Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: /qf7i0OBgg/6UzS/CncKdr3dSIN6ehp5TBVN5sX/JS4=
Subject key identifier: 8F:7C:E0:CB:69:EA:43:D1:24:E1:08:E2:D4:A1:57:E1:37:CF:A0:A2
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019CAAC630D0A75B11ADC35A9ECA04F3B334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: 2Y0vePsYMdGLC2k19HfRsz12tcc.roa (hash: 9OMDv7NsOhqDHoVNou730t3Tke6hQqKOi0fzyySfDqc=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: h5YnGzn5tPIfRuORzgwD71ZmShPRSwUdfe3oreHXesY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:30:d0:a7:5b:11:ad:c3:5a:9e:ca:04:f3:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=8f7ce0cb69ea43d124e108e2d4a157e137cfa0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:d6:59:c3:d5:a5:02:43:51:8a:e5:36:56:
3d:0b:fd:9d:b8:28:6b:95:dd:93:f5:f8:99:69:23:
7e:d3:9e:3d:5b:8d:02:d1:5c:35:33:ea:fe:2f:a4:
49:b7:41:85:97:27:44:b3:a2:3a:ec:48:30:9c:af:
59:af:e0:dd:3d:29:e7:65:31:69:d5:c9:19:c1:fe:
c4:7f:3e:5e:ae:d8:2e:3b:5a:eb:48:44:61:01:69:
c2:6e:a9:f3:8c:7a:5d:22:3e:82:b9:d0:d5:84:6c:
c0:a3:0a:68:35:8f:93:c8:80:21:da:ed:ef:da:f1:
84:80:33:c2:1b:56:26:de:9c:1f:17:d6:f9:65:25:
ce:84:dc:e8:1e:a1:4a:64:09:80:6d:4a:a2:49:9b:
9a:c3:ed:68:60:21:a7:6d:1f:14:5f:f9:62:27:f4:
d7:46:e6:b5:aa:ff:57:8f:db:4a:2e:23:47:2d:9d:
b0:74:1b:12:99:f7:f1:78:93:68:6d:37:ed:cd:d6:
2b:15:f9:b9:cd:9b:6e:6c:43:cf:7a:3d:a9:ae:3b:
9c:8a:54:9e:c4:a0:fc:b2:d9:74:d7:3b:b8:38:eb:
43:eb:51:46:1f:9a:e8:00:0c:88:94:24:84:40:0f:
18:53:ad:b1:f4:e2:5a:d2:1c:e6:db:9a:16:0d:2e:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7C:E0:CB:69:EA:43:D1:24:E1:08:E2:D4:A1:57:E1:37:CF:A0:A2
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:6b:04:b4:b5:c5:8a:10:4e:92:86:09:97:7c:24:9c:3d:
8a:df:eb:ae:49:59:cf:f4:72:70:62:07:87:df:af:f8:ed:1f:
9f:e7:bb:3a:0f:b6:35:12:a5:a1:7e:05:89:89:e1:ca:18:fb:
db:fa:99:60:27:88:a2:69:53:07:72:ab:62:94:7e:35:78:47:
67:57:80:c4:fc:24:2d:2c:17:54:58:84:66:cf:ca:f8:2b:a3:
a3:47:3b:15:43:2e:6f:34:dc:60:f4:1d:c0:21:1b:13:e1:4b:
11:1f:8c:47:06:9e:49:01:2f:ed:b7:0d:c4:ff:08:09:04:6a:
73:3e:51:f3:de:61:3e:dd:2e:48:e1:5f:18:23:79:49:c4:20:
55:c3:da:b9:5e:95:43:97:36:b8:b1:aa:39:3d:e4:8e:d2:36:
93:01:de:8c:88:a0:08:12:ea:72:d7:d3:80:ea:47:91:ca:bb:
f6:49:5f:08:bd:10:13:4b:ab:25:c5:5d:09:f3:3b:7a:ca:a8:
56:b2:b3:e4:be:8e:02:45:0c:0e:67:6b:8a:d2:ff:41:88:05:
c5:6d:85:c4:c2:46:fd:2f:dc:39:7e:a3:73:18:37:38:9c:dd:
d3:f2:e1:55:33:7c:26:e4:46:41:00:86:9b:76:bc:c4:26:86:
70:e1:e2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxjDQp1sRrcNansoE87M0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjYwMzAxMTkwMDQxWhcNMjYwMzAyMTkwMDQxWjAzMTEwLwYDVQQD
Eyg4ZjdjZTBjYjY5ZWE0M2QxMjRlMTA4ZTJkNGExNTdlMTM3Y2ZhMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yHWWcPVpQJDUYrlNlY9C/2duChr
ld2T9fiZaSN+0549W40C0Vw1M+r+L6RJt0GFlydEs6I67EgwnK9Zr+DdPSnnZTFp
1ckZwf7Efz5ertguO1rrSERhAWnCbqnzjHpdIj6CudDVhGzAowpoNY+TyIAh2u3v
2vGEgDPCG1Ym3pwfF9b5ZSXOhNzoHqFKZAmAbUqiSZuaw+1oYCGnbR8UX/liJ/TX
Rua1qv9Xj9tKLiNHLZ2wdBsSmffxeJNobTftzdYrFfm5zZtubEPPej2prjucilSe
xKD8stl01zu4OOtD61FGH5roAAyIlCSEQA8YU62x9OJa0hzm25oWDS66hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI984Mtp6kPRJOEI4tShV+E3z6CiMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuxrBLS1
xYoQTpKGCZd8JJw9it/rrklZz/RycGIHh9+v+O0fn+e7Og+2NRKloX4FiYnhyhj7
2/qZYCeIomlTB3KrYpR+NXhHZ1eAxPwkLSwXVFiEZs/K+Cujo0c7FUMubzTcYPQd
wCEbE+FLER+MRwaeSQEv7bcNxP8ICQRqcz5R895hPt0uSOFfGCN5ScQgVcPauV6V
Q5c2uLGqOT3kjtI2kwHejIigCBLqctfTgOpHkcq79klfCL0QE0urJcVdCfM7esqo
VrKz5L6OAkUMDmdritL/QYgFxW2FxMJG/S/cOX6jcxg3OJzd0/LhVTN8JuRGQQCG
m3a8xCaGcOHi7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:37 2026 by rpki-client