Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: n35qLuUWco6CWO5ycFM1h7WWIsemQaCBvCjiSdnltBo=
Subject key identifier: 23:E3:1A:1E:75:CB:13:D1:CA:96:8E:D1:3A:C1:EB:53:91:D3:CA:E7
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019CAE352BAFF2C61E4373331DF0C7849B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0864
Signing time: Mon 02 Mar 2026 11:00:45 +0000
Manifest this update: Mon 02 Mar 2026 11:00:45 +0000
Manifest next update: Tue 03 Mar 2026 11:00:45 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: wmsU+hemZBSj0pknfIoRUgcq4uh8cRHtTApzqv6XSAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:2b:af:f2:c6:1e:43:73:33:1d:f0:c7:84:9b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Mar 2 11:00:45 2026 GMT
Not After : Mar 3 11:00:45 2026 GMT
Subject: CN=23e31a1e75cb13d1ca968ed13ac1eb5391d3cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:c7:fc:d0:ab:15:23:10:6c:86:1c:8c:bb:
c9:e0:6f:10:06:ca:77:0c:ef:fd:44:cc:96:ad:c8:
6e:a3:83:70:dd:8a:6f:7d:6e:9a:48:62:bd:45:bc:
28:dc:82:59:70:dd:8b:e5:02:2b:1a:f0:f8:bd:d8:
ac:68:d8:71:63:fb:65:fd:aa:cd:5f:7d:a4:71:4a:
56:1d:16:8b:39:18:f4:07:55:dd:cf:d7:1c:95:25:
21:e8:4d:64:ce:d2:ac:f3:0e:66:ed:cd:ad:a7:64:
2a:08:12:e4:d7:aa:0f:b4:cb:e9:b3:6e:ce:54:5b:
45:fd:81:c6:60:f4:4f:72:a3:b7:24:6c:17:3f:0c:
ad:ce:f2:1d:e3:cd:58:ac:28:cf:c7:a5:ea:e0:05:
b4:47:e0:3f:4f:98:ac:00:7e:14:b9:cf:e3:cc:7f:
75:d8:ba:42:f6:26:51:c1:17:17:9a:2e:03:7f:c4:
3c:55:58:cb:ed:d5:ab:63:03:61:81:33:8e:c2:a2:
77:a4:df:6e:c1:5f:fd:09:a1:f6:10:6c:08:28:86:
71:f2:b8:1c:67:eb:88:67:cb:08:ea:5e:e3:3d:96:
30:6f:a8:a4:ad:ec:9d:8c:01:0a:53:a3:9f:f0:01:
6c:c0:00:79:03:fc:c3:38:38:21:ee:a2:44:11:cd:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:1A:1E:75:CB:13:D1:CA:96:8E:D1:3A:C1:EB:53:91:D3:CA:E7
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6e:a2:a8:cc:68:fd:a3:11:81:c4:7d:5a:91:31:54:15:7c:
14:27:b1:ff:7e:3c:d7:18:63:ac:33:27:b8:00:92:6c:f8:34:
df:e9:ec:a2:09:1f:3c:98:b3:98:27:0b:8f:4d:44:29:9c:df:
97:63:88:99:f8:00:3b:e8:af:22:86:7a:35:77:c6:d4:b1:7d:
74:91:49:bb:68:cb:b3:e3:1b:3e:c2:2a:c6:1b:7d:36:cd:4e:
e7:a4:69:f6:96:59:f7:a7:73:c5:f5:c6:f4:d2:b8:96:db:5f:
34:30:fd:29:83:46:a8:16:06:26:58:98:8c:df:b3:cc:9b:d0:
9c:3c:4a:60:f2:cd:ef:90:fc:b5:ca:8e:f1:1e:73:e1:7d:fe:
35:bd:58:a2:ca:56:76:2f:bf:77:21:e6:f1:c7:4c:5b:91:81:
a8:96:25:5f:43:c9:a6:26:4e:c2:a6:6c:06:3d:4c:03:a1:0e:
fb:1c:7f:ba:8a:2d:dc:b8:50:ac:67:23:6b:5f:9f:9d:1c:38:
13:64:9a:1a:ca:4b:8a:7c:f0:ac:aa:2b:91:be:77:6f:57:63:
53:a3:01:af:58:d7:e8:e3:67:12:7b:17:5e:f5:0c:32:71:ff:
3a:66:ee:22:7c:3b:03:c2:82:57:e4:38:ff:ac:5f:38:a2:16:
17:02:d6:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNSuv8sYeQ3MzHfDHhJtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjYwMzAyMTEwMDQ1WhcNMjYwMzAzMTEwMDQ1WjAzMTEwLwYDVQQD
EygyM2UzMWExZTc1Y2IxM2QxY2E5NjhlZDEzYWMxZWI1MzkxZDNjYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXLH/NCrFSMQbIYcjLvJ4G8QBsp3
DO/9RMyWrchuo4Nw3YpvfW6aSGK9Rbwo3IJZcN2L5QIrGvD4vdisaNhxY/tl/arN
X32kcUpWHRaLORj0B1Xdz9cclSUh6E1kztKs8w5m7c2tp2QqCBLk16oPtMvps27O
VFtF/YHGYPRPcqO3JGwXPwytzvId481YrCjPx6Xq4AW0R+A/T5isAH4Uuc/jzH91
2LpC9iZRwRcXmi4Df8Q8VVjL7dWrYwNhgTOOwqJ3pN9uwV/9CaH2EGwIKIZx8rgc
Z+uIZ8sI6l7jPZYwb6ikreydjAEKU6Of8AFswAB5A/zDODgh7qJEEc05NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPjGh51yxPRypaO0TrB61OR08rnMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf26iqMxo
/aMRgcR9WpExVBV8FCex/3481xhjrDMnuACSbPg03+nsogkfPJizmCcLj01EKZzf
l2OImfgAO+ivIoZ6NXfG1LF9dJFJu2jLs+MbPsIqxht9Ns1O56Rp9pZZ96dzxfXG
9NK4lttfNDD9KYNGqBYGJliYjN+zzJvQnDxKYPLN75D8tcqO8R5z4X3+Nb1YospW
di+/dyHm8cdMW5GBqJYlX0PJpiZOwqZsBj1MA6EO+xx/uoot3LhQrGcja1+fnRw4
E2SaGspLinzwrKorkb53b1djU6MBr1jX6ONnEnsXXvUMMnH/OmbuInw7A8KCV+Q4
/6xfOKIWFwLWsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:07 2026 by rpki-client