Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: 3OyyEWc0wxu2l8bXSwyQ8L/yFAdirnSK8iidCGE1HYw=
Subject key identifier: E6:3C:D0:FA:53:B0:FF:D8:DF:ED:34:57:57:E9:C8:87:4C:34:20:2B
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019CAC7DB3E492553C0231793E5436353903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 02BC
Signing time: Mon 02 Mar 2026 03:00:44 +0000
Manifest this update: Mon 02 Mar 2026 03:00:44 +0000
Manifest next update: Tue 03 Mar 2026 03:00:44 +0000
Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: MCUgo0mbCYu3nujHswzwiaTqyW0/19ZmC/rEZgxh54A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b3:e4:92:55:3c:02:31:79:3e:54:36:35:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Mar 2 03:00:44 2026 GMT
Not After : Mar 3 03:00:44 2026 GMT
Subject: CN=e63cd0fa53b0ffd8dfed345757e9c8874c34202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:f2:ba:6f:11:4b:b9:1b:42:cd:6f:2f:20:
51:b3:a3:ba:2c:24:f3:ab:c1:b9:ed:db:b0:b3:0e:
90:4b:b6:ab:0e:ba:92:f6:21:e6:1a:39:07:79:03:
1a:7e:7c:2b:ef:8f:af:71:50:95:5f:a3:bd:11:c7:
56:b8:b8:36:9c:cf:0d:02:67:28:ed:69:3d:e0:5a:
f5:66:8d:71:a8:5e:f2:3a:f0:68:4c:d3:a7:3e:2a:
0c:0c:39:a6:75:d3:7f:2b:d2:f5:25:bc:07:9c:85:
3d:19:fa:6e:9d:5f:8e:22:6d:23:9d:42:a6:6a:98:
32:cf:56:9f:2b:89:2b:41:7d:db:38:94:b2:d7:a8:
88:9c:1b:a0:e0:3b:06:2a:18:d0:ee:09:b7:a6:16:
21:78:97:0a:72:36:ff:08:83:68:09:5f:71:f6:6e:
d0:70:35:0c:2a:81:f8:57:f5:48:3b:06:7f:05:74:
ee:b9:ae:57:d5:26:5c:ee:02:64:0c:3c:fc:c2:79:
8b:ca:c0:2d:76:9f:03:a0:25:fd:d0:7e:c7:60:60:
5e:a1:35:43:2b:69:ac:aa:38:34:0b:35:24:f6:e5:
c6:8a:63:16:d4:b9:c6:aa:46:53:97:6d:5e:82:3a:
a2:dc:02:ec:af:83:92:7b:b4:f8:f4:75:e3:3a:aa:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:D0:FA:53:B0:FF:D8:DF:ED:34:57:57:E9:C8:87:4C:34:20:2B
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a7:90:d7:58:cb:6e:bc:63:29:bf:2d:c7:22:a7:19:56:de:
1a:5f:7e:63:b3:e7:fb:0f:30:14:20:ce:f6:23:af:6e:d7:ad:
ee:a6:44:73:f4:4f:7a:39:1b:08:ff:7a:83:c8:54:48:50:7b:
2e:62:7c:41:c6:c4:6e:11:c7:5b:50:68:2b:15:d0:54:79:1e:
87:36:b0:a5:4c:ab:dc:81:7a:9b:44:8c:d9:6f:21:91:c8:f5:
86:62:47:b7:36:6a:a3:da:54:bd:3f:03:5b:a9:54:d3:45:a8:
d3:01:e3:5d:36:08:0a:e3:90:4c:3b:34:88:6e:a1:b1:8e:53:
43:b8:fd:15:c5:33:9d:30:2f:12:09:f1:45:93:f5:59:d6:75:
19:ad:20:28:8c:50:73:ad:c4:cd:70:86:b3:cd:ce:26:c5:b3:
90:44:2a:79:7f:1a:c4:e4:42:51:53:e4:e8:b3:56:f9:bc:50:
e6:c0:29:4a:48:50:92:39:ea:07:ce:c5:9e:09:fd:40:9c:cc:
24:74:c7:09:f1:1b:90:1e:97:44:3c:53:ce:06:38:68:eb:d4:
70:87:2d:fb:07:0a:bb:fb:cc:84:93:92:40:90:1d:62:eb:58:
9d:ef:98:24:81:4c:93:ee:35:4f:62:8a:1b:6b:60:d7:45:29:
8d:d0:a4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfbPkklU8AjF5PlQ2NTkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj
NTM4MWYwHhcNMjYwMzAyMDMwMDQ0WhcNMjYwMzAzMDMwMDQ0WjAzMTEwLwYDVQQD
EyhlNjNjZDBmYTUzYjBmZmQ4ZGZlZDM0NTc1N2U5Yzg4NzRjMzQyMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bvyum8RS7kbQs1vLyBRs6O6LCTz
q8G57duwsw6QS7arDrqS9iHmGjkHeQMafnwr74+vcVCVX6O9EcdWuLg2nM8NAmco
7Wk94Fr1Zo1xqF7yOvBoTNOnPioMDDmmddN/K9L1JbwHnIU9GfpunV+OIm0jnUKm
apgyz1afK4krQX3bOJSy16iInBug4DsGKhjQ7gm3phYheJcKcjb/CINoCV9x9m7Q
cDUMKoH4V/VIOwZ/BXTuua5X1SZc7gJkDDz8wnmLysAtdp8DoCX90H7HYGBeoTVD
K2msqjg0CzUk9uXGimMW1LnGqkZTl21egjqi3ALsr4OSe7T49HXjOqqMhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY80PpTsP/Y3+00V1fpyIdMNCArMB8GA1UdIwQY
MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaeQ11jL
brxjKb8txyKnGVbeGl9+Y7Pn+w8wFCDO9iOvbtet7qZEc/RPejkbCP96g8hUSFB7
LmJ8QcbEbhHHW1BoKxXQVHkehzawpUyr3IF6m0SM2W8hkcj1hmJHtzZqo9pUvT8D
W6lU00Wo0wHjXTYICuOQTDs0iG6hsY5TQ7j9FcUznTAvEgnxRZP1WdZ1Ga0gKIxQ
c63EzXCGs83OJsWzkEQqeX8axORCUVPk6LNW+bxQ5sApSkhQkjnqB87Fngn9QJzM
JHTHCfEbkB6XRDxTzgY4aOvUcIct+wcKu/vMhJOSQJAdYutYne+YJIFMk+41T2KK
G2tg10UpjdCk1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:13 2026 by rpki-client