Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: edjAKpPmZCm9yp6WljDcyg2yF8COW8GaZowTBgvf6gI=
Subject key identifier: 51:51:CA:4A:91:3B:52:A2:FE:9B:24:A2:AF:CA:94:CE:1D:59:12:31
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019CAB343DCFB4F445486E4BA7F694A31F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 1169
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: HojcHwotCTr8Gwmox9s9qYyxUooqxjBM39VGXyUsucQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3d:cf:b4:f4:45:48:6e:4b:a7:f6:94:a3:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=5151ca4a913b52a2fe9b24a2afca94ce1d591231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:c7:94:ed:f9:b7:b7:ab:43:78:01:6c:16:
9a:4b:27:e2:61:1d:67:ec:79:7d:2d:7c:e1:79:41:
bf:57:01:7e:e9:e0:bd:03:7c:f7:11:ce:12:9a:86:
5f:ab:c1:e6:d1:5f:b3:95:5c:24:ef:fd:55:c1:7c:
f5:83:2c:b8:1e:e9:00:96:0e:2e:18:41:24:ca:54:
c5:c8:98:c5:a0:18:68:da:8e:a7:9f:c4:a8:08:72:
01:8e:92:8a:a6:a0:68:50:79:65:6e:32:53:96:ca:
09:c8:af:16:64:35:54:2b:50:61:a1:b6:53:b3:59:
75:77:2b:04:a0:31:ba:ef:49:69:35:44:48:57:a3:
cf:4c:78:1d:36:2f:1b:22:3d:da:00:f4:3c:76:b0:
b1:74:28:73:d3:fe:2f:22:c0:36:cd:82:90:ba:21:
a8:34:39:9b:33:f9:c5:67:90:d9:4c:63:3d:d5:3e:
e4:fc:91:97:4c:e1:eb:c9:3d:79:b0:0c:3d:2b:f6:
f4:c1:c1:99:5b:52:45:03:68:a2:a9:57:3a:fe:b5:
bc:fb:ce:e0:53:ad:0d:b0:95:4d:d7:00:e0:0e:1c:
57:be:a3:33:2b:d9:d0:3b:e7:9a:00:f3:d7:11:df:
94:a8:93:01:59:91:7a:74:f2:73:00:c3:55:1c:36:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:CA:4A:91:3B:52:A2:FE:9B:24:A2:AF:CA:94:CE:1D:59:12:31
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:d9:99:ca:fa:e2:7e:50:29:53:9e:88:c3:97:6d:68:1b:
3c:90:e2:ae:ad:41:7f:96:e1:08:d5:8a:87:f2:83:db:83:72:
31:a6:be:c6:7a:8b:b6:43:bc:b2:df:2d:95:2a:e1:fd:4f:42:
b9:34:40:e0:41:a5:7c:22:b9:43:1d:c2:ae:03:c7:68:cf:ad:
2d:84:3b:f6:61:28:f3:58:65:21:8d:9a:df:93:37:7d:fb:d9:
04:4e:e9:d1:43:0f:72:44:04:8f:e1:3f:39:45:8b:12:28:a9:
b5:a4:e6:62:0a:0a:7e:d1:75:e0:13:20:2b:88:08:8e:1c:53:
17:f8:d5:62:1b:01:92:e5:92:e2:24:e8:57:fd:0b:9a:69:d8:
c1:7e:9e:8d:bf:d6:c8:6d:c3:6f:c4:97:4e:cb:da:d8:3c:52:
eb:df:42:d0:6b:79:0c:0a:d4:3f:85:7d:7f:19:34:29:51:fc:
6b:d8:67:fa:a9:83:40:04:77:cb:24:14:d7:3c:ea:cb:04:23:
f9:bb:d8:17:ea:60:74:14:a0:90:58:2f:3f:b8:eb:2c:ee:1a:
16:af:9c:10:72:3a:d3:83:ac:ce:44:2f:fc:1a:57:c3:59:24:
f1:84:d3:06:51:da:f8:41:4b:e1:54:b7:90:c8:c3:d3:83:96:
f4:bd:ec:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrND3PtPRFSG5Lp/aUox9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0
NGZkNDkwHhcNMjYwMzAxMjEwMDUzWhcNMjYwMzAyMjEwMDUzWjAzMTEwLwYDVQQD
Eyg1MTUxY2E0YTkxM2I1MmEyZmU5YjI0YTJhZmNhOTRjZTFkNTkxMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRXHlO35t7erQ3gBbBaaSyfiYR1n
7Hl9LXzheUG/VwF+6eC9A3z3Ec4SmoZfq8Hm0V+zlVwk7/1VwXz1gyy4HukAlg4u
GEEkylTFyJjFoBho2o6nn8SoCHIBjpKKpqBoUHllbjJTlsoJyK8WZDVUK1BhobZT
s1l1dysEoDG670lpNURIV6PPTHgdNi8bIj3aAPQ8drCxdChz0/4vIsA2zYKQuiGo
NDmbM/nFZ5DZTGM91T7k/JGXTOHryT15sAw9K/b0wcGZW1JFA2iiqVc6/rW8+87g
U60NsJVN1wDgDhxXvqMzK9nQO+eaAPPXEd+UqJMBWZF6dPJzAMNVHDYyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFRykqRO1Ki/pskoq/KlM4dWRIxMB8GA1UdIwQY
MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt
Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi
LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTfZmcr6
4n5QKVOeiMOXbWgbPJDirq1Bf5bhCNWKh/KD24NyMaa+xnqLtkO8st8tlSrh/U9C
uTRA4EGlfCK5Qx3CrgPHaM+tLYQ79mEo81hlIY2a35M3ffvZBE7p0UMPckQEj+E/
OUWLEiiptaTmYgoKftF14BMgK4gIjhxTF/jVYhsBkuWS4iToV/0LmmnYwX6ejb/W
yG3Db8SXTsva2DxS699C0Gt5DArUP4V9fxk0KVH8a9hn+qmDQAR3yyQU1zzqywQj
+bvYF+pgdBSgkFgvP7jrLO4aFq+cEHI604OszkQv/BpXw1kk8YTTBlHa+EFL4VS3
kMjD04OW9L3smA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:41 2026 by rpki-client