
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: 5aq7iJhjPbBM5d3QS0fD0aZTxk1otJWW+Mhz+eOYmyY=
Subject key identifier: 6C:F9:13:98:1E:B7:40:6E:C1:70:6E:8F:84:B7:AF:35:16:5D:4F:59
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 019CAF110ABDEB2D67FB2B0527B948ABE5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 0D4E
Signing time: Mon 02 Mar 2026 15:00:55 +0000
Manifest this update: Mon 02 Mar 2026 15:00:55 +0000
Manifest next update: Tue 03 Mar 2026 15:00:55 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: ysrSA+Hq/ph4BenMnhpqZghLU2mt5MHzPJR8lrAhvp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:0a:bd:eb:2d:67:fb:2b:05:27:b9:48:ab:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Mar 2 15:00:55 2026 GMT
Not After : Mar 3 15:00:55 2026 GMT
Subject: CN=6cf913981eb7406ec1706e8f84b7af35165d4f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:99:0e:19:e9:85:2f:f6:00:e8:35:9f:14:
fd:c7:a3:e4:39:02:2f:72:09:29:8d:88:49:96:07:
52:f5:50:43:37:23:c2:45:98:1d:c0:ae:a9:97:2a:
ce:7c:9b:25:41:ba:eb:34:9a:d5:c7:8c:54:28:14:
21:9b:a5:29:e0:29:bb:0c:42:3d:18:de:19:5a:24:
d4:a6:0f:0f:60:50:54:9e:89:22:6c:be:36:ff:cc:
1b:b2:74:7a:aa:b7:d0:02:41:8f:a9:0b:b4:a5:8e:
99:43:1b:02:e0:92:35:6f:54:2b:f2:42:9e:1d:f8:
fe:9b:94:23:12:c1:a6:b2:c2:22:29:42:df:41:d2:
d6:cd:8e:91:51:14:e2:a2:d5:c3:be:bb:a8:d1:36:
43:68:c3:2b:ee:24:eb:2d:08:fe:3c:06:e2:69:5d:
c3:b6:3d:33:25:69:ee:0a:7e:f5:b7:5a:28:8f:69:
a9:ea:83:1b:3a:31:5a:c6:01:37:b0:c7:3d:21:43:
07:66:ce:5f:84:d0:3f:9d:26:06:f7:06:60:93:c4:
32:8e:25:92:79:d6:fa:20:24:65:f3:a9:ab:4c:6e:
60:5f:41:ac:7e:99:a2:fd:5b:52:c9:1e:46:3a:b2:
4d:ee:04:96:e9:fa:55:5d:b4:78:c5:cc:aa:1d:47:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:13:98:1E:B7:40:6E:C1:70:6E:8F:84:B7:AF:35:16:5D:4F:59
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:52:85:aa:c5:07:09:7f:b6:df:73:c0:45:d7:6d:48:53:95:
5c:3e:26:38:55:90:4c:13:25:29:88:cd:92:7c:9d:88:e3:bb:
56:a9:a3:f1:9c:71:e2:3e:e9:1c:be:ce:bb:81:41:c1:39:a0:
94:d6:d5:1d:01:a3:2f:b6:23:9c:c6:7c:ef:8b:54:1c:5b:87:
cd:8f:c5:07:ce:37:96:32:65:9b:3e:60:ca:ed:66:97:da:32:
87:d0:2e:68:ea:4a:a5:21:a4:e3:fb:2b:82:e3:f9:29:91:d5:
8b:7f:89:6f:53:05:18:e4:a1:63:83:e9:3a:80:02:63:cd:77:
f3:c0:24:68:d8:92:f3:ff:0e:d0:33:b2:c7:36:5b:b0:e8:06:
dd:62:5a:96:24:d1:7b:14:ef:4a:b1:34:01:e0:0c:9e:c5:85:
e2:14:d7:fb:1b:25:99:19:26:7e:5d:1b:e9:61:5c:00:11:c6:
0a:45:96:19:4f:3c:80:f5:f7:2f:0f:50:2b:67:ed:fd:f8:da:
88:27:c8:91:2b:70:6f:7f:86:40:09:38:1a:34:2b:6d:6d:c9:
5f:f1:b8:8d:22:0a:b1:02:0d:7b:b1:5d:c3:ea:18:4a:62:d6:
2e:4c:3d:c1:5f:cf:43:23:95:fd:dd:aa:ef:cd:ae:10:de:fd:
21:1e:a5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEQq96y1n+ysFJ7lIq+XMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTI2YWEyZWZjNzAzZTkyNzkwMDcxZjgyZTZlZTUyOWI5
NWViMWUwHhcNMjYwMzAyMTUwMDU1WhcNMjYwMzAzMTUwMDU1WjAzMTEwLwYDVQQD
Eyg2Y2Y5MTM5ODFlYjc0MDZlYzE3MDZlOGY4NGI3YWYzNTE2NWQ0ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XuZDhnphS/2AOg1nxT9x6PkOQIv
cgkpjYhJlgdS9VBDNyPCRZgdwK6plyrOfJslQbrrNJrVx4xUKBQhm6Up4Cm7DEI9
GN4ZWiTUpg8PYFBUnokibL42/8wbsnR6qrfQAkGPqQu0pY6ZQxsC4JI1b1Qr8kKe
Hfj+m5QjEsGmssIiKULfQdLWzY6RURTiotXDvruo0TZDaMMr7iTrLQj+PAbiaV3D
tj0zJWnuCn71t1ooj2mp6oMbOjFaxgE3sMc9IUMHZs5fhNA/nSYG9wZgk8QyjiWS
edb6ICRl86mrTG5gX0Gsfpmi/VtSyR5GOrJN7gSW6fpVXbR4xcyqHUe9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz5E5get0BuwXBuj4S3rzUWXU9ZMB8GA1UdIwQY
MBaAFMlSaqLvxwPpJ5AHH4Lm7lKbleseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQt
ZjdmNjkwYzBhZjU3LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQtZjdmNjkwYzBhZjU3
LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblKFqsUH
CX+233PARddtSFOVXD4mOFWQTBMlKYjNknydiOO7Vqmj8Zxx4j7pHL7Ou4FBwTmg
lNbVHQGjL7YjnMZ874tUHFuHzY/FB843ljJlmz5gyu1ml9oyh9AuaOpKpSGk4/sr
guP5KZHVi3+Jb1MFGOShY4PpOoACY81388AkaNiS8/8O0DOyxzZbsOgG3WJaliTR
exTvSrE0AeAMnsWF4hTX+xslmRkmfl0b6WFcABHGCkWWGU88gPX3Lw9QK2ft/fja
iCfIkStwb3+GQAk4GjQrbW3JX/G4jSIKsQINe7Fdw+oYSmLWLkw9wV/PQyOV/d2q
782uEN79IR6ltg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:56 2026 by rpki-client