Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: TvmsjXqf7SKRTDK5BdAvMZegBTSVB0vllZhNgLw9BaA=
Subject key identifier: ED:FE:D0:C9:A0:A5:1D:15:49:E8:1B:F8:DC:E5:EA:8B:E7:CB:EA:E1
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 019CAB3438E3D745CA8EC7C8185148DD968B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 0CC8
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: hhCnFO3jWifZSyogeqYKcAhrOADHpCIJCo2RH9HW8/o=)
2: iYF3KvUl8FH939niefVDnuUP2E0.roa (hash: hm0pJ2uzYWg+4xRBDq9krSLEFM5bGxPbKMQmAB2V7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:38:e3:d7:45:ca:8e:c7:c8:18:51:48:dd:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=edfed0c9a0a51d1549e81bf8dce5ea8be7cbeae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:0b:c4:44:7b:34:cf:34:22:87:d8:e1:77:
c2:1e:d0:fc:0f:11:70:a4:7b:7f:cc:12:8d:ec:32:
d8:d2:e2:b5:93:f7:80:ff:0d:c6:32:bf:58:d8:b1:
c7:da:e2:8e:dd:51:50:6b:69:3c:c0:5c:57:b6:53:
c8:d9:ce:99:4c:9a:71:d6:4c:61:84:25:bc:67:70:
ab:d3:43:e7:f0:fe:0c:a2:c1:21:66:d8:2c:b6:c0:
c6:e7:08:d6:60:59:de:49:3c:44:b8:64:c7:cb:81:
67:31:75:08:0d:0e:28:07:a9:0b:88:bf:59:7e:be:
e3:fc:6e:d4:90:c1:75:f0:85:ef:bc:b9:f9:e0:3c:
38:40:f9:75:74:07:8f:8e:ac:8a:bc:3e:aa:65:a7:
36:87:bd:a0:1b:b5:43:c8:3b:59:e2:29:94:a2:3d:
e2:30:0e:a3:ed:8d:c3:38:db:b6:12:1d:e0:67:e5:
fa:8c:19:a8:4c:7e:67:87:97:11:9a:05:e2:d4:a8:
b7:85:6f:b8:fd:71:9b:d7:d6:e8:32:ea:f4:90:6b:
48:8f:40:1c:15:0a:ba:47:74:2b:20:fa:2c:be:9d:
75:f6:a2:05:dd:90:55:0b:d5:eb:5a:6d:77:1d:ae:
8c:2f:2d:17:dd:0a:c0:07:54:43:55:ed:7d:0d:58:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:D0:C9:A0:A5:1D:15:49:E8:1B:F8:DC:E5:EA:8B:E7:CB:EA:E1
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:ed:1a:79:44:cd:50:d0:e9:da:48:91:a8:5a:e3:f7:e0:
b2:ca:8e:bd:51:47:31:ac:1d:43:f2:29:1e:8b:1b:c8:4e:8f:
61:e9:c6:88:73:7a:d0:48:e6:34:a9:ab:64:3f:7e:9f:82:84:
46:ef:59:19:f5:00:3f:33:d0:25:40:45:ce:c8:0b:9f:9d:9f:
5f:31:65:e0:73:1c:f4:60:f3:5b:62:a8:51:7e:8d:10:36:90:
68:03:7a:bd:92:70:b1:42:9e:75:26:c8:6f:61:49:24:86:59:
e1:1f:a6:b2:4f:5f:3d:18:13:5f:2b:80:eb:ea:f6:8a:6d:4c:
b9:4a:e3:64:e4:2d:46:15:4c:f4:11:b6:6f:30:80:75:56:c7:
07:a3:bf:12:a5:13:67:77:66:90:20:9e:e4:d1:f0:b7:20:1f:
04:c5:b3:17:b7:bf:5c:aa:f1:62:b8:19:2a:a7:13:9a:9c:31:
bf:74:0b:8d:86:40:2c:1e:6d:88:31:05:47:71:75:5c:55:18:
82:13:7d:d5:df:38:e1:c8:8b:be:26:ea:60:6e:15:64:3f:82:
72:23:98:5c:67:a0:cb:a8:4e:e7:72:32:bc:7b:7b:80:b5:08:
e4:fa:0e:0e:c7:47:32:8c:39:54:05:7d:3a:23:b1:01:bd:2e:
98:9b:77:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDjj10XKjsfIGFFI3ZaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjZiY2Y2ZTJiMTA5YmEyYTE0YTczYjk3NWFkOTU0NDg0
YjRiYTUwHhcNMjYwMzAxMjEwMDUyWhcNMjYwMzAyMjEwMDUyWjAzMTEwLwYDVQQD
EyhlZGZlZDBjOWEwYTUxZDE1NDllODFiZjhkY2U1ZWE4YmU3Y2JlYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OQLxER7NM80IofY4XfCHtD8DxFw
pHt/zBKN7DLY0uK1k/eA/w3GMr9Y2LHH2uKO3VFQa2k8wFxXtlPI2c6ZTJpx1kxh
hCW8Z3Cr00Pn8P4MosEhZtgstsDG5wjWYFneSTxEuGTHy4FnMXUIDQ4oB6kLiL9Z
fr7j/G7UkMF18IXvvLn54Dw4QPl1dAePjqyKvD6qZac2h72gG7VDyDtZ4imUoj3i
MA6j7Y3DONu2Eh3gZ+X6jBmoTH5nh5cRmgXi1Ki3hW+4/XGb19boMur0kGtIj0Ac
FQq6R3QrIPosvp119qIF3ZBVC9XrWm13Ha6MLy0X3QrAB1RDVe19DVgf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3+0MmgpR0VSegb+Nzl6ovny+rhMB8GA1UdIwQY
MBaAFGD2vPbisQm6KhSnO5da2VRIS0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2Qt
YWI0MDI1M2I1ZTJiLzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2QtYWI0MDI1M2I1ZTJi
LzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm/tGnlE
zVDQ6dpIkaha4/fgssqOvVFHMawdQ/IpHosbyE6PYenGiHN60EjmNKmrZD9+n4KE
Ru9ZGfUAPzPQJUBFzsgLn52fXzFl4HMc9GDzW2KoUX6NEDaQaAN6vZJwsUKedSbI
b2FJJIZZ4R+msk9fPRgTXyuA6+r2im1MuUrjZOQtRhVM9BG2bzCAdVbHB6O/EqUT
Z3dmkCCe5NHwtyAfBMWzF7e/XKrxYrgZKqcTmpwxv3QLjYZALB5tiDEFR3F1XFUY
ghN91d844ciLvibqYG4VZD+CciOYXGegy6hO53IyvHt7gLUI5PoODsdHMow5VAV9
OiOxAb0umJt37Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:53 2026 by rpki-client