Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: epk6PHgbHRpTxvOKfqOS4pfbUJKwil2JCJ1qzupaIRQ=
Subject key identifier: 2F:6B:B1:55:E8:DF:49:A0:C5:B7:C0:B3:50:9A:2B:64:F9:AF:30:C8
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 019CAAC6CEE1A709760B4A0C1F55410D88ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (hash: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik=)
2: dPHqIY7qbdPlJuiUMKI9vu705BQ.roa (hash: iEFUmiIqI94qx/d/ZIh+kjuR+jCUesRKMo6DZPKrgqY=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: O6SBOs6oxOMeVH/24P0oownWS/8k8C52kL7XBOxBXkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ce:e1:a7:09:76:0b:4a:0c:1f:55:41:0d:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=2f6bb155e8df49a0c5b7c0b3509a2b64f9af30c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:12:55:c4:99:d0:58:a1:43:ff:ce:dd:08:
5e:98:f5:9e:6f:29:5a:ed:ba:78:83:dc:fe:ae:27:
08:d5:9e:11:39:22:9a:d4:01:33:4d:bc:40:6f:aa:
b4:1b:01:d2:77:9b:ac:a5:49:10:95:a2:7d:5f:f6:
4d:e4:6c:90:4b:20:29:b3:17:f0:cd:78:0b:93:b2:
83:c0:ad:9c:c8:4a:97:e1:40:03:31:11:fe:77:6a:
40:3d:e6:de:b4:31:75:fe:c9:d0:ff:8c:f8:20:d5:
8c:42:2b:2d:94:3b:42:35:34:b6:c0:01:b5:af:65:
eb:6d:22:b1:b1:79:87:a9:de:61:3c:34:57:c8:15:
3e:20:14:9d:85:ee:cf:03:49:79:6b:02:bc:cb:a7:
28:d7:48:1c:ab:1f:89:74:fc:57:4e:24:71:56:16:
f2:95:37:3a:ab:ce:0c:b6:ac:84:5f:ab:4c:52:57:
11:52:35:61:e8:7b:40:c3:cd:8e:53:53:cd:15:29:
fc:3d:d3:7e:58:bc:3f:07:b5:1b:14:93:00:3e:cc:
f5:49:a9:5e:df:34:90:f1:fd:d6:58:08:5d:ed:54:
60:66:e3:64:ea:32:88:b2:66:db:11:cb:b8:ef:70:
68:1d:5a:ad:80:4d:36:ac:9c:b4:8f:03:14:2b:8d:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:B1:55:E8:DF:49:A0:C5:B7:C0:B3:50:9A:2B:64:F9:AF:30:C8
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:49:7f:f7:42:e0:d7:e7:c2:8b:c7:70:ec:67:16:91:19:
0f:df:eb:f0:25:84:12:b0:4f:09:fd:dc:2c:50:3b:60:44:79:
4e:0a:b9:94:a5:21:95:34:65:5a:bb:dc:54:10:0b:67:d4:43:
40:2e:53:b5:7e:c6:85:c9:8d:92:04:1c:c4:ad:48:6f:07:c4:
81:fd:f1:5c:04:b4:70:1f:4e:61:0f:18:ae:b5:5f:64:e2:b6:
a9:61:06:d4:f3:2f:14:51:40:25:9b:52:19:f9:e4:9d:d7:46:
b6:c4:e8:86:24:ff:6f:98:e2:3c:87:7d:70:7f:a2:bd:83:94:
03:46:03:97:00:4d:27:c8:64:58:c4:1e:cf:53:33:8a:bb:75:
19:ea:90:46:fe:99:a9:8b:c3:b6:34:8a:f6:bd:b8:ef:dd:be:
1b:61:5d:2e:b7:69:82:3b:51:6c:aa:3f:8e:6a:c3:17:82:29:
a6:97:33:aa:50:f1:d2:96:06:b1:d9:6c:67:59:93:7a:e4:7b:
32:ff:de:ed:00:36:c6:73:1f:d7:f9:9d:3a:96:37:8c:49:5e:
89:72:4e:34:97:4d:43:a2:06:c8:4f:7f:cf:73:01:c8:2a:a0:
54:40:95:9b:92:7f:c7:52:09:3c:64:08:58:3d:c7:c2:49:f4:
c9:1b:db:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxs7hpwl2C0oMH1VBDYjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4
Y2MzYzMwHhcNMjYwMzAxMTkwMTIxWhcNMjYwMzAyMTkwMTIxWjAzMTEwLwYDVQQD
EygyZjZiYjE1NWU4ZGY0OWEwYzViN2MwYjM1MDlhMmI2NGY5YWYzMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54SVcSZ0FihQ//O3QhemPWebyla
7bp4g9z+ricI1Z4ROSKa1AEzTbxAb6q0GwHSd5uspUkQlaJ9X/ZN5GyQSyApsxfw
zXgLk7KDwK2cyEqX4UADMRH+d2pAPebetDF1/snQ/4z4INWMQistlDtCNTS2wAG1
r2XrbSKxsXmHqd5hPDRXyBU+IBSdhe7PA0l5awK8y6co10gcqx+JdPxXTiRxVhby
lTc6q84MtqyEX6tMUlcRUjVh6HtAw82OU1PNFSn8PdN+WLw/B7UbFJMAPsz1Sale
3zSQ8f3WWAhd7VRgZuNk6jKIsmbbEcu473BoHVqtgE02rJy0jwMUK41aKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9rsVXo30mgxbfAs1CaK2T5rzDIMB8GA1UdIwQY
MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt
ZmVmNDg3MTJhY2FiLzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi
LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg9Jf/dC
4NfnwovHcOxnFpEZD9/r8CWEErBPCf3cLFA7YER5Tgq5lKUhlTRlWrvcVBALZ9RD
QC5TtX7GhcmNkgQcxK1IbwfEgf3xXAS0cB9OYQ8YrrVfZOK2qWEG1PMvFFFAJZtS
GfnknddGtsTohiT/b5jiPId9cH+ivYOUA0YDlwBNJ8hkWMQez1Mzirt1GeqQRv6Z
qYvDtjSK9r24792+G2FdLrdpgjtRbKo/jmrDF4IpppczqlDx0pYGsdlsZ1mTeuR7
Mv/e7QA2xnMf1/mdOpY3jEleiXJONJdNQ6IGyE9/z3MByCqgVECVm5J/x1IJPGQI
WD3Hwkn0yRvbxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:27 2026 by rpki-client