:23:29:b5:49:ea:87:b1:c5:36:d2:f3:a8:
fa:2e:07:62:1f:7f:5b:36:0b:f0:7e:f9:7e:53:ce:
13:7e:a9:6d:fc:c9:1a:2c:4e:2c:9b:b0:5b:28:e8:
f7:37:c3:28:b6:dd:ae:59:92:8d:a7:a8:75:07:ae:
cc:2d:35:dc:74:4b:68:c3:0d:4f:0e:cc:fd:55:d6:
79:1b:e0:b7:ee:3d:48:c7:02:71:93:5c:2a:42:ef:
cd:8c:88:d9:9b:47:40:f0:e4:19:d9:cb:a7:d0:80:
5c:f7:4e:62:e7:0c:e8:86:83:5e:41:17:96:55:c2:
64:d7:0a:f4:2e:b9:57:4f:ca:4b:77:0d:c4:dc:76:
88:ae:e8:cf:42:ac:4a:3a:bc:ec:9e:3c:d7:bc:f3:
f3:f1:60:0b:91:2b:34:24:46:84:17:89:91:5a:8e:
51:47:cf:d5:a9:84:d1:42:63:4f:28:90:89:e4:af:
56:2a:68:85:61:23:a0:7a:3e:3c:7f:f5:f5:2e:52:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:20:AF:D8:1B:BF:57:CE:94:C4:42:91:EC:3E:AA:BB:15:A5:5B
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c1:be:b7:38:28:ab:c0:2c:82:2f:76:34:c0:90:e9:86:41:
ca:53:82:a4:f0:8b:8c:98:bc:50:82:3c:f0:64:42:eb:9b:ff:
d3:7f:e7:71:0a:ea:be:b0:d9:37:e2:ad:24:e1:a4:2e:d9:8d:
5a:e7:c7:40:75:47:2c:6e:f4:df:55:43:19:19:e8:00:cb:0d:
d8:24:49:8d:42:36:4a:ce:9b:46:7e:cc:13:18:62:b9:34:b7:
4d:e5:8d:24:f1:43:d2:e8:73:e6:3a:08:ed:cc:05:4c:f9:24:
23:20:a9:1b:88:79:a5:df:d0:d1:0d:6d:f8:54:e2:8d:4f:de:
5f:a5:9f:f1:3f:2f:74:a2:16:ab:11:dd:ea:1a:f1:c8:57:98:
32:91:e0:b3:84:73:08:f7:2b:c1:dd:2c:10:66:85:25:27:36:
2f:6a:92:26:ac:5e:61:fd:23:59:a9:9a:59:7e:a2:9f:a0:37:
26:12:dd:ee:7c:f0:f6:ba:38:32:97:e0:bb:a4:b8:6c:af:52:
c3:d0:75:4c:e4:33:8f:1d:29:90:9d:c6:fc:96:8a:be:58:37:
42:d1:0b:cb:df:ed:60:d6:c8:55:53:f6:08:7a:3d:63:a8:78:
48:1d:02:8c:f1:0b:42:3e:14:b6:1b:ec:43:43:cc:22:3d:68:
af:8a:eb:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ruBNwICcm3rXSOVUmhkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWE3OTQxZTBjMmM4NjEzMjJmODMxZWQwNmYwN2ZiNzA4
NWEzYmIwHhcNMjYwMzI5MTMwMDU1WhcNMjYwMzMwMTMwMDU1WjAzMTEwLwYDVQQD
EygwMjk0MjBhZmQ4MWJiZjU3Y2U5NGM0NDI5MWVjM2VhYWJiMTVhNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16xkg1aIbX0gSINX4Irfo7/mUehO
04J9mLOzBYiogUW9kEn6Usd52qCFP0rwfLzhJf5jCwKFqrIDqoW7gqojKbVJ6oex
xTbS86j6LgdiH39bNgvwfvl+U84Tfqlt/MkaLE4sm7BbKOj3N8Mott2uWZKNp6h1
B67MLTXcdEtoww1PDsz9VdZ5G+C37j1IxwJxk1wqQu/NjIjZm0dA8OQZ2cun0IBc
905i5wzohoNeQReWVcJk1wr0LrlXT8pLdw3E3HaIrujPQqxKOrzsnjzXvPPz8WAL
kSs0JEaEF4mRWo5RR8/VqYTRQmNPKJCJ5K9WKmiFYSOgej48f/X1LlJ6zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKUIK/YG79XzpTEQpHsPqq7FaVbMB8GA1UdIwQY
MBaAFGGaeUHgwshhMi+DHtBvB/twhaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTIt
MTFlZWNhMjY2ZDZjLzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTItMTFlZWNhMjY2ZDZj
LzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsG+tzgo
q8Asgi92NMCQ6YZBylOCpPCLjJi8UII88GRC65v/03/ncQrqvrDZN+KtJOGkLtmN
WufHQHVHLG7031VDGRnoAMsN2CRJjUI2Ss6bRn7MExhiuTS3TeWNJPFD0uhz5joI
7cwFTPkkIyCpG4h5pd/Q0Q1t+FTijU/eX6Wf8T8vdKIWqxHd6hrxyFeYMpHgs4Rz
CPcrwd0sEGaFJSc2L2qSJqxeYf0jWamaWX6in6A3JhLd7nzw9ro4Mpfgu6S4bK9S
w9B1TOQzjx0pkJ3G/JaKvlg3QtELy9/tYNbIVVP2CHo9Y6h4SB0CjPELQj4Uthvs
Q0PMIj1or4rrdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:07 2026 by rpki-client