Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: pbGqJdWhXwt23WlFAAhr2DVDD2v/B+69t1AxgM8AO2A=
Subject key identifier: CC:5E:DE:03:D1:73:DC:D4:9A:4D:06:67:E4:B6:90:AC:91:6A:14:69
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019CAA58E8D0B6BF2F4B8FB94B6E989EBD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 04B3
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: i+vov/pbgRpGhGBxqL8ZY1naq5kuCwR1VqtXOZBrGAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e8:d0:b6:bf:2f:4b:8f:b9:4b:6e:98:9e:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=cc5ede03d173dcd49a4d0667e4b690ac916a1469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:81:fe:5a:71:3c:dc:fd:fd:c3:da:53:f5:
33:9d:2c:fd:b7:c5:f1:c9:f2:13:b4:61:cd:90:1d:
5b:ac:70:52:cf:6d:7a:82:12:fb:cd:b1:9a:7e:aa:
0b:35:d2:ac:46:24:01:e5:df:47:2f:19:4d:d8:da:
93:e6:db:2d:af:2a:cf:43:1a:69:51:08:3f:d5:95:
d3:79:74:9d:a8:fc:17:d2:64:6e:08:19:2c:2e:56:
15:c5:0d:1e:77:1b:79:dd:80:60:0a:35:dc:de:39:
1b:d6:2f:5b:a1:6d:5c:26:55:41:d9:2a:c6:9b:af:
21:3d:bb:4b:cd:7d:8f:fc:a8:24:d2:8a:80:f6:4d:
2e:4f:48:8f:a4:cc:40:b2:3c:aa:28:6e:31:6e:04:
30:96:93:69:8c:56:92:da:8b:21:24:bf:2b:b5:53:
fa:51:01:8b:52:a6:ea:62:9a:00:c9:d0:76:66:92:
d3:54:48:b0:e0:30:60:53:71:77:cd:e8:6b:51:9b:
46:99:f5:fc:1d:64:cc:74:47:ec:49:e0:b3:c4:b8:
a1:40:5a:18:85:a7:3b:86:fc:76:f9:49:81:fd:90:
42:f3:38:6a:6d:ef:14:26:51:1c:ca:98:3a:28:6d:
2e:8e:85:ce:17:24:86:a8:95:7a:49:96:6c:56:9c:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:DE:03:D1:73:DC:D4:9A:4D:06:67:E4:B6:90:AC:91:6A:14:69
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:0b:88:b8:6b:c0:3e:a4:a3:a3:7e:5d:29:54:ab:00:4e:
33:0c:3d:f5:9a:8c:44:3b:82:34:04:fc:ae:84:10:af:7a:88:
e5:64:c5:7c:49:ad:17:21:a6:46:3f:b2:58:02:8c:d4:dd:a4:
11:45:75:e0:9d:98:ba:61:cb:c4:d4:92:78:40:fd:4c:90:c7:
eb:84:ee:5d:cd:db:f6:32:58:72:a9:4d:96:bd:24:e3:e2:86:
73:07:10:fa:ec:ed:52:48:f8:94:9b:d1:a0:61:2f:e8:ae:8d:
8a:8f:f4:b3:27:e8:05:18:b2:cd:f3:00:f5:6b:44:ef:63:e8:
14:be:86:0a:a6:23:f3:59:42:a7:59:db:b3:e4:b6:20:6c:af:
91:04:ec:8a:7a:22:21:46:2a:9a:e0:44:ed:10:0a:49:70:c3:
63:4c:b7:fd:8f:df:dd:a5:b1:19:dc:ff:bf:44:35:01:25:52:
41:a8:3a:9f:24:9b:33:f9:d1:ef:f9:cb:f0:90:64:4b:b7:9c:
5a:65:01:d3:7e:9b:34:60:f3:ff:91:ec:11:4b:d0:73:96:fe:
f0:2a:46:4a:96:d9:bc:0c:cf:c6:ca:11:b4:7b:04:51:c1:ca:
bb:86:19:eb:9b:02:ea:52:35:df:d1:01:d9:1f:a4:66:06:75:
0d:db:2d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOjQtr8vS4+5S26Ynr1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjYwMzAxMTcwMTE5WhcNMjYwMzAyMTcwMTE5WjAzMTEwLwYDVQQD
EyhjYzVlZGUwM2QxNzNkY2Q0OWE0ZDA2NjdlNGI2OTBhYzkxNmExNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvWB/lpxPNz9/cPaU/UznSz9t8Xx
yfITtGHNkB1brHBSz216ghL7zbGafqoLNdKsRiQB5d9HLxlN2NqT5tstryrPQxpp
UQg/1ZXTeXSdqPwX0mRuCBksLlYVxQ0edxt53YBgCjXc3jkb1i9boW1cJlVB2SrG
m68hPbtLzX2P/Kgk0oqA9k0uT0iPpMxAsjyqKG4xbgQwlpNpjFaS2oshJL8rtVP6
UQGLUqbqYpoAydB2ZpLTVEiw4DBgU3F3zehrUZtGmfX8HWTMdEfsSeCzxLihQFoY
hac7hvx2+UmB/ZBC8zhqbe8UJlEcypg6KG0ujoXOFySGqJV6SZZsVpwVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxe3gPRc9zUmk0GZ+S2kKyRahRpMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETwLiLhr
wD6ko6N+XSlUqwBOMww99ZqMRDuCNAT8roQQr3qI5WTFfEmtFyGmRj+yWAKM1N2k
EUV14J2YumHLxNSSeED9TJDH64TuXc3b9jJYcqlNlr0k4+KGcwcQ+uztUkj4lJvR
oGEv6K6Nio/0syfoBRiyzfMA9WtE72PoFL6GCqYj81lCp1nbs+S2IGyvkQTsinoi
IUYqmuBE7RAKSXDDY0y3/Y/f3aWxGdz/v0Q1ASVSQag6nySbM/nR7/nL8JBkS7ec
WmUB036bNGDz/5HsEUvQc5b+8CpGSpbZvAzPxsoRtHsEUcHKu4YZ65sC6lI139EB
2R+kZgZ1Ddstwg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:49:40 2026 by rpki-client