Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: Zg2rgzDIvFJm3xLspDckeusdciMZE+tmKrQuvO8NTos=
Subject key identifier: D0:31:90:78:FA:04:91:DC:8C:A9:4B:08:67:58:40:39:56:D1:EF:49
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019CAA58DBA2C9CC9541989D19602E5EEBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: +31XSBkiZJE24blOpwGVP6WN94vm64/CEKyMD6kBUR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:db:a2:c9:cc:95:41:98:9d:19:60:2e:5e:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=d0319078fa0491dc8ca94b086758403956d1ef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:2c:f9:65:a7:ae:f7:58:aa:5d:4b:dd:cd:
b5:fc:4d:d9:a9:b3:65:b0:07:8d:12:8f:fe:0d:27:
91:76:f3:78:0f:83:fd:b6:49:39:20:61:1f:a4:bb:
9a:e1:6b:4b:3e:fd:c1:98:25:8b:c3:be:bc:43:00:
26:9a:3c:ae:d6:79:0f:99:86:24:f1:7f:a5:53:25:
4b:d9:4e:72:34:b4:8e:e1:e7:0b:f8:34:03:f5:6d:
e1:11:d0:e1:68:46:f4:3c:68:b1:f1:ea:ed:ac:72:
3a:9e:f5:29:08:36:d1:34:03:0b:78:c2:87:cb:10:
de:3a:8d:6a:28:0f:8a:5f:71:10:7b:ed:db:5f:85:
cf:dd:45:05:80:e7:ad:55:e3:e7:a9:71:26:09:bd:
cb:c8:09:2b:3d:cc:28:bd:bd:1d:0a:cd:00:bf:75:
2d:64:2d:70:17:2f:5b:94:3c:8c:53:1b:90:38:70:
cb:cb:fe:c3:67:15:30:2b:44:cd:bf:05:b1:e5:fb:
f0:28:45:12:15:14:5f:07:d0:d0:7e:33:b6:3f:ed:
73:6f:e8:5b:ad:f4:cd:84:15:b5:cb:5b:6f:46:9c:
08:c2:c9:c3:71:99:57:20:7d:94:2e:cf:46:e9:b0:
3c:47:4a:60:d6:4e:40:d1:26:26:80:5a:4d:5e:3a:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:90:78:FA:04:91:DC:8C:A9:4B:08:67:58:40:39:56:D1:EF:49
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:c9:d4:1b:bb:b6:21:0c:61:9e:68:21:48:b3:dc:f2:51:
3c:c6:7a:86:49:67:2d:66:cb:c6:c3:ac:23:ac:38:08:aa:cb:
e7:94:13:2e:af:77:31:13:3e:b8:03:59:0a:bf:fa:3b:3a:99:
08:b7:9a:3b:fa:9d:b7:63:7e:7d:0d:84:7a:bb:01:fe:b8:9e:
aa:df:72:65:a6:80:92:8f:d1:ab:63:14:24:ec:36:ce:1f:c6:
1a:26:a8:c1:67:0c:3b:09:92:48:fd:3e:b0:6e:44:c5:3a:c7:
b8:be:69:71:43:a4:d1:f0:c2:73:06:b0:91:85:21:4a:b9:fb:
4f:47:bb:d1:ab:e7:5a:6d:4e:50:02:f8:51:5c:52:bc:9b:7b:
40:64:4b:b8:96:67:e7:c3:64:57:d4:64:58:b4:a0:06:bf:3b:
83:b2:dc:6a:02:7a:79:c0:69:b4:09:8e:2e:6f:f7:33:bc:4b:
31:7e:0a:f0:59:1d:76:20:55:ae:4a:a6:51:0a:f0:2d:f4:1b:
96:43:c0:fb:aa:22:f0:ef:17:87:57:0f:23:61:b6:28:9d:ac:
b2:67:8e:96:09:f5:9e:6e:94:ae:69:90:d8:06:46:4e:bf:4f:
f8:17:0b:d6:44:76:ba:ed:db:6b:82:84:66:b6:91:46:1c:e0:
ed:53:16:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNuiycyVQZidGWAuXuu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx
NDc3N2IwHhcNMjYwMzAxMTcwMTE1WhcNMjYwMzAyMTcwMTE1WjAzMTEwLwYDVQQD
EyhkMDMxOTA3OGZhMDQ5MWRjOGNhOTRiMDg2NzU4NDAzOTU2ZDFlZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQs+WWnrvdYql1L3c21/E3ZqbNl
sAeNEo/+DSeRdvN4D4P9tkk5IGEfpLua4WtLPv3BmCWLw768QwAmmjyu1nkPmYYk
8X+lUyVL2U5yNLSO4ecL+DQD9W3hEdDhaEb0PGix8ertrHI6nvUpCDbRNAMLeMKH
yxDeOo1qKA+KX3EQe+3bX4XP3UUFgOetVePnqXEmCb3LyAkrPcwovb0dCs0Av3Ut
ZC1wFy9blDyMUxuQOHDLy/7DZxUwK0TNvwWx5fvwKEUSFRRfB9DQfjO2P+1zb+hb
rfTNhBW1y1tvRpwIwsnDcZlXIH2ULs9G6bA8R0pg1k5A0SYmgFpNXjrHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAxkHj6BJHcjKlLCGdYQDlW0e9JMB8GA1UdIwQY
MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt
MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh
LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeczJ1Bu7
tiEMYZ5oIUiz3PJRPMZ6hklnLWbLxsOsI6w4CKrL55QTLq93MRM+uANZCr/6OzqZ
CLeaO/qdt2N+fQ2EersB/rieqt9yZaaAko/Rq2MUJOw2zh/GGiaowWcMOwmSSP0+
sG5ExTrHuL5pcUOk0fDCcwawkYUhSrn7T0e70avnWm1OUAL4UVxSvJt7QGRLuJZn
58NkV9RkWLSgBr87g7LcagJ6ecBptAmOLm/3M7xLMX4K8FkddiBVrkqmUQrwLfQb
lkPA+6oi8O8Xh1cPI2G2KJ2ssmeOlgn1nm6UrmmQ2AZGTr9P+BcL1kR2uu3ba4KE
ZraRRhzg7VMW5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:41 2026 by rpki-client