Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: Dt4AOa7TYXDFaR13Bc9Af1HCu3FeiqMwkAvVSrfxV+s=
Subject key identifier: C3:23:A5:B0:D7:3A:6F:9A:10:03:2C:B8:69:CF:57:AC:96:F2:34:B7
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019CAA8FDC1B1B4447F51366F2764A35C3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 02E8
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: Wn9zocpwcwfWAukmo5jhHlSgotc8/EnFzJMrWpEaKCI=)
3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:dc:1b:1b:44:47:f5:13:66:f2:76:4a:35:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=c323a5b0d73a6f9a10032cb869cf57ac96f234b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:cf:bc:ca:c8:59:67:a2:17:bc:64:2a:c2:
95:ba:e6:bf:da:19:80:5d:b8:2c:00:80:0c:fe:ad:
41:2b:16:8b:a2:e3:c3:78:ae:c7:34:1f:5c:58:6c:
9a:00:d3:02:4f:9f:05:23:e1:dd:0f:ff:02:e4:00:
2f:b3:88:40:7e:28:a0:38:83:a0:df:7e:35:54:ed:
3a:29:8f:75:cb:58:0f:92:81:e5:63:f6:56:82:2c:
db:20:cc:16:90:4c:51:4c:4c:50:03:ca:aa:91:7c:
69:5e:9f:e9:58:ee:6b:34:ef:97:40:83:64:c7:e6:
2a:16:9c:05:47:03:6b:8f:46:0c:5e:54:c0:f5:39:
b2:a5:95:99:ca:c7:9f:52:8f:df:ea:6b:29:d0:c7:
94:b9:b6:07:37:de:e2:b3:57:0c:26:f9:78:f1:2a:
00:c8:53:f8:d9:b4:e0:1c:10:23:1f:11:b9:b5:1a:
4e:7c:51:c5:4e:ad:81:61:0e:de:8d:ee:4d:8d:0e:
f7:0c:b2:e4:96:8d:af:92:77:ed:8c:f6:20:a9:3f:
65:65:4c:78:d6:05:68:18:5a:c3:51:9f:ea:bd:de:
87:70:32:96:94:35:38:b2:82:05:6d:79:8c:86:08:
d1:f2:35:67:d2:66:ae:3d:39:78:34:db:e2:3b:fb:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:A5:B0:D7:3A:6F:9A:10:03:2C:B8:69:CF:57:AC:96:F2:34:B7
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:e4:1b:66:6b:d6:e7:49:0a:97:ba:3b:b4:15:97:fe:c3:
f0:cc:ff:1d:de:ea:a0:c9:eb:74:11:31:9c:e0:ec:7f:10:90:
d4:de:ef:2c:77:ad:27:11:6d:4d:de:a7:01:dd:99:73:53:90:
38:7a:5b:9b:0b:7c:1d:97:76:c1:65:71:57:e4:ac:45:83:a6:
1a:f7:92:a4:34:b4:3a:40:43:c5:18:a6:20:c6:3f:69:1c:6f:
2e:07:76:c5:8e:70:41:04:58:ef:c1:24:65:1c:8e:b2:dd:c0:
eb:72:89:12:71:9a:69:4a:57:32:fe:a5:8b:b9:6e:70:6e:7b:
37:29:40:c5:ed:49:bd:c9:5f:86:5e:b7:e0:7b:ce:49:a9:12:
cd:b9:02:c2:35:4d:75:90:be:b8:f5:d4:e5:43:d8:2d:5b:07:
30:b9:07:de:11:26:83:a7:90:8e:80:ec:d2:41:2c:4c:81:8c:
5e:7c:dc:54:0a:98:de:36:a7:72:d8:37:34:e9:34:82:f3:e7:
74:32:49:19:9a:f4:24:ee:17:db:ed:54:6d:c1:f4:99:95:60:
10:63:a9:aa:26:8c:5c:13:35:90:de:4b:08:0f:a7:62:c6:05:
6c:95:9a:3c:7b:0e:10:12:94:f7:57:93:49:2e:1e:7b:21:e1:
4a:24:da:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj9wbG0RH9RNm8nZKNcP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm
YjYyOTAwHhcNMjYwMzAxMTgwMTIwWhcNMjYwMzAyMTgwMTIwWjAzMTEwLwYDVQQD
EyhjMzIzYTViMGQ3M2E2ZjlhMTAwMzJjYjg2OWNmNTdhYzk2ZjIzNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNjPvMrIWWeiF7xkKsKVuua/2hmA
XbgsAIAM/q1BKxaLouPDeK7HNB9cWGyaANMCT58FI+HdD/8C5AAvs4hAfiigOIOg
3341VO06KY91y1gPkoHlY/ZWgizbIMwWkExRTExQA8qqkXxpXp/pWO5rNO+XQINk
x+YqFpwFRwNrj0YMXlTA9TmypZWZysefUo/f6msp0MeUubYHN97is1cMJvl48SoA
yFP42bTgHBAjHxG5tRpOfFHFTq2BYQ7eje5NjQ73DLLklo2vknftjPYgqT9lZUx4
1gVoGFrDUZ/qvd6HcDKWlDU4soIFbXmMhgjR8jVn0mauPTl4NNviO/vE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMjpbDXOm+aEAMsuGnPV6yW8jS3MB8GA1UdIwQY
MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt
N2Q3NWUyYjFhN2I5LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5
LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvnkG2Zr
1udJCpe6O7QVl/7D8Mz/Hd7qoMnrdBExnODsfxCQ1N7vLHetJxFtTd6nAd2Zc1OQ
OHpbmwt8HZd2wWVxV+SsRYOmGveSpDS0OkBDxRimIMY/aRxvLgd2xY5wQQRY78Ek
ZRyOst3A63KJEnGaaUpXMv6li7lucG57NylAxe1Jvclfhl634HvOSakSzbkCwjVN
dZC+uPXU5UPYLVsHMLkH3hEmg6eQjoDs0kEsTIGMXnzcVAqY3janctg3NOk0gvPn
dDJJGZr0JO4X2+1UbcH0mZVgEGOpqiaMXBM1kN5LCA+nYsYFbJWaPHsOEBKU91eT
SS4eeyHhSiTaUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:01 2026 by rpki-client