Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
File: yt5exV7u1umhBlv3bCRzlARBqh8.mft (raw, json)
Hash identifier: 2Cpvey88f/b8FM/SabQuCufy+74XHFuzDtUEOHTLGeA=
Subject key identifier: 46:D0:65:4D:6C:41:72:10:26:AF:A0:6C:15:60:9D:EE:87:79:4D:4A
Authority key identifier: CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
Certificate issuer: /CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Certificate serial: 019D382E827212BF96A37ACEA170C41E2E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
Manifest number: 64
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa (hash: 1bARVANifpQoHq/ju0Triq1Tp8AVUELm5oTGHy8n5vw=)
2: yt5exV7u1umhBlv3bCRzlARBqh8.crl (hash: yNB1y9xTYzbAQ/iROaT3rUtdfw5FE/5N8Iea222tHvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:82:72:12:bf:96:a3:7a:ce:a1:70:c4:1e:2e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=46d0654d6c41721026afa06c15609dee87794d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:9d:34:65:0d:d8:40:ad:ea:a2:6c:a9:a9:
5d:87:95:28:28:d2:c5:a8:0d:f2:0b:f3:06:7b:82:
96:05:08:39:01:4a:21:ce:cb:fd:dc:6c:e1:3d:ca:
1f:41:31:64:2a:2b:17:4a:fa:7a:84:72:e6:30:c8:
67:56:40:70:e7:a0:fd:00:05:18:2d:32:dd:3b:0e:
77:3d:79:6c:c7:27:51:c4:ca:a9:be:fb:25:c4:9f:
e3:56:43:fd:3d:ee:2c:76:22:81:5f:9b:86:4b:5d:
5a:19:49:05:8b:60:dd:22:59:7f:f2:71:36:3d:2e:
dc:92:9d:a7:e5:bc:0c:7a:b8:c3:42:d2:2d:ba:ca:
70:b6:f9:41:5b:64:cb:27:b0:08:7e:31:1d:cc:67:
df:26:46:21:dd:b9:cb:2d:c9:d7:37:e6:5d:83:3f:
29:c5:2c:ef:f4:11:f7:18:c4:1e:43:8b:d8:a1:ae:
46:7d:0e:e3:d9:d2:fb:7c:62:8d:ff:84:7c:78:1b:
91:3a:86:c9:ff:ac:3e:c9:89:8b:61:34:aa:33:e8:
b6:d8:78:99:73:ab:9d:4a:44:ac:9f:06:70:61:ab:
8e:98:83:13:16:90:ad:28:52:29:85:06:5c:01:cd:
14:4b:c5:e2:1e:8d:f4:70:12:a0:1a:ce:2d:22:b0:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:65:4D:6C:41:72:10:26:AF:A0:6C:15:60:9D:EE:87:79:4D:4A
X509v3 Authority Key Identifier:
keyid:CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:44:1b:f2:8c:6a:05:d2:82:c0:ce:42:3f:2e:0c:f3:ae:3f:
5a:cf:45:24:76:31:fd:d5:54:1b:0e:2f:e4:ad:50:a5:ae:79:
7b:67:0c:33:8d:64:da:91:c6:51:05:6d:8d:b4:42:98:68:3e:
20:ef:76:1c:a1:35:41:88:f8:69:64:05:90:a5:4b:6b:b1:da:
36:1f:24:5a:aa:2a:d9:da:63:38:ca:57:56:87:c6:6f:a8:cd:
be:a5:55:19:96:54:82:7d:73:83:6a:92:8a:f2:e3:fe:b4:18:
83:6f:15:de:00:5a:cd:bf:de:ec:1c:4a:eb:49:19:58:f1:87:
48:bd:da:5f:a6:59:3f:46:d4:9d:d6:82:af:6b:89:9b:a2:39:
c2:3f:93:da:3b:45:36:13:1e:2f:8e:d5:87:e8:60:2b:27:ac:
63:55:96:bc:72:45:84:97:a8:8a:32:f2:1b:06:bd:30:ee:13:
22:88:2d:08:34:79:79:0d:44:ef:63:8f:11:55:f8:6e:3e:2c:
26:52:7e:07:71:5d:62:dc:54:c1:77:ab:44:54:21:a8:18:2a:
74:f6:95:42:02:71:dc:b9:bf:82:3e:73:e0:14:9a:70:fe:00:
51:2d:6f:f4:38:4b:fe:10:b0:2d:c7:8a:bb:4f:8d:80:0d:50:
48:3c:fa:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoJyEr+Wo3rOoXDEHi4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZGU1ZWM1NWVlZWQ2ZTlhMTA2NWJmNzZjMjQ3Mzk0MDQ0
MWFhMWYwHhcNMjYwMzI5MDYwMTA1WhcNMjYwMzMwMDYwMTA1WjAzMTEwLwYDVQQD
Eyg0NmQwNjU0ZDZjNDE3MjEwMjZhZmEwNmMxNTYwOWRlZTg3Nzk0ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1imdNGUN2ECt6qJsqaldh5UoKNLF
qA3yC/MGe4KWBQg5AUohzsv93GzhPcofQTFkKisXSvp6hHLmMMhnVkBw56D9AAUY
LTLdOw53PXlsxydRxMqpvvslxJ/jVkP9Pe4sdiKBX5uGS11aGUkFi2DdIll/8nE2
PS7ckp2n5bwMerjDQtItuspwtvlBW2TLJ7AIfjEdzGffJkYh3bnLLcnXN+Zdgz8p
xSzv9BH3GMQeQ4vYoa5GfQ7j2dL7fGKN/4R8eBuROobJ/6w+yYmLYTSqM+i22HiZ
c6udSkSsnwZwYauOmIMTFpCtKFIphQZcAc0US8XiHo30cBKgGs4tIrCjPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbQZU1sQXIQJq+gbBVgne6HeU1KMB8GA1UdIwQY
MBaAFMreXsVe7tbpoQZb92wkc5QEQaofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXQ1ZXhWN3UxdW1oQmx2M2JDUnpsQVJCcWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNmYxYTEtMGYzMy00MzM1LThlYjYt
ZjBlYTcxMmNkYTA4LzEveXQ1ZXhWN3UxdW1oQmx2M2JDUnpsQVJCcWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNmYxYTEtMGYzMy00MzM1LThlYjYtZjBlYTcxMmNkYTA4
LzEveXQ1ZXhWN3UxdW1oQmx2M2JDUnpsQVJCcWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUQb8oxq
BdKCwM5CPy4M864/Ws9FJHYx/dVUGw4v5K1Qpa55e2cMM41k2pHGUQVtjbRCmGg+
IO92HKE1QYj4aWQFkKVLa7HaNh8kWqoq2dpjOMpXVofGb6jNvqVVGZZUgn1zg2qS
ivLj/rQYg28V3gBazb/e7BxK60kZWPGHSL3aX6ZZP0bUndaCr2uJm6I5wj+T2jtF
NhMeL47Vh+hgKyesY1WWvHJFhJeoijLyGwa9MO4TIogtCDR5eQ1E72OPEVX4bj4s
JlJ+B3FdYtxUwXerRFQhqBgqdPaVQgJx3Lm/gj5z4BSacP4AUS1v9DhL/hCwLceK
u0+NgA1QSDz6dw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:14 2026 by rpki-client