Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: uGvXPXNvpH0drnwZRdOSEV0B+i6vJc4en8oDZ7b7F6Q=
Subject key identifier: F7:39:D6:45:C7:6A:13:61:73:3D:A3:1D:3F:E1:4A:E9:69:D9:AD:77
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019CAA589C5677A256B935AEB76A86AAAE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1326
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: O605nmssuqGLUu0ralIHt4GP9Fe+SVcuNncJCyQ14dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9c:56:77:a2:56:b9:35:ae:b7:6a:86:aa:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=f739d645c76a1361733da31d3fe14ae969d9ad77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:d4:38:e1:74:4d:3b:59:89:44:9b:74:84:
44:5a:bb:9e:a3:c1:b7:30:a1:6a:7b:1d:11:a9:9a:
30:0d:d8:07:80:80:82:6d:36:3e:57:71:c6:9c:90:
4a:b9:71:c3:f3:50:e1:17:92:10:3f:0b:d7:84:3c:
85:a8:a1:7b:58:b0:10:32:21:37:79:6d:e4:1a:1d:
21:72:53:f0:de:4f:e1:89:51:ab:a7:6b:e4:da:b9:
37:d6:fe:89:73:ba:63:c2:4b:38:82:24:0d:97:9d:
b2:f4:61:99:9c:45:00:ab:77:3f:3e:89:01:75:8f:
33:e1:63:4f:92:c7:de:3e:5f:0e:f3:47:7d:5d:8a:
63:47:c4:25:a9:29:a0:48:8f:4f:df:81:c2:f3:1a:
3b:dc:24:75:47:fb:18:75:c1:97:85:73:03:f0:61:
b6:b5:8a:8a:24:ed:66:7f:c9:c3:74:30:55:0e:f9:
5f:7c:4e:37:9c:8e:fc:ac:02:52:65:a2:46:ff:6c:
49:5f:ed:43:04:69:71:ba:58:dc:9e:ad:93:a6:55:
54:6b:73:24:79:2f:c1:ef:ff:fe:b5:f3:51:8e:35:
c7:10:5a:c7:1d:1d:1e:6d:a3:94:2d:91:28:85:a7:
7e:31:25:19:3f:c5:15:70:68:22:5c:b7:cd:5f:98:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:D6:45:C7:6A:13:61:73:3D:A3:1D:3F:E1:4A:E9:69:D9:AD:77
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:18:b9:44:1a:c5:3e:81:ff:bd:0a:43:91:7b:66:ab:20:bb:
5f:fb:d9:3f:44:1a:37:18:35:6b:d0:f5:9e:1a:5c:42:b1:f5:
fc:3f:af:81:6c:9c:9d:49:4a:c9:0f:e5:b2:cd:9d:7c:7e:c4:
cd:f6:59:f7:c5:ca:35:a0:5c:40:80:e1:da:35:f5:96:93:f9:
12:da:45:93:3c:9b:1e:52:b7:6a:ba:f2:37:9e:6b:8f:87:4f:
d8:c7:07:87:e3:a5:e6:d7:70:7f:31:9c:ee:79:68:32:17:19:
c6:d2:59:2b:db:93:b2:0b:bc:f5:5b:41:a7:aa:ed:ce:45:06:
1e:ec:42:a7:33:2c:5c:4d:79:82:c0:a3:6a:35:e5:db:4d:3a:
67:91:0f:48:aa:ba:04:d3:e1:03:9f:f3:ca:c6:98:b3:60:94:
e1:83:ca:3d:d8:b1:9d:68:cf:b8:7c:b1:5a:c4:49:81:26:73:
18:16:4d:25:45:bc:62:11:0a:9a:39:4d:83:bc:20:94:27:b6:
49:3a:c8:d0:2d:02:2a:8e:ad:5b:76:1d:fc:f0:22:e4:a6:8c:
d0:4a:ac:ec:95:0f:be:7f:ce:0f:96:8f:f3:5c:0d:71:92:42:
cc:fd:8a:16:2c:b8:2b:a5:21:1d:a1:42:56:a8:5c:83:df:da:
ab:be:42:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJxWd6JWuTWut2qGqq45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjYwMzAxMTcwMDU5WhcNMjYwMzAyMTcwMDU5WjAzMTEwLwYDVQQD
EyhmNzM5ZDY0NWM3NmExMzYxNzMzZGEzMWQzZmUxNGFlOTY5ZDlhZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIPUOOF0TTtZiUSbdIREWrueo8G3
MKFqex0RqZowDdgHgICCbTY+V3HGnJBKuXHD81DhF5IQPwvXhDyFqKF7WLAQMiE3
eW3kGh0hclPw3k/hiVGrp2vk2rk31v6Jc7pjwks4giQNl52y9GGZnEUAq3c/PokB
dY8z4WNPksfePl8O80d9XYpjR8QlqSmgSI9P34HC8xo73CR1R/sYdcGXhXMD8GG2
tYqKJO1mf8nDdDBVDvlffE43nI78rAJSZaJG/2xJX+1DBGlxuljcnq2TplVUa3Mk
eS/B7//+tfNRjjXHEFrHHR0ebaOULZEohad+MSUZP8UVcGgiXLfNX5jW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc51kXHahNhcz2jHT/hSulp2a13MB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxi5RBrF
PoH/vQpDkXtmqyC7X/vZP0QaNxg1a9D1nhpcQrH1/D+vgWycnUlKyQ/lss2dfH7E
zfZZ98XKNaBcQIDh2jX1lpP5EtpFkzybHlK3arryN55rj4dP2McHh+Ol5tdwfzGc
7nloMhcZxtJZK9uTsgu89VtBp6rtzkUGHuxCpzMsXE15gsCjajXl2006Z5EPSKq6
BNPhA5/zysaYs2CU4YPKPdixnWjPuHyxWsRJgSZzGBZNJUW8YhEKmjlNg7wglCe2
STrI0C0CKo6tW3Yd/PAi5KaM0Eqs7JUPvn/OD5aP81wNcZJCzP2KFiy4K6UhHaFC
Vqhcg9/aq75CXg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:46 2026 by rpki-client