Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: MYoEW/196R6j79HFFL7/M5Ym7stp2rdWIQtLnwpvMTc=
Subject key identifier: CD:3C:88:02:AF:FD:9A:33:ED:A7:E2:86:A3:75:C2:82:A9:41:E1:7F
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019D38D304FBC45936CEFB9DB85D519783FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0510
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: aqcssHmknHA4aLgpbxzVLPX4EgeS0PKUJaX2XLqtTL8=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:04:fb:c4:59:36:ce:fb:9d:b8:5d:51:97:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=cd3c8802affd9a33eda7e286a375c282a941e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:c3:41:9b:d4:d7:71:05:07:55:5b:1d:69:
d3:29:ed:fb:60:01:42:34:92:9e:a9:65:c6:ba:c1:
cb:5e:c9:81:2c:e5:ba:62:bf:c8:a1:0c:7b:3b:b0:
a6:34:d0:51:3e:4c:1d:34:ad:d3:61:7a:cc:71:38:
2e:2c:0e:bc:02:3a:42:c4:17:fe:10:70:21:28:6b:
22:ba:08:4f:62:51:86:1b:45:e9:8d:37:f5:1e:09:
b7:5b:4b:4c:1f:96:9e:45:b9:34:b1:3e:68:09:f2:
16:bc:b0:d3:6b:77:91:1a:1e:7c:4a:8d:54:28:38:
29:c2:68:5e:36:eb:67:19:f5:0c:18:22:1b:f9:d9:
b9:ca:2f:f1:9f:f1:28:ef:ce:26:a7:bf:28:2b:85:
98:ee:92:ca:4a:07:ff:75:fe:ef:b6:64:bd:35:a9:
8b:70:73:3c:2d:e7:62:73:5a:29:b3:f8:fe:a3:4a:
40:97:8a:de:77:0b:40:60:a1:39:e5:13:26:fc:85:
2c:7d:a8:82:cb:d2:ec:38:99:0e:98:d7:29:a2:bf:
c1:07:af:24:22:dc:a4:79:62:23:34:45:f5:4a:9d:
7f:52:e0:fc:44:90:16:24:6e:b4:2a:cc:95:9c:19:
54:57:1b:db:cb:84:70:20:d4:a4:40:17:0f:b7:d2:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:88:02:AF:FD:9A:33:ED:A7:E2:86:A3:75:C2:82:A9:41:E1:7F
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:44:81:11:34:49:39:8e:d1:83:1a:9d:4e:57:64:2f:0b:ab:
91:b1:1b:54:b3:0d:33:9c:3e:6c:ca:c4:9b:bd:e8:7e:f9:f2:
a5:3d:19:c9:f9:11:41:4d:94:12:3b:e6:9b:2b:6b:c8:9f:05:
36:2c:15:95:c3:f2:1e:f9:16:e7:e6:c5:18:8f:82:41:f0:76:
17:6f:a4:87:7c:b5:9c:05:6a:e3:ae:87:42:4c:75:40:63:c9:
5b:95:6c:07:6a:21:ed:16:86:48:5a:9f:9a:82:53:80:3a:8d:
eb:7f:fd:c3:bd:b4:c6:ca:00:e4:16:4d:c0:a7:d2:71:d4:1f:
1a:b7:09:6c:77:c3:f2:a7:c4:96:c9:53:03:f6:a9:12:23:8e:
53:91:a4:dd:d2:d0:4a:32:5c:48:da:28:44:f8:73:3e:b8:e7:
54:1d:67:5b:19:6f:79:fd:e4:51:2d:20:9e:15:94:c4:c4:ba:
95:95:fb:d0:81:16:86:17:fe:b8:8a:31:2f:b8:51:30:cc:d1:
80:2c:a7:14:08:4d:69:0f:b2:f5:dc:69:e4:d5:03:65:9a:81:
ba:3f:e8:4d:44:45:f3:35:c1:a5:82:26:d1:49:36:27:be:e1:
d3:6d:d4:2f:3f:06:c0:c5:62:21:dd:a8:1b:22:75:02:43:b8:
78:f8:3d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wT7xFk2zvuduF1Rl4P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm
ZDU1MGIwHhcNMjYwMzI5MDkwMDQ2WhcNMjYwMzMwMDkwMDQ2WjAzMTEwLwYDVQQD
EyhjZDNjODgwMmFmZmQ5YTMzZWRhN2UyODZhMzc1YzI4MmE5NDFlMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAjDQZvU13EFB1VbHWnTKe37YAFC
NJKeqWXGusHLXsmBLOW6Yr/IoQx7O7CmNNBRPkwdNK3TYXrMcTguLA68AjpCxBf+
EHAhKGsiughPYlGGG0XpjTf1Hgm3W0tMH5aeRbk0sT5oCfIWvLDTa3eRGh58So1U
KDgpwmheNutnGfUMGCIb+dm5yi/xn/Eo784mp78oK4WY7pLKSgf/df7vtmS9NamL
cHM8Ledic1ops/j+o0pAl4redwtAYKE55RMm/IUsfaiCy9LsOJkOmNcpor/BB68k
ItykeWIjNEX1Sp1/UuD8RJAWJG60KsyVnBlUVxvby4RwINSkQBcPt9IjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM08iAKv/Zoz7afihqN1woKpQeF/MB8GA1UdIwQY
MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt
MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk
LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0SBETRJ
OY7RgxqdTldkLwurkbEbVLMNM5w+bMrEm73ofvnypT0ZyfkRQU2UEjvmmytryJ8F
NiwVlcPyHvkW5+bFGI+CQfB2F2+kh3y1nAVq466HQkx1QGPJW5VsB2oh7RaGSFqf
moJTgDqN63/9w720xsoA5BZNwKfScdQfGrcJbHfD8qfElslTA/apEiOOU5Gk3dLQ
SjJcSNooRPhzPrjnVB1nWxlvef3kUS0gnhWUxMS6lZX70IEWhhf+uIoxL7hRMMzR
gCynFAhNaQ+y9dxp5NUDZZqBuj/oTURF8zXBpYIm0Uk2J77h023ULz8GwMViId2o
GyJ1AkO4ePg9pg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:10 2026 by rpki-client