Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: mY49/5VLodOl5u0rq6EEgHNnnaNxDDD06qt/qSoo3Vc=
Subject key identifier: 0D:FA:E4:0D:EA:B6:7A:91:40:6E:09:9A:98:64:E8:6E:0C:57:51:9D
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019CADFEBFB0C5DE2C20B4EE14ADC34D1AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 14BB
Signing time: Mon 02 Mar 2026 10:01:19 +0000
Manifest this update: Mon 02 Mar 2026 10:01:19 +0000
Manifest next update: Tue 03 Mar 2026 10:01:19 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: YqBMArA+qgmpYqmBrl3nfulfn9zpYrW2y+yC/JRt9lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:bf:b0:c5:de:2c:20:b4:ee:14:ad:c3:4d:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Mar 2 10:01:19 2026 GMT
Not After : Mar 3 10:01:19 2026 GMT
Subject: CN=0dfae40deab67a91406e099a9864e86e0c57519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:39:ae:8f:4d:bc:c8:bd:66:9a:6e:44:49:
30:b5:8d:7e:ff:1f:ed:59:8d:61:89:1a:01:b3:eb:
c3:10:25:36:24:c9:46:26:8b:a3:d6:62:17:b0:c2:
fa:64:72:0d:a7:a8:8a:4d:ed:0f:f0:1a:e5:65:dd:
ba:9a:76:22:07:2f:93:74:1c:28:84:c1:42:8c:39:
fe:e7:4a:5c:32:ad:43:22:70:01:7d:e7:93:0c:b5:
c3:f6:62:33:bd:cb:c3:aa:df:bd:1f:09:6c:29:0c:
1a:d7:f9:93:9c:3b:bc:bd:d8:7e:e0:2b:26:ea:32:
b6:89:23:7b:7e:4b:61:f1:c0:cd:90:80:95:00:32:
96:fa:5b:62:53:f7:a5:3d:c2:f3:ae:26:5d:31:ae:
f0:87:fd:ac:70:2b:09:25:14:2b:3a:e9:78:4a:94:
86:ee:bc:de:92:81:ed:ea:ab:41:51:21:14:20:12:
1e:31:0e:21:80:b6:2c:0c:83:ae:76:d2:a3:1d:5d:
60:a4:79:51:97:d7:c7:b8:de:ac:50:7d:71:a5:f8:
f7:37:49:ec:4d:77:84:36:fd:14:1b:b9:f0:a5:6d:
ff:da:86:aa:6a:27:28:f0:48:b9:f2:ba:7a:67:17:
a5:ed:4f:ac:f2:c9:6b:fb:5b:bc:8f:cd:ef:e8:de:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:E4:0D:EA:B6:7A:91:40:6E:09:9A:98:64:E8:6E:0C:57:51:9D
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:b0:3a:f7:0d:85:f4:53:bf:1e:6c:90:77:06:97:2b:f9:
84:32:09:a1:f3:15:e7:9d:9a:40:1f:98:63:60:c8:e9:3d:0f:
9c:71:04:19:af:68:7c:6c:a0:39:17:26:63:1f:dc:b6:2c:eb:
8a:d3:09:1f:ab:46:82:55:e2:4c:9a:b3:3f:57:94:89:07:d7:
7f:81:85:ba:73:17:5e:70:da:c1:cd:0d:a3:ed:d0:3d:5a:e5:
9e:fe:0a:cc:9d:eb:e6:81:b8:f3:b6:8e:98:f1:88:3b:10:37:
fb:e7:a9:18:f4:ea:dc:2e:30:99:e2:bd:30:e6:ce:ad:f8:33:
fe:e1:f8:9d:db:b3:92:64:1d:ed:06:db:de:51:07:21:ed:69:
e9:a0:ee:50:68:7a:d8:3c:a4:8b:9f:9f:ca:29:85:7f:00:cc:
ac:91:15:63:71:6c:c6:1c:41:c6:8b:d3:df:b1:cb:28:09:56:
58:56:d2:d8:22:da:05:16:56:b7:28:15:57:ac:08:ed:84:25:
8f:97:4b:b0:a6:d9:93:f0:37:b0:87:d1:a3:1b:58:b4:e7:8d:
6b:f5:30:9b:7a:ef:17:6f:ae:4f:68:f3:6c:3a:6c:4c:ab:ee:
aa:cb:0e:18:5d:42:2c:fe:0a:23:a3:5c:9d:00:dc:56:72:b5:
74:2b:1a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/r+wxd4sILTuFK3DTRqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjYwMzAyMTAwMTE5WhcNMjYwMzAzMTAwMTE5WjAzMTEwLwYDVQQD
EygwZGZhZTQwZGVhYjY3YTkxNDA2ZTA5OWE5ODY0ZTg2ZTBjNTc1MTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPg5ro9NvMi9ZppuREkwtY1+/x/t
WY1hiRoBs+vDECU2JMlGJouj1mIXsML6ZHINp6iKTe0P8BrlZd26mnYiBy+TdBwo
hMFCjDn+50pcMq1DInABfeeTDLXD9mIzvcvDqt+9HwlsKQwa1/mTnDu8vdh+4Csm
6jK2iSN7fkth8cDNkICVADKW+ltiU/elPcLzriZdMa7wh/2scCsJJRQrOul4SpSG
7rzekoHt6qtBUSEUIBIeMQ4hgLYsDIOudtKjHV1gpHlRl9fHuN6sUH1xpfj3N0ns
TXeENv0UG7nwpW3/2oaqaico8Ei58rp6Zxel7U+s8slr+1u8j83v6N7T1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA365A3qtnqRQG4Jmphk6G4MV1GdMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyywOvcN
hfRTvx5skHcGlyv5hDIJofMV552aQB+YY2DI6T0PnHEEGa9ofGygORcmYx/ctizr
itMJH6tGglXiTJqzP1eUiQfXf4GFunMXXnDawc0No+3QPVrlnv4KzJ3r5oG487aO
mPGIOxA3++epGPTq3C4wmeK9MObOrfgz/uH4nduzkmQd7Qbb3lEHIe1p6aDuUGh6
2Dyki5+fyimFfwDMrJEVY3FsxhxBxovT37HLKAlWWFbS2CLaBRZWtygVV6wI7YQl
j5dLsKbZk/A3sIfRoxtYtOeNa/Uwm3rvF2+uT2jzbDpsTKvuqssOGF1CLP4KI6Nc
nQDcVnK1dCsamg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:24 2026 by rpki-client