Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: GuYLz7cpmfpAOgZp5Xnd6o2gU/t3aV0vbgmxkvV+PYs=
Subject key identifier: 35:31:1A:94:2E:89:BF:06:6F:A7:0C:8D:6F:4C:63:73:FC:82:5E:3F
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019CAC7E23DB466B07952CFA7C0984844B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0FE1
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: 0EalOX44qspmegVtsk1N4TSFVRU.roa (hash: JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=)
2: HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (hash: z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=)
3: PdnPH6yi9ZnmicZhFfMsL9RyZYk.roa (hash: X/n23r26eZcatz6lbggQ+x24Y1SqygjdVMpGAvxLhes=)
4: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: Jou891/VpHmi77x81dCdOX9It01wC5LjwVBNSKsgsS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:23:db:46:6b:07:95:2c:fa:7c:09:84:84:4b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=35311a942e89bf066fa70c8d6f4c6373fc825e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:88:b8:87:c5:f4:c8:e3:18:13:a0:38:70:
e0:71:dc:9b:96:6d:c4:52:a1:12:e8:9f:aa:63:29:
09:1e:c6:45:93:73:8d:40:5f:6c:0e:d1:ad:64:1e:
f2:1a:94:99:6e:92:10:e7:45:10:e1:a5:62:36:cd:
72:63:3a:ee:9a:f4:5d:3a:69:cd:4a:78:57:64:f0:
84:4a:33:59:dd:45:d2:ce:e5:cb:7d:26:5c:57:d4:
b3:9d:1d:21:72:0f:91:66:00:f4:fc:e9:0a:94:5b:
8d:51:72:fa:a6:50:34:33:22:2f:83:30:0c:f2:c6:
b7:c8:de:a4:ea:7c:88:e1:d4:9b:5d:d9:ef:69:51:
f2:85:d2:6e:1e:b0:d3:e4:8e:d5:4c:46:38:04:a4:
ae:96:78:03:28:50:2c:6d:4a:61:31:ce:8f:3b:19:
57:7c:bc:73:0b:04:5c:c8:39:0c:e2:b7:64:a7:e1:
f7:e9:47:1e:7e:8d:ad:8e:0f:95:4a:9c:28:3d:7e:
9c:4c:ba:82:2b:96:b5:04:81:9d:b7:44:65:39:4b:
df:e9:67:f7:a3:8c:60:e1:38:e2:c8:44:5f:ad:bb:
a1:79:57:d5:4b:11:90:d3:8f:ff:00:41:8c:65:9f:
8e:f1:9c:5b:36:5e:a0:46:4f:f2:21:57:ab:fc:c9:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:31:1A:94:2E:89:BF:06:6F:A7:0C:8D:6F:4C:63:73:FC:82:5E:3F
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:18:2f:e8:c9:cc:99:9d:6d:a4:f2:54:6f:71:84:94:a8:35:
bb:5f:24:94:ca:c4:d3:8b:2b:44:05:2f:6f:ce:fd:93:e5:16:
04:bc:7d:d4:d4:1d:12:f9:5d:10:93:28:b4:d9:61:a9:72:39:
21:5d:45:d6:a2:4c:2a:47:c3:19:2b:4c:d6:87:6a:a8:60:76:
47:5e:a6:86:d3:18:47:7f:78:83:6b:be:77:d6:ae:bc:80:4c:
ee:e2:1e:83:43:aa:6f:39:3f:07:e2:58:a2:62:0f:63:98:cb:
28:d7:2c:a0:ae:f9:2a:17:79:a5:4a:93:01:93:b8:d2:0e:83:
32:1d:a9:97:4e:73:5b:a3:e1:61:4e:af:b1:ff:af:20:12:86:
c2:de:08:e1:bd:0c:cd:56:99:ab:17:2e:6f:37:a4:90:24:3f:
3c:c0:72:ae:98:70:a3:08:75:38:01:b5:22:25:21:1a:b8:55:
83:1b:14:a5:db:50:75:57:73:dd:7f:9b:61:2d:28:7d:e3:35:
7f:99:12:48:30:5a:30:02:f1:7c:a9:da:00:df:a8:02:e4:59:
e4:f3:9a:3f:66:f9:d0:0d:c7:19:a9:eb:8e:2d:01:5c:fb:1f:
aa:c0:4a:6a:50:fc:65:88:72:95:f6:40:d3:4a:8f:85:03:f8:
63:29:95:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfiPbRmsHlSz6fAmEhEuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGUxOWEyMjc1ODE2YTI4ZTVlODBjOGY5YTI4Y2M1YTFk
OWMwZDUwHhcNMjYwMzAyMDMwMTEzWhcNMjYwMzAzMDMwMTEzWjAzMTEwLwYDVQQD
EygzNTMxMWE5NDJlODliZjA2NmZhNzBjOGQ2ZjRjNjM3M2ZjODI1ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+OIuIfF9MjjGBOgOHDgcdyblm3E
UqES6J+qYykJHsZFk3ONQF9sDtGtZB7yGpSZbpIQ50UQ4aViNs1yYzrumvRdOmnN
SnhXZPCESjNZ3UXSzuXLfSZcV9SznR0hcg+RZgD0/OkKlFuNUXL6plA0MyIvgzAM
8sa3yN6k6nyI4dSbXdnvaVHyhdJuHrDT5I7VTEY4BKSulngDKFAsbUphMc6POxlX
fLxzCwRcyDkM4rdkp+H36Ucefo2tjg+VSpwoPX6cTLqCK5a1BIGdt0RlOUvf6Wf3
o4xg4TjiyERfrbuheVfVSxGQ04//AEGMZZ+O8ZxbNl6gRk/yIVer/Mmo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUxGpQuib8Gb6cMjW9MY3P8gl4/MB8GA1UdIwQY
MBaAFGFOGaInWBaijl6AyPmijMWh2cDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAt
ODcwNTQ0Y2FhZmFiLzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNThlMjctY2FmZC00MTdjLTk1ZDAtODcwNTQ0Y2FhZmFi
LzEvWVU0Wm9pZFlGcUtPWG9ESS1hS014YUhad05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzBgv6MnM
mZ1tpPJUb3GElKg1u18klMrE04srRAUvb879k+UWBLx91NQdEvldEJMotNlhqXI5
IV1F1qJMKkfDGStM1odqqGB2R16mhtMYR394g2u+d9auvIBM7uIeg0Oqbzk/B+JY
omIPY5jLKNcsoK75Khd5pUqTAZO40g6DMh2pl05zW6PhYU6vsf+vIBKGwt4I4b0M
zVaZqxcubzekkCQ/PMByrphwowh1OAG1IiUhGrhVgxsUpdtQdVdz3X+bYS0ofeM1
f5kSSDBaMALxfKnaAN+oAuRZ5POaP2b50A3HGanrji0BXPsfqsBKalD8ZYhylfZA
00qPhQP4YymVDw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:59 2026 by rpki-client