Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: dE9bURfjEEzDPGOjWEXhBTRvjFh2NHQ/u4320vbKszI=
Subject key identifier: 70:02:D4:95:77:6A:4B:A6:57:82:2B:ED:99:7E:62:21:53:31:34:AC
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019CAAC66F70530B166CCDC1E3934DAE69A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa (hash: H36onPAZgGkM8Gj/4vPHfKYw673MWHLo+rCT27hgkEo=)
2: hDlDQXPia_LVcBGYXeJfZh4MgHc.roa (hash: MtZoYfBZrAxoqrM2ef+MiwlnVce8K6//q+/J8AqG4MA=)
3: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: nbFGsgEeFfUO7vPt3GGlz4pG0TB8PkFmifQ4HWsgHw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6f:70:53:0b:16:6c:cd:c1:e3:93:4d:ae:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=7002d495776a4ba657822bed997e6221533134ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:50:c1:de:25:3c:7a:bf:08:e4:55:ca:df:
4f:0d:4c:73:ff:99:52:f5:76:28:fb:9b:39:68:3d:
0f:03:c4:2a:08:de:7a:3c:62:87:af:bc:f4:57:32:
04:39:ee:96:c4:01:f5:39:4f:40:13:94:02:ba:b8:
db:fd:c5:37:cb:f7:21:5c:31:3f:a5:58:ac:57:9c:
0d:ca:43:06:78:46:90:de:2a:19:d5:96:fa:99:ec:
5e:a5:dc:db:ac:10:23:75:00:aa:dd:6d:ae:1d:5c:
e7:65:a0:57:da:af:ad:89:db:5f:fa:98:9c:ce:41:
c4:35:da:70:d0:4a:7d:4d:da:ed:ad:f8:31:fd:39:
5f:ba:a5:6d:c6:14:75:ff:09:ce:49:74:60:d3:29:
a2:a7:e3:0a:cd:99:a7:5e:3b:bc:d1:98:aa:84:4e:
06:e0:ef:fc:44:d3:08:d3:6c:94:90:c5:4e:23:ea:
28:09:16:84:a4:64:c9:41:e5:9c:a9:8b:05:6a:f9:
bb:0d:1a:83:dd:8d:f3:d4:87:1e:e4:c2:a6:2c:b8:
40:96:71:1a:a0:e5:4d:40:38:04:88:64:b3:1c:c9:
41:74:50:5f:c3:ea:5c:44:cc:60:8e:6a:4d:19:48:
dc:44:50:16:a0:bf:08:66:6c:19:d8:36:68:4d:21:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:D4:95:77:6A:4B:A6:57:82:2B:ED:99:7E:62:21:53:31:34:AC
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:8f:cc:7b:d1:0c:7a:78:8c:60:9b:8e:db:55:0c:8b:1e:
d7:70:03:fd:d3:3f:db:76:00:89:e8:b8:70:21:58:1e:11:1f:
58:fe:1e:69:e6:09:c5:61:7a:37:63:92:f7:f4:79:9d:c5:bb:
0a:2d:bb:7a:88:7c:4f:a5:df:fb:07:19:d8:87:3b:3b:6a:13:
71:1e:8c:6b:75:ed:8e:ab:9c:e1:63:72:98:c4:56:4e:22:6c:
54:31:f8:bd:11:d3:af:1e:8d:67:50:0f:f8:fd:ed:ef:d1:8b:
08:f9:1e:9a:84:4a:49:71:86:c1:ae:82:c4:a5:55:e6:a0:44:
29:79:34:c7:fa:01:39:bd:7a:80:a4:6b:9a:fe:6b:79:94:82:
93:a3:b8:2b:be:cb:0e:4e:a5:2b:a1:8c:76:1a:44:37:fb:c1:
27:8f:87:6e:e4:90:88:3e:48:a7:37:e5:a1:90:62:14:98:1d:
65:f0:25:cb:bc:47:60:01:f7:4e:a3:b2:0e:9b:6a:79:31:ab:
02:e0:28:9b:ed:b6:0e:2f:69:0f:c5:11:d8:2b:43:9e:b5:f0:
26:8e:42:1d:c0:5b:55:34:fd:37:a6:97:43:00:2d:74:2d:21:
bf:21:44:34:f2:de:51:40:8a:62:b6:bd:cf:c5:ab:11:c6:e9:
fb:b6:fe:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxm9wUwsWbM3B45NNrmmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl
ZmJkOWQwHhcNMjYwMzAxMTkwMDU3WhcNMjYwMzAyMTkwMDU3WjAzMTEwLwYDVQQD
Eyg3MDAyZDQ5NTc3NmE0YmE2NTc4MjJiZWQ5OTdlNjIyMTUzMzEzNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJQwd4lPHq/CORVyt9PDUxz/5lS
9XYo+5s5aD0PA8QqCN56PGKHr7z0VzIEOe6WxAH1OU9AE5QCurjb/cU3y/chXDE/
pVisV5wNykMGeEaQ3ioZ1Zb6mexepdzbrBAjdQCq3W2uHVznZaBX2q+tidtf+pic
zkHENdpw0Ep9Tdrtrfgx/TlfuqVtxhR1/wnOSXRg0ymip+MKzZmnXju80ZiqhE4G
4O/8RNMI02yUkMVOI+ooCRaEpGTJQeWcqYsFavm7DRqD3Y3z1Ice5MKmLLhAlnEa
oOVNQDgEiGSzHMlBdFBfw+pcRMxgjmpNGUjcRFAWoL8IZmwZ2DZoTSEzwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAC1JV3akumV4Ir7Zl+YiFTMTSsMB8GA1UdIwQY
MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct
YjdhNjYwOGE4ZmJjLzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj
LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTOPzHvR
DHp4jGCbjttVDIse13AD/dM/23YAiei4cCFYHhEfWP4eaeYJxWF6N2OS9/R5ncW7
Ci27eoh8T6Xf+wcZ2Ic7O2oTcR6Ma3Xtjquc4WNymMRWTiJsVDH4vRHTrx6NZ1AP
+P3t79GLCPkemoRKSXGGwa6CxKVV5qBEKXk0x/oBOb16gKRrmv5reZSCk6O4K77L
Dk6lK6GMdhpEN/vBJ4+HbuSQiD5IpzfloZBiFJgdZfAly7xHYAH3TqOyDptqeTGr
AuAom+22Di9pD8UR2CtDnrXwJo5CHcBbVTT9N6aXQwAtdC0hvyFENPLeUUCKYra9
z8WrEcbp+7b+WQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:12 2026 by rpki-client