Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: Yqsqi/nkVTkS43Xw0lxxzHVd9r6mRe5/M9LhEdnIUwI=
Subject key identifier: 14:CD:F4:2F:A8:9C:87:9A:75:6E:FA:5D:0E:7B:DC:D8:34:5D:2A:BB
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019CADFE31230DC95CC882E9DEB310A9503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 143C
Signing time: Mon 02 Mar 2026 10:00:42 +0000
Manifest this update: Mon 02 Mar 2026 10:00:42 +0000
Manifest next update: Tue 03 Mar 2026 10:00:42 +0000
Files and hashes: 1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: YMa6FyVZtX2HK3oV8cn/UqO3Sm+E4LS6TZOn52kIKjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:31:23:0d:c9:5c:c8:82:e9:de:b3:10:a9:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Mar 2 10:00:42 2026 GMT
Not After : Mar 3 10:00:42 2026 GMT
Subject: CN=14cdf42fa89c879a756efa5d0e7bdcd8345d2abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:fc:a5:8f:d1:55:29:24:e1:da:d0:21:6e:
bb:de:f2:3f:54:6c:27:fb:57:f6:8a:2e:49:a7:ad:
bf:7d:99:6c:87:45:f0:ef:a3:3d:53:ee:09:48:b5:
2a:cd:ac:41:d8:78:ec:9e:1d:0d:2c:d5:96:4d:77:
b9:06:97:87:8c:cc:65:81:37:9a:76:de:62:84:a5:
d0:96:16:48:08:3d:fb:a9:b6:5b:d4:a9:a4:fa:7e:
fa:00:7e:63:f0:f7:e6:00:21:9b:f4:7e:7d:66:67:
4f:48:85:32:b3:2e:48:44:26:2c:67:0a:f6:c8:e6:
d1:fd:b3:30:f4:18:2d:84:8a:aa:3c:85:ae:58:8d:
8a:9d:44:9c:2b:6d:65:12:e2:83:b6:20:f5:21:b0:
14:69:c1:10:4a:39:a6:7a:18:55:6a:e2:f2:72:e1:
65:ce:68:c6:92:75:6f:14:e0:7c:23:72:ff:ab:44:
8f:39:c2:20:bd:b4:76:3d:c7:0f:74:8d:b4:36:4c:
cb:6b:f6:69:89:54:c0:8d:40:85:09:29:38:19:07:
43:b9:44:2a:17:15:8d:75:50:f3:24:4e:b6:4e:cd:
58:6e:aa:ae:0f:e2:7c:e4:42:b1:7c:05:a3:1b:c5:
e0:62:61:68:9a:d8:26:11:30:b5:17:9a:56:46:39:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:F4:2F:A8:9C:87:9A:75:6E:FA:5D:0E:7B:DC:D8:34:5D:2A:BB
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0e:5d:d3:95:89:0f:12:1c:7d:90:fb:06:73:8a:cb:94:8f:
a8:94:12:7d:65:64:a4:df:03:85:ba:45:6a:7e:2c:b3:30:30:
f9:81:ba:33:e0:95:51:e5:fe:f4:5c:2c:ff:29:1e:1a:1b:35:
0c:f8:25:1d:a5:fd:2e:a0:11:0c:20:e5:96:6e:cb:54:59:58:
9a:58:6e:80:88:cb:5d:8b:d6:22:cb:68:e9:a1:3c:df:52:be:
93:8b:60:19:d9:8f:b0:77:e6:63:f1:6b:fa:c0:6e:97:48:8d:
19:68:7e:8f:f6:5a:f2:15:4b:d1:97:e9:5f:55:d5:e2:9a:ef:
c0:48:00:f7:2c:ae:6b:20:63:5e:ef:c5:89:65:96:f9:44:07:
f2:dc:ab:a6:0d:e4:f7:92:6f:2a:e2:18:aa:cb:42:67:ad:a5:
6e:92:4f:b1:e6:b3:94:5d:fa:2c:79:49:58:e7:65:02:5a:9c:
ce:d2:f8:17:fb:3b:2a:02:36:c1:d3:f1:f3:10:ba:90:31:2e:
10:30:ce:a1:6e:37:f5:bc:7e:a9:c7:2f:13:cc:af:a2:d0:f1:
4f:54:23:4f:10:bc:bc:94:a1:15:2c:02:12:d1:59:02:3d:0a:
f7:a7:a6:e9:da:0c:34:62:32:94:44:70:32:7a:0f:7c:03:66:
30:ed:22:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/jEjDclcyILp3rMQqVA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1
OTU5YTgwHhcNMjYwMzAyMTAwMDQyWhcNMjYwMzAzMTAwMDQyWjAzMTEwLwYDVQQD
EygxNGNkZjQyZmE4OWM4NzlhNzU2ZWZhNWQwZTdiZGNkODM0NWQyYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sH8pY/RVSkk4drQIW673vI/VGwn
+1f2ii5Jp62/fZlsh0Xw76M9U+4JSLUqzaxB2Hjsnh0NLNWWTXe5BpeHjMxlgTea
dt5ihKXQlhZICD37qbZb1Kmk+n76AH5j8PfmACGb9H59ZmdPSIUysy5IRCYsZwr2
yObR/bMw9BgthIqqPIWuWI2KnUScK21lEuKDtiD1IbAUacEQSjmmehhVauLycuFl
zmjGknVvFOB8I3L/q0SPOcIgvbR2PccPdI20NkzLa/ZpiVTAjUCFCSk4GQdDuUQq
FxWNdVDzJE62Ts1YbqquD+J85EKxfAWjG8XgYmFomtgmETC1F5pWRjmfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTN9C+onIeadW76XQ573Ng0XSq7MB8GA1UdIwQY
MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt
N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl
LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA5d05WJ
DxIcfZD7BnOKy5SPqJQSfWVkpN8DhbpFan4sszAw+YG6M+CVUeX+9Fws/ykeGhs1
DPglHaX9LqARDCDllm7LVFlYmlhugIjLXYvWIsto6aE831K+k4tgGdmPsHfmY/Fr
+sBul0iNGWh+j/Za8hVL0ZfpX1XV4prvwEgA9yyuayBjXu/FiWWW+UQH8tyrpg3k
95JvKuIYqstCZ62lbpJPseazlF36LHlJWOdlAlqcztL4F/s7KgI2wdPx8xC6kDEu
EDDOoW439bx+qccvE8yvotDxT1QjTxC8vJShFSwCEtFZAj0K96em6doMNGIylERw
MnoPfANmMO0iwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:14 2026 by rpki-client