Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: 3mQxbtnd3eM2gZDylM7i4R/6vefbtpVT52e4UlL5Xz4=
Subject key identifier: 4B:6A:CF:E6:AA:D1:AF:DB:7C:1E:3E:08:D1:65:21:F8:F9:28:94:2E
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019CAE35CA28422A7EE4D38240F203BBA3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: 5UKl7JzlrMZFxZccNwb_HEFI_xs.roa (hash: XFtwBlqsUtFdMadWz8en37s8O8O+/h2aqDNRnI5q7sE=)
2: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: Kispn3RvzEQNWf7qGUnMc4TZwtEwbqUY7oN6p6lxbFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ca:28:42:2a:7e:e4:d3:82:40:f2:03:bb:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=4b6acfe6aad1afdb7c1e3e08d16521f8f928942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:2e:cb:3c:ff:ec:38:09:ca:2c:65:63:4f:
49:5e:7f:f6:f9:cd:11:e4:6d:16:fb:f4:d2:e3:ed:
0c:ed:2d:cb:17:ad:48:8a:cb:9b:49:3e:9f:8a:10:
1c:b0:4b:9e:d2:51:b0:82:ef:c9:bc:6b:17:d5:90:
fb:1e:37:cf:d7:f1:60:51:c0:3f:33:a2:4b:5a:8b:
ab:91:df:5c:f1:88:f6:7c:b0:b8:86:70:f9:47:de:
ed:75:7e:66:66:e0:f0:9f:8f:a6:1d:99:93:f3:fc:
e2:de:a3:04:60:65:9e:d0:51:3c:5a:39:bc:ce:e9:
b3:f0:16:9e:f2:61:48:29:c2:3d:0d:12:b9:bd:32:
34:8f:a4:e1:a6:0f:30:1d:5e:d4:b8:62:a9:20:cc:
c7:bb:28:af:8f:33:15:2a:9a:78:eb:4f:10:4b:0e:
be:f8:9e:eb:74:78:70:0d:da:db:02:33:36:26:f2:
42:0f:dc:98:13:8d:c4:a2:f0:da:eb:c7:d9:85:d4:
b4:7c:d7:16:f5:8d:0b:75:f9:1f:03:21:24:2e:a4:
6c:93:cb:33:75:46:3a:e2:18:fb:df:b5:92:6b:86:
25:97:01:17:28:cb:88:f0:32:fe:0a:d1:b2:f0:f6:
bf:e8:24:f5:b0:c1:b4:c2:c2:58:67:c4:df:4a:5f:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:CF:E6:AA:D1:AF:DB:7C:1E:3E:08:D1:65:21:F8:F9:28:94:2E
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:40:07:59:44:96:b1:d9:56:c8:c6:f9:d0:25:1d:a8:d6:
e1:1e:b6:c5:b5:ef:c7:0b:35:a7:05:53:fc:84:db:c7:31:72:
75:bd:e2:81:64:3c:0e:29:00:6f:f4:5a:b5:ed:92:81:fc:11:
46:2e:ae:92:1b:36:6c:06:fc:0f:0a:49:cb:4b:d5:f5:59:44:
7b:b4:f7:27:18:e7:e5:9b:a4:63:ab:29:39:a4:6c:39:a3:4f:
bc:11:fe:0b:c7:3f:03:e3:ec:73:a0:50:7c:a7:f0:e4:b5:3c:
9b:bf:58:54:7f:f3:26:1f:8a:6d:08:a1:be:e0:19:6a:f5:36:
ac:c6:3b:68:7b:b8:69:5f:c6:be:eb:ee:a3:58:e8:0f:3d:f9:
ea:57:95:47:57:8e:03:c9:9c:b8:75:0e:7d:27:af:4b:51:53:
41:b3:72:76:b3:aa:97:ff:e0:a4:e1:f3:8b:7f:ae:56:91:b7:
5c:4b:ac:e7:45:71:e3:a7:19:fa:c6:ea:03:44:be:73:ed:dc:
2d:fe:49:f4:63:ea:79:79:5a:27:8e:54:ed:29:ae:c2:79:bb:
70:b0:f9:b9:49:c2:9f:1e:15:6c:86:f3:39:f3:cb:de:63:cb:
43:e2:d5:18:0c:ee:55:99:62:b0:e2:63:db:26:3c:df:6c:b5:
71:58:e0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNcooQip+5NOCQPIDu6P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjYwMzAyMTEwMTI2WhcNMjYwMzAzMTEwMTI2WjAzMTEwLwYDVQQD
Eyg0YjZhY2ZlNmFhZDFhZmRiN2MxZTNlMDhkMTY1MjFmOGY5Mjg5NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvekuyzz/7DgJyixlY09JXn/2+c0R
5G0W+/TS4+0M7S3LF61IisubST6fihAcsEue0lGwgu/JvGsX1ZD7HjfP1/FgUcA/
M6JLWourkd9c8Yj2fLC4hnD5R97tdX5mZuDwn4+mHZmT8/zi3qMEYGWe0FE8Wjm8
zumz8Bae8mFIKcI9DRK5vTI0j6Thpg8wHV7UuGKpIMzHuyivjzMVKpp4608QSw6+
+J7rdHhwDdrbAjM2JvJCD9yYE43EovDa68fZhdS0fNcW9Y0LdfkfAyEkLqRsk8sz
dUY64hj737WSa4YllwEXKMuI8DL+CtGy8Pa/6CT1sMG0wsJYZ8TfSl8RfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtqz+aq0a/bfB4+CNFlIfj5KJQuMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnVAB1lE
lrHZVsjG+dAlHajW4R62xbXvxws1pwVT/ITbxzFydb3igWQ8DikAb/Rate2SgfwR
Ri6ukhs2bAb8DwpJy0vV9VlEe7T3Jxjn5ZukY6spOaRsOaNPvBH+C8c/A+Psc6BQ
fKfw5LU8m79YVH/zJh+KbQihvuAZavU2rMY7aHu4aV/Gvuvuo1joDz356leVR1eO
A8mcuHUOfSevS1FTQbNydrOql//gpOHzi3+uVpG3XEus50Vx46cZ+sbqA0S+c+3c
Lf5J9GPqeXlaJ45U7Smuwnm7cLD5uUnCnx4VbIbzOfPL3mPLQ+LVGAzuVZlisOJj
2yY832y1cVjg9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:21 2026 by rpki-client