Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: CCnqon4TK5NQFduzhAUXe5JuAEZasI1a9Wj2XlQMjuQ=
Subject key identifier: 91:B8:BE:56:55:A1:D0:C8:C4:F9:1C:14:29:B0:01:57:91:9E:1D:2F
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019CAA8FDAE202B9FD33C71997BDFBA456AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1130
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: HwzBoB/1iwa9HZyOJwM28fltn36gAXZrZIKHOOA3Ryg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:da:e2:02:b9:fd:33:c7:19:97:bd:fb:a4:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=91b8be5655a1d0c8c4f91c1429b00157919e1d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:34:89:d2:2f:3f:e1:f1:af:d9:e1:69:7b:
86:07:42:ac:c4:bf:01:19:dd:25:6c:0f:6b:8b:2f:
cc:82:21:0e:d4:7a:0f:ec:23:28:11:d9:d8:3b:07:
a6:ba:b6:5d:dd:c4:48:0b:19:bc:a7:9b:19:00:44:
48:78:aa:0a:d3:42:80:d2:6b:da:4b:44:d0:d1:d7:
73:77:c2:a2:69:34:8e:2d:15:5b:2c:ef:3e:61:98:
2d:61:32:73:88:be:dc:3a:d2:b1:81:d6:70:2f:79:
c6:80:65:96:89:fa:d5:b2:26:49:27:77:ff:a5:f4:
11:fb:4a:a5:12:ae:4b:d1:6d:c3:e9:8d:6c:be:f6:
5a:62:02:62:1b:61:5a:bd:c0:ff:80:68:23:3b:1b:
6f:d1:2d:b5:7b:dd:b4:2c:84:03:c1:c8:d7:51:37:
47:09:58:1f:12:70:c7:0f:06:ef:28:41:27:bf:d5:
6e:96:82:5d:70:1a:44:c5:26:1d:98:c2:6e:50:f2:
24:71:21:26:8f:4c:68:db:80:cc:ff:7b:1d:43:9b:
6b:ba:ff:11:94:db:fc:44:7b:61:d8:f3:6b:a3:92:
f2:82:e5:0e:4e:d3:70:1c:66:2e:c4:a3:e0:e2:08:
8d:ad:c1:09:61:c8:7e:01:4d:db:a7:fe:e6:b9:83:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:BE:56:55:A1:D0:C8:C4:F9:1C:14:29:B0:01:57:91:9E:1D:2F
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:be:b7:36:98:3e:ab:28:59:94:e6:7a:dc:1b:ba:b0:b4:
1d:de:46:59:cc:c1:58:e9:bf:aa:2c:3f:b0:1c:2b:7b:f0:eb:
43:6d:18:e4:fd:1f:4d:de:fe:86:de:48:5b:4d:ea:88:83:39:
a4:27:93:fe:9f:70:1d:fe:91:cd:8b:e5:c9:30:01:a2:ea:b2:
d4:20:c6:c6:39:87:bc:cd:86:77:cd:d2:0e:2f:d8:1f:1a:02:
7f:2e:4b:e4:64:66:97:39:eb:a2:a0:ea:b6:ab:db:14:e8:b9:
1c:e5:cc:69:7a:37:ee:95:db:e7:21:c1:75:94:83:48:96:cb:
de:23:90:27:9c:56:12:0a:3f:f3:5b:f1:a7:3c:7c:44:8d:bb:
92:17:81:84:e6:9a:b1:28:33:a1:a3:31:d8:08:fd:ae:fb:69:
dd:3a:42:bc:9c:8b:8e:68:0a:57:ad:5d:33:eb:50:a0:4e:e7:
09:3b:0d:88:88:5a:1e:89:ad:63:f3:49:90:e6:54:c4:92:0e:
53:71:06:a3:56:e5:87:ac:ad:6f:5a:dd:02:0f:55:cb:de:a0:
9f:86:c5:c5:bb:b7:5f:b2:c8:f6:9c:47:ea:8b:ca:69:ef:d4:
6e:fd:2a:dc:e6:93:80:bb:8d:9e:f8:de:65:84:83:4f:1c:07:
14:d3:ab:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj9riArn9M8cZl737pFasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjYwMzAxMTgwMTIwWhcNMjYwMzAyMTgwMTIwWjAzMTEwLwYDVQQD
Eyg5MWI4YmU1NjU1YTFkMGM4YzRmOTFjMTQyOWIwMDE1NzkxOWUxZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwM0idIvP+Hxr9nhaXuGB0KsxL8B
Gd0lbA9riy/MgiEO1HoP7CMoEdnYOwemurZd3cRICxm8p5sZAERIeKoK00KA0mva
S0TQ0ddzd8KiaTSOLRVbLO8+YZgtYTJziL7cOtKxgdZwL3nGgGWWifrVsiZJJ3f/
pfQR+0qlEq5L0W3D6Y1svvZaYgJiG2FavcD/gGgjOxtv0S21e920LIQDwcjXUTdH
CVgfEnDHDwbvKEEnv9VuloJdcBpExSYdmMJuUPIkcSEmj0xo24DM/3sdQ5truv8R
lNv8RHth2PNro5LyguUOTtNwHGYuxKPg4giNrcEJYch+AU3bp/7muYO36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG4vlZVodDIxPkcFCmwAVeRnh0vMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcm+tzaY
PqsoWZTmetwburC0Hd5GWczBWOm/qiw/sBwre/DrQ20Y5P0fTd7+ht5IW03qiIM5
pCeT/p9wHf6RzYvlyTABouqy1CDGxjmHvM2Gd83SDi/YHxoCfy5L5GRmlznroqDq
tqvbFOi5HOXMaXo37pXb5yHBdZSDSJbL3iOQJ5xWEgo/81vxpzx8RI27kheBhOaa
sSgzoaMx2Aj9rvtp3TpCvJyLjmgKV61dM+tQoE7nCTsNiIhaHomtY/NJkOZUxJIO
U3EGo1blh6ytb1rdAg9Vy96gn4bFxbu3X7LI9pxH6ovKae/Ubv0q3OaTgLuNnvje
ZYSDTxwHFNOrbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:30 2026 by rpki-client