Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: 0+7fPBHrnzK2s8PO8e/HPnguocrjrh7X6DTmASoZPKQ=
Subject key identifier: 81:79:F1:59:AE:86:50:09:D6:15:29:A0:47:DC:2B:9B:86:64:B1:C8
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019CAD5960C17FA2834265B697ECF1C460FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0B50
Signing time: Mon 02 Mar 2026 07:00:41 +0000
Manifest this update: Mon 02 Mar 2026 07:00:41 +0000
Manifest next update: Tue 03 Mar 2026 07:00:41 +0000
Files and hashes: 1: IggoS081L9PfSnoANLO8UPkw_zo.roa (hash: RstMLmB9/U68WoUS3YJFOjuTsGp4LpQVXF1KSqQUnnk=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: NqcN8tiPxPvhmhUJweMc0ZTl2H+z363sQLt1Vwm11ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:60:c1:7f:a2:83:42:65:b6:97:ec:f1:c4:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Mar 2 07:00:41 2026 GMT
Not After : Mar 3 07:00:41 2026 GMT
Subject: CN=8179f159ae865009d61529a047dc2b9b8664b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:36:40:68:c6:e0:22:35:3b:5a:b7:c3:2f:
b7:fb:94:75:20:0f:e8:33:8c:03:54:44:fb:f5:fb:
6a:92:80:eb:35:61:28:65:35:73:d0:59:8a:96:1c:
de:56:dc:95:c9:b5:dd:2b:a6:cd:84:eb:ba:4b:6e:
fe:c1:10:42:d0:84:52:e2:29:7d:78:5e:d7:be:d8:
48:26:c9:69:9b:f6:d4:43:c8:0c:da:9a:07:e6:fd:
64:a0:87:5f:2b:8c:3b:4d:ed:a6:61:b9:e1:e3:02:
b8:65:f4:a7:07:3e:8a:a1:d8:f2:dc:3c:30:d6:25:
83:3e:75:f1:12:29:64:31:f9:f8:9c:11:9a:77:e9:
4b:03:88:ce:72:87:45:24:d8:f0:89:94:92:66:ab:
ae:cd:e5:43:24:74:3d:d1:85:97:02:11:83:d9:7a:
43:93:e2:8d:fe:46:f6:d0:fd:17:25:92:2e:f8:fe:
45:7b:5b:07:3f:a6:ad:20:c4:0e:fe:cc:f7:93:a8:
a0:14:59:9f:6b:69:0d:62:f9:dc:90:03:93:2a:af:
7b:2c:c7:5e:9c:2c:6e:b1:e8:72:6b:e4:f6:97:8d:
95:84:b5:e9:d7:3d:66:59:8e:a5:7f:d1:99:11:a5:
df:12:bc:48:d1:28:89:cd:38:05:67:31:a3:9c:b4:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:F1:59:AE:86:50:09:D6:15:29:A0:47:DC:2B:9B:86:64:B1:C8
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:de:ac:9f:36:25:f3:47:9c:aa:03:8f:bd:d7:95:33:61:5a:
db:74:f7:3f:e4:5d:78:cb:00:47:3c:24:a5:24:29:10:c3:18:
f9:d4:59:74:15:f1:4b:dc:5f:3e:5d:f3:08:bc:8e:53:4d:a7:
4e:49:c8:74:fd:af:d6:48:c8:a4:ec:a1:d8:ed:17:b9:8a:09:
c7:1f:ff:8c:92:e9:19:5a:1f:80:9c:54:7a:25:6c:cd:a4:e4:
01:fd:0d:9f:71:9c:0b:f4:5f:e4:4d:ac:92:87:06:dd:f3:63:
0d:ec:b3:aa:74:98:18:97:c6:64:a3:35:a6:67:5a:b2:74:da:
21:1b:9e:ac:12:c5:14:31:d6:6f:ee:9b:bc:15:a9:26:3e:ff:
31:22:b2:fb:8d:d4:22:34:4f:46:cc:8c:10:c6:ca:12:87:67:
e9:fa:3f:99:15:13:fc:4f:dd:fb:87:9c:01:b6:24:34:6b:4f:
59:94:f0:6d:c8:19:77:38:7a:6c:48:bc:b6:da:14:e4:c9:49:
dc:3e:62:bc:fe:2d:5c:1e:81:06:9b:77:35:1e:91:c6:e6:11:
9b:7b:93:4c:46:8b:2f:e9:de:a1:e6:65:22:05:6c:e9:15:59:
64:7b:2e:cf:16:6f:23:8e:cb:b9:90:ab:f3:7f:2f:04:60:aa:
05:3c:bc:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWWDBf6KDQmW2l+zxxGD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2
Mjk4ZDAwHhcNMjYwMzAyMDcwMDQxWhcNMjYwMzAzMDcwMDQxWjAzMTEwLwYDVQQD
Eyg4MTc5ZjE1OWFlODY1MDA5ZDYxNTI5YTA0N2RjMmI5Yjg2NjRiMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gs2QGjG4CI1O1q3wy+3+5R1IA/o
M4wDVET79ftqkoDrNWEoZTVz0FmKlhzeVtyVybXdK6bNhOu6S27+wRBC0IRS4il9
eF7XvthIJslpm/bUQ8gM2poH5v1koIdfK4w7Te2mYbnh4wK4ZfSnBz6Kodjy3Dww
1iWDPnXxEilkMfn4nBGad+lLA4jOcodFJNjwiZSSZquuzeVDJHQ90YWXAhGD2XpD
k+KN/kb20P0XJZIu+P5Fe1sHP6atIMQO/sz3k6igFFmfa2kNYvnckAOTKq97LMde
nCxusehya+T2l42VhLXp1z1mWY6lf9GZEaXfErxI0SiJzTgFZzGjnLTHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF58VmuhlAJ1hUpoEfcK5uGZLHIMB8GA1UdIwQY
MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt
YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm
LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArd6snzYl
80ecqgOPvdeVM2Fa23T3P+RdeMsARzwkpSQpEMMY+dRZdBXxS9xfPl3zCLyOU02n
TknIdP2v1kjIpOyh2O0XuYoJxx//jJLpGVofgJxUeiVszaTkAf0Nn3GcC/Rf5E2s
kocG3fNjDeyzqnSYGJfGZKM1pmdasnTaIRuerBLFFDHWb+6bvBWpJj7/MSKy+43U
IjRPRsyMEMbKEodn6fo/mRUT/E/d+4ecAbYkNGtPWZTwbcgZdzh6bEi8ttoU5MlJ
3D5ivP4tXB6BBpt3NR6RxuYRm3uTTEaLL+neoeZlIgVs6RVZZHsuzxZvI47LuZCr
838vBGCqBTy8Ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:26 2026 by rpki-client