Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: rg5hap6UaZRF2E0fgahDBAVfskHbTWqyl039dQ6MtfY=
Subject key identifier: 42:9B:0D:89:20:79:6A:AD:E8:84:22:80:5A:48:75:9E:6C:96:36:A9
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 019CABD8FF78D84F52CCEC812B5C67826FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0CA8
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: WLy09eFH3uc2aH0cddH4hg2SKEE.roa (hash: yx78w/OQnOQhJ5Wl9aNR6GNjQgIHzbW+TJH/0ydI0BE=)
2: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: 38WHt9acr6cfkSjc2TuH3OcSlnPie5yMsYEJb9ryMg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ff:78:d8:4f:52:cc:ec:81:2b:5c:67:82:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=429b0d8920796aade88422805a48759e6c9636a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:d6:a7:42:03:92:9a:0c:b7:66:f8:d7:8c:
3e:3a:ea:92:61:29:58:b7:65:cc:25:99:e1:99:68:
f4:28:73:33:27:57:b3:0f:74:1d:2a:12:aa:8b:fa:
f1:26:78:34:9f:c8:7f:b6:eb:36:22:89:7a:99:47:
a9:8b:fe:82:36:2a:04:07:ca:06:1b:50:ae:9f:de:
c6:47:7f:f7:d5:52:c8:d3:d1:db:c9:09:72:5e:84:
5a:d6:68:0c:cf:46:3f:8a:b1:1e:89:da:c7:6b:2b:
8c:58:0e:da:2e:aa:93:e0:99:e7:06:1c:24:43:fc:
a6:0a:f6:23:c6:a3:cd:94:5d:98:1b:d5:9f:fe:8a:
c4:fb:c3:b0:c1:06:a0:d1:c9:38:d5:f1:b6:59:e3:
c9:13:a4:a8:89:2a:7f:ec:fb:f0:0e:6c:e9:fc:47:
08:d0:d4:d7:f5:39:6c:7a:32:dd:be:a3:43:51:12:
82:97:e7:48:11:7a:3b:85:bf:bf:c4:5a:c4:dd:4c:
2d:41:e8:78:95:be:4e:45:78:d4:4a:dc:a4:5b:24:
f0:54:c8:6b:8a:6f:a4:ad:ea:67:28:6c:7d:f3:11:
1f:60:c6:20:fe:a5:47:1b:07:19:86:7f:b6:09:c1:
7d:ac:d3:11:a4:d7:fd:55:49:73:cf:19:d8:f6:17:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:0D:89:20:79:6A:AD:E8:84:22:80:5A:48:75:9E:6C:96:36:A9
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:f2:7f:49:4c:ee:fa:dd:fb:81:35:f2:1d:56:34:13:7f:
36:c4:0b:53:42:64:65:0b:f7:cd:cd:4c:d3:3b:33:6c:ce:21:
07:48:c1:26:b5:b1:ff:6e:af:7a:99:61:55:0d:c5:6e:45:a6:
e1:17:31:21:0b:f1:81:94:7a:35:2c:58:cf:0e:08:6a:38:49:
52:ef:4a:99:34:c5:6d:80:27:d3:6d:be:bc:92:47:c0:41:a3:
9c:44:6d:3d:87:59:af:8d:3c:fc:ee:c4:53:94:28:03:a2:80:
4a:4f:2e:d1:fa:b9:c5:6c:08:7a:13:68:93:9c:47:f1:9f:f0:
e4:87:df:7d:eb:ae:f3:1f:21:21:1e:53:e5:15:34:f4:03:04:
49:61:c1:2e:d6:ba:d0:ed:0e:06:e6:dd:13:7b:67:c5:c0:a3:
ce:6c:8e:73:20:c0:4b:73:cb:6c:19:f9:d8:37:d8:fd:8d:12:
e7:0b:01:8b:fb:69:37:b7:50:c6:23:e4:84:e4:d7:45:cc:24:
79:62:5b:89:46:7b:4d:45:cb:2f:b5:c9:47:de:d2:a5:6f:67:
31:3d:06:8c:c4:d8:b7:50:65:a8:71:8b:31:32:8b:2c:a4:26:
26:56:fd:f1:01:66:88:63:ef:be:5d:e6:f4:69:ba:69:d9:08:
27:7f:13:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2P942E9SzOyBK1xngm/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzQwODE4YTg2MzM5MDhjZjM3ZWExNDVkNjZkOTI0NTJm
YjczYWEwHhcNMjYwMzAyMDAwMDUwWhcNMjYwMzAzMDAwMDUwWjAzMTEwLwYDVQQD
Eyg0MjliMGQ4OTIwNzk2YWFkZTg4NDIyODA1YTQ4NzU5ZTZjOTYzNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW3Wp0IDkpoMt2b414w+OuqSYSlY
t2XMJZnhmWj0KHMzJ1ezD3QdKhKqi/rxJng0n8h/tus2Iol6mUepi/6CNioEB8oG
G1Cun97GR3/31VLI09HbyQlyXoRa1mgMz0Y/irEeidrHayuMWA7aLqqT4JnnBhwk
Q/ymCvYjxqPNlF2YG9Wf/orE+8OwwQag0ck41fG2WePJE6SoiSp/7PvwDmzp/EcI
0NTX9TlsejLdvqNDURKCl+dIEXo7hb+/xFrE3UwtQeh4lb5ORXjUStykWyTwVMhr
im+krepnKGx98xEfYMYg/qVHGwcZhn+2CcF9rNMRpNf9VUlzzxnY9heqKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKbDYkgeWqt6IQigFpIdZ5sljapMB8GA1UdIwQY
MBaAFGE0CBioYzkIzzfqFF1m2SRS+3OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQt
NmI2MTViN2RiZmUwLzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zOTFkZDctNGI5Ni00NmE1LWFmYjQtNmI2MTViN2RiZmUw
LzEvWVRRSUdLaGpPUWpQTi1vVVhXYlpKRkw3YzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSLyf0lM
7vrd+4E18h1WNBN/NsQLU0JkZQv3zc1M0zszbM4hB0jBJrWx/26veplhVQ3FbkWm
4RcxIQvxgZR6NSxYzw4IajhJUu9KmTTFbYAn022+vJJHwEGjnERtPYdZr408/O7E
U5QoA6KASk8u0fq5xWwIehNok5xH8Z/w5Ifffeuu8x8hIR5T5RU09AMESWHBLta6
0O0OBubdE3tnxcCjzmyOcyDAS3PLbBn52DfY/Y0S5wsBi/tpN7dQxiPkhOTXRcwk
eWJbiUZ7TUXLL7XJR97SpW9nMT0GjMTYt1BlqHGLMTKLLKQmJlb98QFmiGPvvl3m
9Gm6adkIJ38TGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:29 2026 by rpki-client