Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: GQOzLGcAqKj58/e6ZLTmbKzyZlfN7P9xCVB6XW+e4zM=
Subject key identifier: B4:46:B2:E3:3F:B5:DF:28:67:48:B9:B0:BC:40:3C:E5:30:40:FA:B9
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 019CAB6BDE24AFE2F3A80B5AC05C537A6BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 059A
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: zBUkbTyG5CljAmDbf3FiTEntO9gNmGCQFgxfJCzKZIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:de:24:af:e2:f3:a8:0b:5a:c0:5c:53:7a:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=b446b2e33fb5df286748b9b0bc403ce53040fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:15:24:77:d4:28:ec:09:63:f8:7e:0c:57:
8d:67:59:e1:81:5d:95:bb:25:15:28:c3:64:d4:1e:
a7:96:ac:a9:2e:33:08:6b:af:d0:a5:56:13:93:a4:
8b:e9:c0:17:4c:5f:9f:dd:25:6f:be:84:c8:41:a5:
ff:d5:af:44:9d:c3:29:4f:d4:f8:d4:96:e9:1e:8a:
db:11:c8:a1:8f:94:9c:ca:9e:62:bf:96:9c:67:ee:
99:d5:19:95:33:b5:9b:e9:9c:9c:cf:70:77:8a:e1:
e0:f9:7e:85:5c:ed:86:04:77:03:7f:8d:cb:84:60:
65:17:e1:6a:fd:76:67:eb:4c:ce:d6:ab:a1:d0:59:
8b:ea:17:89:68:1e:66:38:93:4d:45:25:15:fc:b2:
b0:14:b1:54:af:02:53:b9:40:c1:32:64:78:5a:4c:
bd:38:f6:3a:b6:7e:08:64:42:a3:09:7a:f9:69:e9:
97:1d:44:9c:ec:ff:ed:e8:ff:6c:4a:42:77:b8:70:
f4:5f:e0:b7:a4:66:b0:bf:6f:0a:4e:36:71:d4:4e:
c5:8c:66:dc:a6:e8:b9:d5:1e:b9:52:4f:17:a0:cd:
11:f5:ff:e8:75:2f:be:37:6d:73:6b:b9:0c:c5:96:
66:ae:5f:ed:7c:28:c2:b3:bf:45:85:c7:2f:1f:41:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:B2:E3:3F:B5:DF:28:67:48:B9:B0:BC:40:3C:E5:30:40:FA:B9
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3e:b5:a7:07:95:68:0d:27:78:15:85:a8:f5:6d:29:89:5d:
77:71:b2:10:ab:c5:02:69:c5:de:2b:0f:88:ce:5f:bf:a7:78:
25:8f:d9:fa:f3:db:ae:1b:b6:aa:8c:20:33:d7:5f:a4:e9:c1:
44:5e:c0:d9:71:fb:85:b9:13:7b:74:f0:74:ea:32:47:67:80:
d4:dd:da:ca:50:85:e3:c5:16:9e:93:8d:05:0e:d8:14:b9:ba:
30:45:b7:5f:28:22:0c:27:3f:14:68:4f:5b:98:28:e0:3b:df:
e7:a6:bf:13:1b:20:e7:cf:0a:b9:e5:7e:7e:64:74:ae:8e:8d:
ee:20:9b:57:33:95:5c:ab:76:c1:ce:76:aa:cb:fb:09:71:e0:
8b:c8:18:ec:0c:f5:d6:4b:5b:73:8c:f0:36:ae:43:57:a1:4f:
4a:63:fe:08:5d:a6:24:dd:cc:67:1b:12:12:80:b8:93:30:ca:
1a:f1:4c:5e:d4:57:04:2a:40:d4:00:e6:52:18:cb:f8:96:20:
6a:f2:1b:a5:80:4d:02:3a:d4:72:82:ae:6c:ff:e4:d1:10:f7:
22:0b:e3:9a:cc:0d:3d:0a:32:db:99:c0:b1:b4:7a:e1:3b:6e:
b8:ff:41:0d:b2:70:59:da:3a:15:58:ad:71:12:91:21:80:e4:
79:14:f3:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra94kr+LzqAtawFxTemu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0
NWQyNzMwHhcNMjYwMzAxMjIwMTM4WhcNMjYwMzAyMjIwMTM4WjAzMTEwLwYDVQQD
EyhiNDQ2YjJlMzNmYjVkZjI4Njc0OGI5YjBiYzQwM2NlNTMwNDBmYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjYVJHfUKOwJY/h+DFeNZ1nhgV2V
uyUVKMNk1B6nlqypLjMIa6/QpVYTk6SL6cAXTF+f3SVvvoTIQaX/1a9EncMpT9T4
1JbpHorbEcihj5Scyp5iv5acZ+6Z1RmVM7Wb6Zycz3B3iuHg+X6FXO2GBHcDf43L
hGBlF+Fq/XZn60zO1quh0FmL6heJaB5mOJNNRSUV/LKwFLFUrwJTuUDBMmR4Wky9
OPY6tn4IZEKjCXr5aemXHUSc7P/t6P9sSkJ3uHD0X+C3pGawv28KTjZx1E7FjGbc
pui51R65Uk8XoM0R9f/odS++N21za7kMxZZmrl/tfCjCs79FhccvH0HqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRGsuM/td8oZ0i5sLxAPOUwQPq5MB8GA1UdIwQY
MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt
MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz
LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj61pweV
aA0neBWFqPVtKYldd3GyEKvFAmnF3isPiM5fv6d4JY/Z+vPbrhu2qowgM9dfpOnB
RF7A2XH7hbkTe3TwdOoyR2eA1N3aylCF48UWnpONBQ7YFLm6MEW3XygiDCc/FGhP
W5go4Dvf56a/Exsg588KueV+fmR0ro6N7iCbVzOVXKt2wc52qsv7CXHgi8gY7Az1
1ktbc4zwNq5DV6FPSmP+CF2mJN3MZxsSEoC4kzDKGvFMXtRXBCpA1ADmUhjL+JYg
avIbpYBNAjrUcoKubP/k0RD3IgvjmswNPQoy25nAsbR64TtuuP9BDbJwWdo6FVit
cRKRIYDkeRTzUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:20 2026 by rpki-client