Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: c7qfJJ2EgoW+s7D+c21+xs6Om+LKGdqq36QHg2E0kds=
Subject key identifier: 8D:52:B0:82:D7:BC:9C:DF:26:A0:15:08:CF:58:56:2A:ED:64:69:6D
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019CAA585C594FA1DFDABC067BA54EFD23A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 07B0
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: 3Ig5gJFNFuaDqV0SlTopyZAneq1yfREfXEO//kQbDIM=)
2: lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa (hash: lr8Q0BYtKVvTJjMgHZk4vVtiuhJT4h3L6oT8ft8o5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5c:59:4f:a1:df:da:bc:06:7b:a5:4e:fd:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=8d52b082d7bc9cdf26a01508cf58562aed64696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:8e:41:b5:31:04:7d:de:d4:07:ab:c1:5a:
fe:ec:34:f9:59:81:95:ab:46:2c:51:3f:10:35:e7:
b3:3e:46:d8:6b:66:6d:12:69:05:01:fe:5c:46:af:
45:91:f3:13:db:53:f7:95:49:2f:11:ee:36:cc:b4:
1d:ac:72:b0:9d:c6:14:13:b8:4b:f5:4a:9d:e3:3a:
07:7b:6b:1e:34:95:74:59:68:0d:84:14:be:e3:e5:
36:c1:97:99:fe:fc:05:76:67:23:06:ff:13:5c:f7:
07:50:82:8e:d9:51:a6:7c:8d:da:10:8e:9c:b5:66:
77:a2:28:ab:ec:d6:55:f1:32:0d:a2:f3:1b:29:18:
df:43:0d:6f:71:f2:54:1c:08:50:27:8a:45:22:b0:
78:a6:10:99:0c:05:b9:fe:d9:01:be:33:64:25:58:
e0:14:73:6b:2d:e1:b5:2a:d9:fd:57:d3:a0:b7:51:
b4:5b:1d:d1:0c:36:ca:7c:33:33:95:62:78:c0:04:
55:a2:16:6e:41:fa:35:a9:a2:57:62:2d:db:a1:c8:
3f:19:19:a4:dc:8d:28:2a:07:0d:64:2a:4b:b6:1e:
08:17:f1:75:87:b6:97:ed:e1:48:00:18:19:0d:c5:
48:db:3b:d0:84:f2:d2:1b:46:b3:50:b0:08:0c:f9:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:52:B0:82:D7:BC:9C:DF:26:A0:15:08:CF:58:56:2A:ED:64:69:6D
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b7:b3:c8:09:da:3d:6a:fb:44:14:71:13:55:2c:ca:5c:c2:
02:f0:2c:5b:30:54:b2:2b:13:ff:79:ad:fa:d8:1a:5b:b3:84:
5d:7e:67:40:7b:33:ff:e6:8a:3f:8f:ec:e5:64:05:a8:f8:5f:
2f:67:e9:61:b9:27:23:eb:7f:88:72:69:85:86:9d:c3:16:44:
e0:ec:fd:3f:2d:fe:ce:3c:80:7a:53:87:5e:21:b6:cb:13:04:
d4:99:78:bd:a8:41:a9:ad:11:c1:62:b6:57:7f:69:de:92:9c:
a6:f4:2d:e8:24:ed:f0:58:a6:ee:1d:f0:33:0a:0c:01:3d:93:
27:9e:6f:72:df:0a:0e:e6:79:33:12:04:30:68:bf:08:ef:3e:
fd:98:78:37:63:ca:29:3f:07:21:ab:49:42:a4:ac:07:01:f3:
67:27:d9:22:49:91:20:74:c8:d7:ee:e9:31:13:80:aa:6e:75:
ea:34:4b:8e:61:be:cd:79:9d:62:a1:27:13:8e:61:d9:14:01:
2b:3b:38:93:60:f9:af:ad:91:80:d4:e5:83:75:41:4a:f9:c4:
62:fb:8a:6b:37:c4:7d:ee:9a:75:17:f3:bb:fb:b5:95:48:48:
04:1d:c2:22:69:18:00:cb:21:44:55:73:21:ad:1c:47:22:3a:
ce:ed:f6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFxZT6Hf2rwGe6VO/SOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWE3ZDYzMTNhYmRjMjdjOTJkMGJhNTQ5ZTg2ODNmOWE4
ZjE1MGYwHhcNMjYwMzAxMTcwMDQzWhcNMjYwMzAyMTcwMDQzWjAzMTEwLwYDVQQD
Eyg4ZDUyYjA4MmQ3YmM5Y2RmMjZhMDE1MDhjZjU4NTYyYWVkNjQ2OTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjKOQbUxBH3e1AerwVr+7DT5WYGV
q0YsUT8QNeezPkbYa2ZtEmkFAf5cRq9FkfMT21P3lUkvEe42zLQdrHKwncYUE7hL
9Uqd4zoHe2seNJV0WWgNhBS+4+U2wZeZ/vwFdmcjBv8TXPcHUIKO2VGmfI3aEI6c
tWZ3oiir7NZV8TINovMbKRjfQw1vcfJUHAhQJ4pFIrB4phCZDAW5/tkBvjNkJVjg
FHNrLeG1Ktn9V9Ogt1G0Wx3RDDbKfDMzlWJ4wARVohZuQfo1qaJXYi3bocg/GRmk
3I0oKgcNZCpLth4IF/F1h7aX7eFIABgZDcVI2zvQhPLSG0azULAIDPnqkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1SsILXvJzfJqAVCM9YVirtZGltMB8GA1UdIwQY
MBaAFGGqfWMTq9wnyS0LpUnoaD+ajxUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEt
ZGNhOGRhODc2ZmU2LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEtZGNhOGRhODc2ZmU2
LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7ezyAna
PWr7RBRxE1UsylzCAvAsWzBUsisT/3mt+tgaW7OEXX5nQHsz/+aKP4/s5WQFqPhf
L2fpYbknI+t/iHJphYadwxZE4Oz9Py3+zjyAelOHXiG2yxME1Jl4vahBqa0RwWK2
V39p3pKcpvQt6CTt8Fim7h3wMwoMAT2TJ55vct8KDuZ5MxIEMGi/CO8+/Zh4N2PK
KT8HIatJQqSsBwHzZyfZIkmRIHTI1+7pMROAqm516jRLjmG+zXmdYqEnE45h2RQB
Kzs4k2D5r62RgNTlg3VBSvnEYvuKazfEfe6adRfzu/u1lUhIBB3CImkYAMshRFVz
Ia0cRyI6zu32DA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:14 2026 by rpki-client