Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: ZMozwEmbDHD/MKU1X0c7H8995ZUJRWwazZZ87h8zVHo=
Subject key identifier: 65:1F:E5:33:5B:FE:BE:56:7B:51:4B:7B:71:2F:AE:A9:82:C8:2E:39
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019CAAFD8A963BC135F343537A991A1CDB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 023B
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: rYXdP0QbsKDfRzQu1DysoofDVQhSzYG1kKPVCxIgNZQ=)
2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8a:96:3b:c1:35:f3:43:53:7a:99:1a:1c:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=651fe5335bfebe567b514b7b712faea982c82e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:67:fb:7c:48:a7:28:18:a7:b5:47:a5:ce:
b6:88:a2:fb:ed:0f:c6:70:d3:c1:8f:c1:5e:06:1d:
d2:bf:a0:ba:a6:10:3b:07:0a:63:2b:90:b1:8f:48:
f3:73:eb:19:9c:93:61:ee:fa:1c:65:95:21:2f:12:
9c:d3:99:4e:a2:89:59:bc:2c:55:2c:b3:8c:4a:66:
17:2c:01:b4:ee:f3:f1:89:42:31:cf:fa:f4:1f:d1:
d9:59:fc:a5:ee:28:7e:76:88:62:9a:82:ce:0a:aa:
2e:7b:84:ab:64:f1:ca:cc:7f:44:b1:71:6d:d1:38:
46:63:d1:79:51:98:fd:6f:f6:fd:fb:51:24:4b:d8:
cf:e3:a8:d5:9c:06:12:f2:6d:32:3e:51:18:cb:63:
9f:0d:8c:11:35:97:0d:96:33:13:6b:f5:eb:4c:fc:
4d:eb:97:28:c2:2f:1f:e8:3a:5b:ce:f3:10:bc:10:
60:7d:b0:ab:95:13:df:06:c9:9c:c9:96:6e:69:38:
c6:f1:5e:47:c1:c3:72:b4:ca:0b:a4:2c:47:a5:2e:
f3:d5:f8:90:b8:31:4f:8e:06:19:7d:61:fd:a4:d7:
45:14:59:4b:e6:f6:bb:d7:4a:02:f5:3a:a1:ef:9a:
b5:fa:44:ed:a3:7b:fe:59:38:d9:09:b0:6f:01:bd:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:E5:33:5B:FE:BE:56:7B:51:4B:7B:71:2F:AE:A9:82:C8:2E:39
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:33:2a:65:f9:44:5d:3b:20:2b:e9:ab:b2:94:1a:c7:90:15:
a2:63:b7:88:26:60:81:26:ca:62:25:63:8d:1f:64:93:24:79:
d4:ff:26:0b:cc:5a:b6:40:df:be:19:30:f6:3e:79:7a:68:19:
19:e0:1e:20:11:26:22:e7:9a:19:95:92:04:6c:c9:6f:a6:15:
68:d3:ca:88:54:55:0d:36:90:06:16:60:1e:4c:ac:e0:36:33:
ac:4e:6e:7d:c7:fb:fa:fd:ea:d9:7b:5e:5e:91:26:c4:a0:c0:
75:4d:f7:28:93:42:96:73:1d:81:76:f4:08:a4:d4:cc:32:70:
19:c4:7e:f2:06:17:77:2d:2a:ea:5f:e4:7e:ef:02:05:11:a0:
ab:87:cd:b5:c0:17:bd:04:cf:1e:da:3a:86:70:80:94:01:63:
ce:a6:8a:f4:ac:cc:4b:56:26:ae:e1:c1:24:d5:32:7a:c1:44:
f6:f0:aa:ac:b0:93:00:5d:18:d4:f9:c1:08:39:37:23:3a:ee:
6f:98:38:a5:7a:32:a8:a1:5a:5e:f5:82:16:5d:5a:bc:e5:04:
45:28:85:98:45:ed:0c:60:5f:b6:64:d2:7c:fa:67:26:57:27:
9d:3f:f2:00:8c:c8:a2:37:f7:90:60:ed:12:0b:d2:86:5b:90:
18:93:8a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/YqWO8E180NTepkaHNsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODcxNjllMDMwZTM3MjVkNmViNDc4YTMyN2U2YmRmMzZi
ZThkMmYwHhcNMjYwMzAxMjAwMTA4WhcNMjYwMzAyMjAwMTA4WjAzMTEwLwYDVQQD
Eyg2NTFmZTUzMzViZmViZTU2N2I1MTRiN2I3MTJmYWVhOTgyYzgyZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4tn+3xIpygYp7VHpc62iKL77Q/G
cNPBj8FeBh3Sv6C6phA7BwpjK5Cxj0jzc+sZnJNh7vocZZUhLxKc05lOoolZvCxV
LLOMSmYXLAG07vPxiUIxz/r0H9HZWfyl7ih+dohimoLOCqoue4SrZPHKzH9EsXFt
0ThGY9F5UZj9b/b9+1EkS9jP46jVnAYS8m0yPlEYy2OfDYwRNZcNljMTa/XrTPxN
65cowi8f6DpbzvMQvBBgfbCrlRPfBsmcyZZuaTjG8V5HwcNytMoLpCxHpS7z1fiQ
uDFPjgYZfWH9pNdFFFlL5va710oC9Tqh75q1+kTto3v+WTjZCbBvAb3m+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUf5TNb/r5We1FLe3EvrqmCyC45MB8GA1UdIwQY
MBaAFGGHFp4DDjcl1utHijJ+a982vo0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWIt
NDgwZGY4ZjQxZTQ0LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWItNDgwZGY4ZjQxZTQ0
LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTMqZflE
XTsgK+mrspQax5AVomO3iCZggSbKYiVjjR9kkyR51P8mC8xatkDfvhkw9j55emgZ
GeAeIBEmIueaGZWSBGzJb6YVaNPKiFRVDTaQBhZgHkys4DYzrE5ufcf7+v3q2Xte
XpEmxKDAdU33KJNClnMdgXb0CKTUzDJwGcR+8gYXdy0q6l/kfu8CBRGgq4fNtcAX
vQTPHto6hnCAlAFjzqaK9KzMS1YmruHBJNUyesFE9vCqrLCTAF0Y1PnBCDk3Izru
b5g4pXoyqKFaXvWCFl1avOUERSiFmEXtDGBftmTSfPpnJlcnnT/yAIzIojf3kGDt
EgvShluQGJOKEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:19 2026 by rpki-client