Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: LnPzxBR9la1fgjs29IH1MFYvtZDs2KbzFNPSvV6kBrA=
Subject key identifier: 7A:FD:E7:96:7F:89:CF:95:3D:29:A9:32:7A:24:17:49:42:F9:DA:97
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019CAD22F7DA165D73E8C4E4F4D7CE605D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 1068
Signing time: Mon 02 Mar 2026 06:01:15 +0000
Manifest this update: Mon 02 Mar 2026 06:01:15 +0000
Manifest next update: Tue 03 Mar 2026 06:01:15 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: ZlPzM8eVOMQuRm47pJ0E3Whj4U8cT/M43IylH4D5pnk=)
2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f7:da:16:5d:73:e8:c4:e4:f4:d7:ce:60:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Mar 2 06:01:15 2026 GMT
Not After : Mar 3 06:01:15 2026 GMT
Subject: CN=7afde7967f89cf953d29a9327a24174942f9da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:53:ee:51:08:f8:9d:dc:4f:b8:93:47:45:
2d:a1:2d:1c:ba:c8:60:b2:96:f4:d5:f5:28:94:5c:
90:f4:15:5d:17:b4:af:37:82:33:6e:d5:b9:bd:03:
b2:52:b5:be:00:43:85:88:57:39:7a:d6:24:e2:26:
90:51:12:c8:95:fc:e2:12:bc:9f:13:06:88:b6:10:
55:ca:39:1d:4b:59:0f:6f:d1:7a:94:48:a6:e7:77:
e1:de:43:bf:1c:a9:dc:f4:df:61:38:f5:03:62:5c:
f0:c8:6e:23:5c:f4:f9:84:76:97:fa:61:bd:af:74:
fb:a1:f3:46:ff:5b:58:c8:90:cd:4d:a5:bc:56:f0:
d4:4f:33:74:ed:77:58:b8:b2:1c:a8:20:43:8d:ea:
f4:e0:4c:cc:e0:06:87:8c:66:35:cc:26:c5:8d:72:
99:31:8a:ae:29:54:00:61:06:89:2e:c3:ac:ab:d5:
65:e3:a4:fc:f6:8e:d0:7a:a1:68:11:b5:39:bc:18:
0a:66:77:98:cd:a5:06:20:81:10:25:7d:70:44:12:
ea:a5:b3:6c:2e:2a:f9:b7:a3:9e:a8:e3:1d:72:7f:
bc:db:fe:e7:fe:8c:b9:dc:7d:02:61:ba:91:c1:30:
33:c9:e4:1b:4e:60:a6:2e:87:36:85:46:29:49:43:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:E7:96:7F:89:CF:95:3D:29:A9:32:7A:24:17:49:42:F9:DA:97
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1e:e0:84:4b:f5:22:3e:d0:bb:9d:2d:1a:aa:83:51:fa:fb:
bf:b6:1f:f5:4f:bc:29:81:10:1c:08:8a:c8:23:dc:14:cb:85:
1d:8e:45:ba:93:70:83:64:5f:ac:b2:81:ed:b0:56:dc:55:97:
e7:55:ae:b5:00:dd:94:ee:e4:07:a4:9e:69:0f:bd:91:c5:c9:
26:e7:ae:df:c6:81:35:07:bd:67:e4:0f:3a:0e:27:7d:f1:70:
ac:a8:a8:50:16:de:ef:ef:2a:21:15:49:8a:1f:cc:d7:56:fe:
ca:7d:73:70:88:f3:f7:75:48:17:9b:92:02:d3:6e:a8:65:a0:
03:1b:3e:eb:6c:be:8e:55:8c:ef:39:5e:0a:e0:44:a5:77:17:
93:43:70:ae:af:52:58:3a:55:82:27:fa:9e:4c:d2:1c:7d:73:
21:d4:33:23:3d:70:65:ca:7d:4e:3c:b9:54:5e:a1:34:fc:cc:
99:fa:b9:8e:f6:c7:ca:e3:26:ff:71:07:76:31:e6:07:d9:f9:
b6:e7:2c:4a:f2:8f:e5:f7:6a:03:56:f0:95:25:f8:91:42:28:
09:52:0f:79:b7:30:d9:9a:0e:d9:8d:8e:1b:1e:04:83:9e:02:
20:bc:dd:28:0b:92:8c:74:a2:5b:94:38:13:26:22:3a:cb:6b:
2f:62:10:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvfaFl1z6MTk9NfOYF17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh
NGVhZmEwHhcNMjYwMzAyMDYwMTE1WhcNMjYwMzAzMDYwMTE1WjAzMTEwLwYDVQQD
Eyg3YWZkZTc5NjdmODljZjk1M2QyOWE5MzI3YTI0MTc0OTQyZjlkYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu9T7lEI+J3cT7iTR0UtoS0cushg
spb01fUolFyQ9BVdF7SvN4IzbtW5vQOyUrW+AEOFiFc5etYk4iaQURLIlfziEryf
EwaIthBVyjkdS1kPb9F6lEim53fh3kO/HKnc9N9hOPUDYlzwyG4jXPT5hHaX+mG9
r3T7ofNG/1tYyJDNTaW8VvDUTzN07XdYuLIcqCBDjer04EzM4AaHjGY1zCbFjXKZ
MYquKVQAYQaJLsOsq9Vl46T89o7QeqFoEbU5vBgKZneYzaUGIIEQJX1wRBLqpbNs
Lir5t6OeqOMdcn+82/7n/oy53H0CYbqRwTAzyeQbTmCmLoc2hUYpSUNyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr955Z/ic+VPSmpMnokF0lC+dqXMB8GA1UdIwQY
MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt
NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi
LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax7ghEv1
Ij7Qu50tGqqDUfr7v7Yf9U+8KYEQHAiKyCPcFMuFHY5FupNwg2RfrLKB7bBW3FWX
51WutQDdlO7kB6SeaQ+9kcXJJueu38aBNQe9Z+QPOg4nffFwrKioUBbe7+8qIRVJ
ih/M11b+yn1zcIjz93VIF5uSAtNuqGWgAxs+62y+jlWM7zleCuBEpXcXk0Nwrq9S
WDpVgif6nkzSHH1zIdQzIz1wZcp9Tjy5VF6hNPzMmfq5jvbHyuMm/3EHdjHmB9n5
tucsSvKP5fdqA1bwlSX4kUIoCVIPebcw2ZoO2Y2OGx4Eg54CILzdKAuSjHSiW5Q4
EyYiOstrL2IQKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:10 2026 by rpki-client