Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: 7Uu8deO6mp8DDMuZNLKcYUQWOv2udRnN5k0e1FtuMxo=
Subject key identifier: E6:9A:3C:49:B5:DB:A6:A3:07:90:D9:75:31:74:99:D2:79:42:EF:29
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019CAA216E9CA0F6C797605B71C36DA25236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0799
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: WoqIVL8r4vnIbMPcE+88s0uk3tDJK/ndlqjb5pZs+bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6e:9c:a0:f6:c7:97:60:5b:71:c3:6d:a2:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=e69a3c49b5dba6a30790d975317499d27942ef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:8a:11:b3:b9:75:10:3e:2d:41:c3:f8:d1:
0b:fb:1c:3d:3a:55:8b:dd:cf:9b:72:0b:ce:f5:d7:
78:6b:d7:d4:fc:e5:d7:7a:6a:e0:c9:91:72:ae:37:
f1:e7:dc:02:95:81:0c:c1:b1:44:70:67:b4:aa:53:
78:6d:77:f6:55:43:57:61:06:3a:b4:2a:5d:f4:6d:
b1:6e:d7:39:20:a5:19:cc:2a:2e:23:95:4a:98:97:
77:86:1a:e9:fa:a4:0d:7a:e7:2c:cb:55:33:78:91:
c4:6b:2e:71:ce:7d:4b:6e:65:79:ce:26:ac:d7:06:
78:e8:e8:c6:20:13:26:dd:91:ad:86:60:63:bc:94:
1d:b6:29:09:50:99:1a:48:81:17:b4:85:58:b9:2e:
9e:7b:ea:97:6b:3d:3c:73:89:96:9d:d7:77:2b:53:
b0:d3:b5:04:59:91:b6:db:4b:da:4e:70:86:7c:f2:
73:cf:78:70:81:66:5d:3e:fd:0a:bb:49:08:ef:74:
44:0d:35:8e:80:4f:ef:6b:ed:ab:3d:bc:f9:99:3a:
cc:27:0b:33:82:fb:e4:99:ff:8d:a4:4c:72:0f:72:
6e:5f:ce:bb:1d:d2:6c:84:d1:32:de:22:55:e2:16:
4d:c6:4f:0b:51:6e:f7:5f:af:ea:ea:47:2d:95:92:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:3C:49:B5:DB:A6:A3:07:90:D9:75:31:74:99:D2:79:42:EF:29
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:ba:ab:83:29:58:f1:3a:89:49:06:42:13:5f:5b:b6:ca:80:
b8:80:5a:81:7e:fa:1f:fb:aa:93:3e:e1:c2:fe:8f:f2:12:08:
c6:db:19:10:3e:75:64:f6:9a:a1:88:04:9f:ad:ac:55:a2:22:
bf:9d:4d:10:c1:9e:f4:29:51:b9:e7:cd:f4:ff:f7:08:74:c9:
36:c3:ed:81:0e:ce:ad:d8:ec:ff:ba:c5:26:07:01:0b:dc:1b:
0b:82:10:75:82:4f:40:4c:96:cc:ab:96:0d:40:8e:3d:0b:98:
d2:38:c3:c3:34:a5:4b:20:33:6b:86:41:aa:16:22:10:c3:37:
ca:a3:51:55:3d:41:e6:8e:6e:b2:55:41:e3:c9:c1:4f:9d:5f:
fe:70:34:7b:0a:10:e2:87:a9:61:c0:0c:bb:bd:42:c5:4a:c6:
72:46:2f:f3:fb:7e:2b:4e:ba:6c:e4:ef:f4:55:ef:c4:d8:cc:
48:d2:17:f6:a7:ff:ee:f3:7c:db:cc:72:b9:e9:5e:83:a1:1b:
82:0d:5b:90:48:4e:93:9c:cb:3f:cb:c7:16:39:5b:80:86:f4:
d1:24:08:c1:93:39:30:05:4e:06:c1:a3:17:cb:90:55:06:a6:
f1:20:d5:b7:c8:9f:83:3d:84:e8:13:84:e5:0b:97:89:06:5a:
14:88:87:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIW6coPbHl2BbccNtolI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4
ZGQ5ZGQwHhcNMjYwMzAxMTYwMDQzWhcNMjYwMzAyMTYwMDQzWjAzMTEwLwYDVQQD
EyhlNjlhM2M0OWI1ZGJhNmEzMDc5MGQ5NzUzMTc0OTlkMjc5NDJlZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWqKEbO5dRA+LUHD+NEL+xw9OlWL
3c+bcgvO9dd4a9fU/OXXemrgyZFyrjfx59wClYEMwbFEcGe0qlN4bXf2VUNXYQY6
tCpd9G2xbtc5IKUZzCouI5VKmJd3hhrp+qQNeucsy1UzeJHEay5xzn1LbmV5zias
1wZ46OjGIBMm3ZGthmBjvJQdtikJUJkaSIEXtIVYuS6ee+qXaz08c4mWndd3K1Ow
07UEWZG220vaTnCGfPJzz3hwgWZdPv0Ku0kI73REDTWOgE/va+2rPbz5mTrMJwsz
gvvkmf+NpExyD3JuX867HdJshNEy3iJV4hZNxk8LUW73X6/q6kctlZI4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaaPEm126ajB5DZdTF0mdJ5Qu8pMB8GA1UdIwQY
MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt
M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5
LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3rqrgylY
8TqJSQZCE19btsqAuIBagX76H/uqkz7hwv6P8hIIxtsZED51ZPaaoYgEn62sVaIi
v51NEMGe9ClRuefN9P/3CHTJNsPtgQ7Ordjs/7rFJgcBC9wbC4IQdYJPQEyWzKuW
DUCOPQuY0jjDwzSlSyAza4ZBqhYiEMM3yqNRVT1B5o5uslVB48nBT51f/nA0ewoQ
4oepYcAMu71CxUrGckYv8/t+K066bOTv9FXvxNjMSNIX9qf/7vN828xyueleg6Eb
gg1bkEhOk5zLP8vHFjlbgIb00SQIwZM5MAVOBsGjF8uQVQam8SDVt8ifgz2E6BOE
5QuXiQZaFIiHGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:09 2026 by rpki-client