Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: f4T12aVK71l7it+/azgvqaDfVO1Q9JZkyeZgrFNk2dE=
Subject key identifier: 0A:4B:4D:9D:67:35:0E:B6:64:BD:1F:90:DE:8C:1B:87:67:89:52:A2
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 019CA97CBECEF80D9845A5B14F12BA3C6141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0E73
Signing time: Sun 01 Mar 2026 13:00:50 +0000
Manifest this update: Sun 01 Mar 2026 13:00:50 +0000
Manifest next update: Mon 02 Mar 2026 13:00:50 +0000
Files and hashes: 1: j-_-OLKpvCpzT4pF0J3tbQLvCOk.roa (hash: Suu8haJW2xwfl33lBXaWemEMPHtEd4FyCegVEYmcMLQ=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: qFzeng/T2+1tiuD4UQCZmtcSD76Na5KmlUkSpw8eC/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:be:ce:f8:0d:98:45:a5:b1:4f:12:ba:3c:61:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Mar 1 13:00:50 2026 GMT
Not After : Mar 2 13:00:50 2026 GMT
Subject: CN=0a4b4d9d67350eb664bd1f90de8c1b87678952a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:19:92:2f:f3:f5:43:e4:e3:94:fa:d7:3f:
2a:04:4a:ee:31:fb:14:45:f0:98:3d:f4:4f:73:26:
80:50:9d:8b:6b:16:49:5f:03:80:c4:4c:6e:78:7c:
3f:89:16:d1:53:ae:b7:26:41:ba:8a:19:30:1a:23:
b1:ff:fe:79:0d:b1:c9:d5:71:9d:b4:cb:1a:c4:7d:
07:1a:0f:9b:d0:23:6d:b5:51:da:9f:bf:7d:58:c9:
27:a2:1f:8b:e7:3c:77:a0:51:e1:1a:57:c8:41:53:
aa:7a:b2:c8:26:2f:ce:35:9a:35:a9:8b:bb:8b:67:
e4:fb:1e:99:30:95:24:88:30:e9:b6:3f:0d:75:b8:
4f:51:8f:61:0f:f4:58:b7:18:5b:67:4a:ce:67:bc:
ba:ef:f3:99:a1:37:17:69:f2:17:55:0e:41:d3:f2:
fa:60:7d:b1:38:b6:7b:b9:99:48:3e:ee:11:a7:bd:
27:84:0b:17:a2:0d:96:2b:06:03:67:71:9e:63:1f:
f6:f9:f4:e5:0d:9c:54:de:e3:3f:97:fe:03:4a:81:
78:3b:14:76:c8:58:5e:5f:ca:c2:53:59:33:6b:57:
13:f6:3e:8c:45:14:71:3d:ef:84:90:b4:77:1f:54:
6b:3b:b5:76:64:a3:ec:e3:86:36:ee:2b:61:8c:04:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:4D:9D:67:35:0E:B6:64:BD:1F:90:DE:8C:1B:87:67:89:52:A2
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b8:17:1c:80:88:24:33:c0:da:43:2e:63:7d:03:33:05:0c:
4b:eb:87:8a:97:9a:f2:af:3c:7c:04:93:0a:6e:3e:c5:6a:23:
44:c4:5e:ce:08:00:7c:0d:f9:92:1b:41:10:ad:64:95:7d:7e:
14:be:2c:6c:cf:f9:7c:c3:40:3f:de:f6:78:c1:05:2e:2f:88:
bb:6e:3e:5e:94:40:b9:01:e5:79:9e:ae:67:6f:07:6a:8f:fb:
cf:e3:4a:0b:cb:e5:c6:91:aa:f5:9d:cb:35:06:17:1f:39:12:
80:9f:b7:31:ea:e7:3c:c5:6d:65:3e:a1:00:95:64:de:e5:12:
e9:6d:1e:14:24:8a:d5:7a:35:b2:4a:05:91:42:2e:7f:10:43:
e3:c8:68:30:bf:09:e9:81:43:36:61:34:77:0f:ec:a1:f1:17:
23:4f:9a:41:65:6f:c9:50:35:f6:72:17:cc:1d:74:42:07:84:
00:32:0d:1d:f2:e1:f7:93:74:78:bc:fc:75:8b:b1:bb:bf:4a:
47:c3:d4:04:b9:ab:35:95:9f:9a:7d:9d:ad:d6:b3:af:a4:82:
e2:ac:75:92:8c:29:74:02:7a:08:40:6a:ec:a0:e3:7e:60:c4:
cc:f5:2c:c4:46:37:a7:ed:c1:1a:f0:33:42:af:d1:96:b1:86:
3e:92:de:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfL7O+A2YRaWxTxK6PGFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjYwMzAxMTMwMDUwWhcNMjYwMzAyMTMwMDUwWjAzMTEwLwYDVQQD
EygwYTRiNGQ5ZDY3MzUwZWI2NjRiZDFmOTBkZThjMWI4NzY3ODk1MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWsZki/z9UPk45T61z8qBEruMfsU
RfCYPfRPcyaAUJ2LaxZJXwOAxExueHw/iRbRU663JkG6ihkwGiOx//55DbHJ1XGd
tMsaxH0HGg+b0CNttVHan799WMknoh+L5zx3oFHhGlfIQVOqerLIJi/ONZo1qYu7
i2fk+x6ZMJUkiDDptj8NdbhPUY9hD/RYtxhbZ0rOZ7y67/OZoTcXafIXVQ5B0/L6
YH2xOLZ7uZlIPu4Rp70nhAsXog2WKwYDZ3GeYx/2+fTlDZxU3uM/l/4DSoF4OxR2
yFheX8rCU1kza1cT9j6MRRRxPe+EkLR3H1RrO7V2ZKPs44Y27ithjARUCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApLTZ1nNQ62ZL0fkN6MG4dniVKiMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrgXHICI
JDPA2kMuY30DMwUMS+uHipea8q88fASTCm4+xWojRMRezggAfA35khtBEK1klX1+
FL4sbM/5fMNAP972eMEFLi+Iu24+XpRAuQHleZ6uZ28Hao/7z+NKC8vlxpGq9Z3L
NQYXHzkSgJ+3MernPMVtZT6hAJVk3uUS6W0eFCSK1Xo1skoFkUIufxBD48hoML8J
6YFDNmE0dw/sofEXI0+aQWVvyVA19nIXzB10QgeEADINHfLh95N0eLz8dYuxu79K
R8PUBLmrNZWfmn2drdazr6SC4qx1kowpdAJ6CEBq7KDjfmDEzPUsxEY3p+3BGvAz
Qq/RlrGGPpLeCA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client