Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: qWnZAfrHZuakff8sWKlJIkJ8kCH/V3SkOuMAe9+Kmh0=
Subject key identifier: 2B:C7:44:46:D5:E4:33:1A:9D:79:B4:38:1A:54:A7:06:FB:EA:B1:F5
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019CAC46E1838D83BE61B74E8DCFADF883BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: VpTcnmIdu1or70NVdb7KksBG0mY.roa (hash: X4YGR6I4Wi0PqQvq++rW4nssY1qKMiMmata2S9zHF98=)
2: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: qlvO8zYBbLch21QAmTQvluUS4sIn4gkXCWPVon1gSHo=)
3: cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa (hash: SUSOfIvJ0FegXPx9bBr1JRLYC/VJEW0GnploXLv94LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e1:83:8d:83:be:61:b7:4e:8d:cf:ad:f8:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=2bc74446d5e4331a9d79b4381a54a706fbeab1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:b3:98:27:66:f4:a1:80:4f:75:24:6c:15:
ef:49:60:eb:ea:19:12:52:31:7f:0d:e8:cc:5c:e4:
d0:16:c3:45:de:cd:f9:c1:a4:79:22:e6:84:33:cf:
ff:16:9f:06:eb:14:a6:e9:c0:fe:95:72:ea:ad:08:
db:ad:93:8c:21:a1:7b:bd:09:d4:9d:04:3b:e1:d2:
f0:65:4d:7f:20:08:62:52:a9:3b:3b:0b:2c:31:9e:
43:c3:e9:5d:7f:2b:0c:0a:43:b8:2a:d6:0a:ac:87:
68:0d:67:20:73:53:bf:db:2b:ba:a3:9f:2f:da:44:
80:2e:c8:af:58:0b:a7:05:32:0a:67:85:c4:7f:7a:
2d:7a:5f:65:9c:5a:5b:3a:b0:f1:de:34:e1:0d:9a:
30:3e:b6:e5:6e:8c:d6:93:a9:8e:e6:64:1a:1a:be:
90:43:4d:b1:fd:bf:4a:88:7d:9d:69:09:51:cd:c3:
17:26:4b:44:1d:a0:95:b5:d1:09:a5:6d:76:4d:2e:
68:54:72:0e:75:7a:97:30:e9:06:b7:06:76:79:6a:
55:4f:f3:52:b0:42:b6:eb:b6:d9:05:d3:ca:af:e0:
5b:b8:86:84:da:38:73:1a:aa:f6:8e:2e:9f:c1:41:
7c:ea:26:ce:63:87:df:fa:12:a3:85:53:7c:08:02:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:44:46:D5:E4:33:1A:9D:79:B4:38:1A:54:A7:06:FB:EA:B1:F5
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:38:b4:fc:d6:24:6d:65:4a:18:49:f6:7f:11:6d:73:7c:79:
e2:0f:25:72:03:30:ed:0a:d2:e5:c4:c7:36:6f:3a:8b:d9:43:
43:1a:23:76:f2:b2:29:cf:ec:44:af:e3:02:81:a0:a8:9a:02:
7e:b9:f8:d2:b1:54:94:6d:d8:1f:cd:f3:e8:40:5e:8a:3c:c7:
17:89:eb:df:50:ac:04:36:31:41:fa:e2:21:f2:9f:e7:1d:4a:
e0:81:ff:93:e6:1d:24:fb:39:a7:2c:cc:bf:07:af:86:ec:cf:
f4:3a:d0:62:7b:61:e3:1a:0a:13:d9:66:70:ac:de:58:f0:f2:
ba:83:81:8d:e2:4f:c5:fd:f3:5a:dd:ae:96:74:d1:31:c1:8a:
03:ae:a1:68:d5:d3:2b:29:62:a1:9a:57:64:d5:6c:ba:65:84:
33:8c:32:0c:cb:83:5d:61:25:75:6d:24:55:6c:57:ec:c0:4d:
59:7f:1a:8c:90:ce:f3:bb:db:94:d3:d4:9a:21:bf:66:ec:57:
3f:20:18:13:d7:f3:0f:84:d2:99:7f:5c:2e:44:25:63:ef:ec:
4f:2a:84:77:93:40:46:71:2a:b2:04:7a:20:c2:60:31:33:00:
23:7c:94:6f:fe:c8:d6:1d:37:19:1b:30:40:a6:74:a8:57:f4:
a7:60:31:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRuGDjYO+YbdOjc+t+IO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy
NjRkYzAwHhcNMjYwMzAyMDIwMDUyWhcNMjYwMzAzMDIwMDUyWjAzMTEwLwYDVQQD
EygyYmM3NDQ0NmQ1ZTQzMzFhOWQ3OWI0MzgxYTU0YTcwNmZiZWFiMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h+zmCdm9KGAT3UkbBXvSWDr6hkS
UjF/DejMXOTQFsNF3s35waR5IuaEM8//Fp8G6xSm6cD+lXLqrQjbrZOMIaF7vQnU
nQQ74dLwZU1/IAhiUqk7OwssMZ5Dw+ldfysMCkO4KtYKrIdoDWcgc1O/2yu6o58v
2kSALsivWAunBTIKZ4XEf3otel9lnFpbOrDx3jThDZowPrblbozWk6mO5mQaGr6Q
Q02x/b9KiH2daQlRzcMXJktEHaCVtdEJpW12TS5oVHIOdXqXMOkGtwZ2eWpVT/NS
sEK267bZBdPKr+BbuIaE2jhzGqr2ji6fwUF86ibOY4ff+hKjhVN8CAL1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvHREbV5DManXm0OBpUpwb76rH1MB8GA1UdIwQY
MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt
ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk
LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzi0/NYk
bWVKGEn2fxFtc3x54g8lcgMw7QrS5cTHNm86i9lDQxojdvKyKc/sRK/jAoGgqJoC
frn40rFUlG3YH83z6EBeijzHF4nr31CsBDYxQfriIfKf5x1K4IH/k+YdJPs5pyzM
vwevhuzP9DrQYnth4xoKE9lmcKzeWPDyuoOBjeJPxf3zWt2ulnTRMcGKA66haNXT
KylioZpXZNVsumWEM4wyDMuDXWEldW0kVWxX7MBNWX8ajJDO87vblNPUmiG/ZuxX
PyAYE9fzD4TSmX9cLkQlY+/sTyqEd5NARnEqsgR6IMJgMTMAI3yUb/7I1h03GRsw
QKZ0qFf0p2Axjg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:14 2026 by rpki-client