Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: RGm2q++yNvDzSGrykbXFVFDMpW9xKd5ml55CvFkilWQ=
Subject key identifier: 0D:83:5F:F3:F1:78:4A:EB:85:5F:85:79:F8:80:F0:A3:9E:07:1A:AA
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019CABA1E481D90744DD3ECAECF6D264BBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 0621
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: 05sJvKsPpEQygCgsV_MGQHN9_TM.roa (hash: nFTOD6KUcpEnrht3gN5bskiFEmc9rtUM9QNFKCOE0Vc=)
2: 1-xtDrU7wKNsIkkfW8E-ZbC6rELU.roa (hash: rgHDDCujsocFhMaTOl2AntkEyFdfyoyY4MLtmaNj0qw=)
3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: YLhbK++xArvrg1xlr+S1EgGMsG20jDEKVH0rNFRcJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e4:81:d9:07:44:dd:3e:ca:ec:f6:d2:64:bb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=0d835ff3f1784aeb855f8579f880f0a39e071aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:b6:fb:58:02:fd:a5:3d:56:07:66:ee:0e:
22:4f:c2:3d:d3:92:fb:ca:b5:49:25:7d:be:2d:a2:
66:00:e6:cb:b7:5e:15:ff:16:29:05:e6:bc:4f:0f:
59:ce:f1:d5:47:37:5c:04:f8:19:87:d1:54:79:b0:
7f:e5:49:1c:b6:20:98:1e:21:fa:90:ab:56:f1:1e:
0b:fe:eb:d3:fd:aa:3a:6f:97:6e:9d:4b:62:df:8c:
e5:98:5e:7c:86:6e:7d:be:df:60:ee:1b:f1:20:63:
9f:22:a7:cf:27:23:5c:06:79:ee:57:c9:2d:fd:0c:
87:13:79:8e:f2:9d:5f:36:7c:7a:a1:c8:c8:db:79:
27:ab:f3:b7:67:a9:28:fe:e3:ee:39:fe:b6:1f:cf:
86:6d:ec:ad:30:0b:8c:fb:89:d5:e9:e5:f3:e3:e6:
52:6e:c1:6a:13:89:c4:94:a5:95:a7:14:78:bd:8c:
dd:d5:05:d6:32:6f:cc:6b:d5:85:67:d4:57:58:05:
19:de:72:33:ec:84:12:7d:c7:09:5e:0f:cd:df:1b:
0c:a9:fd:bc:a7:d5:f1:f4:c5:ed:7a:bf:10:ea:82:
f2:e6:e0:9a:47:4d:0b:29:ef:da:4c:fa:39:db:bf:
69:d8:55:87:f2:9d:dc:8f:ef:4b:08:83:6c:5e:c0:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:83:5F:F3:F1:78:4A:EB:85:5F:85:79:F8:80:F0:A3:9E:07:1A:AA
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:6b:32:9c:23:eb:ba:be:74:51:87:df:1e:07:14:18:e8:
2c:99:78:87:09:c6:4e:dc:a3:66:3a:b6:18:05:d6:39:4c:5b:
c8:68:8f:33:03:af:f4:df:ac:48:28:01:cf:9e:e9:42:fe:a1:
1d:0f:bc:09:0a:2d:07:e4:93:f7:cd:06:e6:f2:32:ca:8e:b5:
21:ff:c2:7d:78:18:2e:09:ab:d5:66:a2:10:aa:aa:f6:da:ce:
24:5c:cb:f5:1d:3e:e9:05:b9:a6:ef:a9:91:11:5f:73:81:88:
18:44:e8:6c:ce:a0:e5:a2:1c:c9:81:75:30:83:09:01:22:d6:
55:98:42:6e:23:78:0e:5b:fa:8b:8e:f5:5c:02:d6:0f:1f:19:
78:79:52:af:5f:1b:d1:5a:13:19:37:ba:a2:e0:eb:68:da:a1:
c2:49:b6:13:03:06:b9:0b:5f:89:4a:2d:8e:6a:3a:ad:d1:a1:
95:53:6d:c9:43:f9:b8:6d:ef:b8:67:b2:0a:1c:7a:82:ce:fc:
2a:2d:5e:9a:e0:fc:b6:10:62:7d:bb:21:95:82:0c:ed:a2:be:
fe:d0:96:73:aa:31:61:21:a7:a8:73:a5:ff:66:68:c8:3c:b9:
82:34:d1:e2:69:fd:92:79:c5:9a:83:c5:37:52:cf:70:61:d9:
31:ef:cb:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroeSB2QdE3T7K7PbSZLvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2
Y2JiYTMwHhcNMjYwMzAxMjMwMDM5WhcNMjYwMzAyMjMwMDM5WjAzMTEwLwYDVQQD
EygwZDgzNWZmM2YxNzg0YWViODU1Zjg1NzlmODgwZjBhMzllMDcxYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquC2+1gC/aU9Vgdm7g4iT8I905L7
yrVJJX2+LaJmAObLt14V/xYpBea8Tw9ZzvHVRzdcBPgZh9FUebB/5UkctiCYHiH6
kKtW8R4L/uvT/ao6b5dunUti34zlmF58hm59vt9g7hvxIGOfIqfPJyNcBnnuV8kt
/QyHE3mO8p1fNnx6ocjI23knq/O3Z6ko/uPuOf62H8+GbeytMAuM+4nV6eXz4+ZS
bsFqE4nElKWVpxR4vYzd1QXWMm/Ma9WFZ9RXWAUZ3nIz7IQSfccJXg/N3xsMqf28
p9Xx9MXter8Q6oLy5uCaR00LKe/aTPo5279p2FWH8p3cj+9LCINsXsB0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2DX/PxeErrhV+FefiA8KOeBxqqMB8GA1UdIwQY
MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt
MjBkMjQ5MDAxMzBhLzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh
LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMFrMpwj
67q+dFGH3x4HFBjoLJl4hwnGTtyjZjq2GAXWOUxbyGiPMwOv9N+sSCgBz57pQv6h
HQ+8CQotB+ST980G5vIyyo61If/CfXgYLgmr1WaiEKqq9trOJFzL9R0+6QW5pu+p
kRFfc4GIGETobM6g5aIcyYF1MIMJASLWVZhCbiN4Dlv6i471XALWDx8ZeHlSr18b
0VoTGTe6ouDraNqhwkm2EwMGuQtfiUotjmo6rdGhlVNtyUP5uG3vuGeyChx6gs78
Ki1emuD8thBifbshlYIM7aK+/tCWc6oxYSGnqHOl/2ZoyDy5gjTR4mn9knnFmoPF
N1LPcGHZMe/LVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:29 2026 by rpki-client