Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: iQbUmvL1zLEUH1zV6BnI8cLvXDq9KwNXmrqE5ZPAIhg=
Subject key identifier: 17:4E:FA:41:C0:EE:C3:B5:CA:D2:AB:85:E6:62:85:C2:15:DB:01:D1
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019CA869D1F3BF079252AF44842156E2DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 029C
Signing time: Sun 01 Mar 2026 08:00:33 +0000
Manifest this update: Sun 01 Mar 2026 08:00:33 +0000
Manifest next update: Mon 02 Mar 2026 08:00:33 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: u7MY4ut3l3/AFRvJF+xHfRyvNspM34HbI/+iapXc8tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:d1:f3:bf:07:92:52:af:44:84:21:56:e2:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Mar 1 08:00:33 2026 GMT
Not After : Mar 2 08:00:33 2026 GMT
Subject: CN=174efa41c0eec3b5cad2ab85e66285c215db01d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:52:89:f3:49:45:24:c3:b6:4c:f7:45:f8:
f2:f4:47:df:24:d3:dd:bf:70:6b:a8:9d:94:b1:c4:
b5:37:21:f3:f3:32:f3:00:c9:44:5a:e3:28:8b:25:
57:ec:84:15:b1:66:bc:1a:df:88:53:08:24:de:25:
af:30:2e:1d:38:69:a7:e3:7f:04:71:ec:77:b6:49:
4a:cd:10:1d:e5:a3:97:95:89:b9:c6:bf:25:00:31:
1e:3b:4d:4f:27:37:c1:d4:9b:1d:c6:8f:47:fd:1b:
3e:ef:56:47:81:8c:85:fe:9c:e0:c2:2f:d7:04:d1:
76:a3:41:cf:5c:dd:86:07:7e:9c:d9:3f:53:51:f4:
1d:a2:2d:b3:c6:5d:a1:ad:c2:63:22:e1:48:aa:f8:
ed:d1:8d:c7:cb:c5:8a:ad:ef:fb:98:79:6e:d5:5d:
d5:3d:2e:dc:81:84:c2:47:6e:1e:b0:0a:a2:44:e6:
b8:cf:6f:3c:d3:ab:5a:fa:14:bc:81:09:09:85:6f:
21:eb:85:45:19:63:f9:d0:c6:1b:b2:00:06:d4:06:
b0:bc:5d:fe:88:50:a6:7d:72:95:c0:d6:1b:de:1e:
41:4f:b9:44:13:88:b1:9f:d4:b5:a9:82:5f:97:c4:
a1:b7:34:1b:dc:9d:d2:37:0e:6b:00:8c:7a:09:7c:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:FA:41:C0:EE:C3:B5:CA:D2:AB:85:E6:62:85:C2:15:DB:01:D1
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:a7:85:8e:69:f1:e9:fe:b4:ac:61:b1:61:c5:ae:79:db:
f7:f9:59:fa:12:50:af:c1:b0:18:8d:5c:f4:13:42:5b:83:1e:
ff:41:18:e5:c2:47:40:42:9b:9c:7b:75:1d:58:17:ec:9e:7b:
1c:ff:9b:fd:d2:9f:fb:f1:5b:7e:ec:ae:3a:67:b2:cf:59:4e:
a9:77:0c:27:1d:44:bb:d6:a9:4a:4b:20:80:36:51:48:dc:18:
11:35:f6:58:16:9a:2b:ad:65:24:2c:90:7a:f2:7f:45:d7:ba:
c6:f0:bc:9f:88:81:37:a5:27:25:6e:51:70:bf:ef:60:20:15:
44:3f:fd:9a:56:0b:5a:be:47:76:a1:a7:dd:c6:02:50:34:29:
f0:17:cf:ab:29:61:b3:ef:85:4c:bd:75:b9:80:75:65:ad:ba:
7e:7f:d4:98:19:8e:45:3a:b3:12:1b:15:c9:57:7d:96:01:40:
d1:4c:8f:69:14:0b:fb:64:b4:bc:a8:6f:4c:c9:80:96:52:81:
8d:e7:e5:15:c6:0e:98:74:e7:f1:a6:b7:ef:33:49:01:42:a9:
0c:cc:86:13:b8:bd:56:17:a6:80:fa:45:b8:fa:66:b5:39:e7:
83:70:38:b3:78:f2:c1:f2:65:15:80:16:2d:84:34:d8:89:1a:
c8:32:b9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoadHzvweSUq9EhCFW4t8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjYwMzAxMDgwMDMzWhcNMjYwMzAyMDgwMDMzWjAzMTEwLwYDVQQD
EygxNzRlZmE0MWMwZWVjM2I1Y2FkMmFiODVlNjYyODVjMjE1ZGIwMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU1SifNJRSTDtkz3Rfjy9EffJNPd
v3BrqJ2UscS1NyHz8zLzAMlEWuMoiyVX7IQVsWa8Gt+IUwgk3iWvMC4dOGmn438E
cex3tklKzRAd5aOXlYm5xr8lADEeO01PJzfB1Jsdxo9H/Rs+71ZHgYyF/pzgwi/X
BNF2o0HPXN2GB36c2T9TUfQdoi2zxl2hrcJjIuFIqvjt0Y3Hy8WKre/7mHlu1V3V
PS7cgYTCR24esAqiROa4z28806ta+hS8gQkJhW8h64VFGWP50MYbsgAG1AawvF3+
iFCmfXKVwNYb3h5BT7lEE4ixn9S1qYJfl8ShtzQb3J3SNw5rAIx6CXzY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdO+kHA7sO1ytKrheZihcIV2wHRMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr6nhY5p
8en+tKxhsWHFrnnb9/lZ+hJQr8GwGI1c9BNCW4Me/0EY5cJHQEKbnHt1HVgX7J57
HP+b/dKf+/FbfuyuOmeyz1lOqXcMJx1Eu9apSksggDZRSNwYETX2WBaaK61lJCyQ
evJ/Rde6xvC8n4iBN6UnJW5RcL/vYCAVRD/9mlYLWr5HdqGn3cYCUDQp8BfPqylh
s++FTL11uYB1Za26fn/UmBmORTqzEhsVyVd9lgFA0UyPaRQL+2S0vKhvTMmAllKB
jeflFcYOmHTn8aa37zNJAUKpDMyGE7i9VhemgPpFuPpmtTnng3A4s3jywfJlFYAW
LYQ02IkayDK5JA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:10 2026 by rpki-client