Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: VtPN0fmfpESSTyiYiNfCTl+018A4Dd6WIg3R/YCepmg=
Subject key identifier: 2F:F4:5E:A5:3B:07:04:F3:EA:E6:53:45:AA:0E:29:12:9D:31:56:F5
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 019CAB342228ACF374EEE67CB62A3CC5F304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 069A
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (hash: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: BoLV9JNB7eyBVkPC2DA46aKTV+ZOyCrv7s3F2J+h3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:22:28:ac:f3:74:ee:e6:7c:b6:2a:3c:c5:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=2ff45ea53b0704f3eae65345aa0e29129d3156f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:4b:1e:10:15:f7:fa:05:84:a4:1c:60:bd:
31:9c:e5:6d:9c:8a:74:34:4c:e0:31:48:3d:e9:29:
9a:9f:16:86:4c:a7:f1:94:b9:f1:6a:85:7b:36:76:
25:da:45:e6:0e:be:b5:cf:de:2c:0a:3d:46:f5:80:
9d:f3:7a:7a:81:ae:0e:a7:6b:96:d5:85:d5:0b:46:
8c:d0:5c:ca:2f:20:c2:8e:6e:9c:89:d4:08:74:5c:
98:b6:d9:36:f4:84:e8:82:bb:e2:61:4b:1d:d0:ed:
6c:b9:80:a6:fe:f4:0b:31:b8:6e:69:03:7b:38:0a:
1e:29:50:af:31:dd:02:7e:83:6c:8e:64:74:5f:05:
d4:a4:43:f8:8b:8d:55:20:d5:b0:d9:4e:ce:f3:b2:
fb:db:d3:d3:1e:f4:4e:7d:72:0e:2b:59:19:5d:dc:
ca:86:96:93:3e:be:2d:f1:1c:0c:fa:0d:e1:81:79:
1b:eb:9e:69:36:50:8e:2e:3d:54:31:1b:fb:3a:8f:
45:67:4e:6a:e5:03:45:38:12:0b:11:1e:d3:cd:24:
9d:51:1f:03:b1:15:cd:31:00:4f:24:93:38:61:2f:
5a:60:12:45:2e:f4:65:6b:ce:54:d2:fe:fa:0f:9b:
57:8e:71:4d:e1:30:b8:0d:6e:96:05:64:be:70:86:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:5E:A5:3B:07:04:F3:EA:E6:53:45:AA:0E:29:12:9D:31:56:F5
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:2d:aa:ed:8f:69:70:9d:43:94:0d:19:7c:df:e9:a9:3f:
67:dc:d5:4f:00:9e:2d:87:aa:2c:d4:b0:a5:62:a0:06:e2:03:
86:4c:32:24:b1:3c:e8:27:13:9c:01:db:19:c2:1e:d6:dc:a3:
7e:ea:1f:d5:76:c4:53:01:fd:57:d4:2e:4b:40:7c:cf:57:8a:
a2:05:db:92:5d:2c:9d:c1:a2:3f:55:53:33:8e:e7:c6:d3:d5:
36:60:d8:7d:8a:75:82:d9:e7:de:7e:91:b2:7f:24:04:c9:cd:
a3:c4:de:86:ff:4f:45:5c:fd:e9:9c:f0:80:a2:ea:e4:73:46:
ae:f3:aa:e7:4d:0b:9d:1c:fe:87:00:a1:26:fa:ee:50:f4:5c:
1d:9d:e8:f9:3b:c9:f2:9b:6a:38:59:8d:72:b4:11:fb:54:2b:
b3:dc:8e:38:8b:72:37:64:90:35:53:1d:00:97:61:c0:92:ce:
aa:ab:22:21:f8:de:72:d0:1e:9c:eb:fe:8b:69:38:ca:4b:7d:
d9:9f:67:c5:e9:e2:27:75:5f:6c:9f:ef:c8:7e:4d:33:51:a4:
16:a0:52:0e:fb:ac:2b:62:af:37:2a:29:59:1b:c3:c0:d7:4c:
58:b7:bb:d6:4b:54:ad:7f:1b:e5:7e:97:6b:fa:bd:b1:fa:f6:
c6:96:c5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCIorPN07uZ8tio8xfMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5
OTYzNzkwHhcNMjYwMzAxMjEwMDQ2WhcNMjYwMzAyMjEwMDQ2WjAzMTEwLwYDVQQD
EygyZmY0NWVhNTNiMDcwNGYzZWFlNjUzNDVhYTBlMjkxMjlkMzE1NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/1LHhAV9/oFhKQcYL0xnOVtnIp0
NEzgMUg96SmanxaGTKfxlLnxaoV7NnYl2kXmDr61z94sCj1G9YCd83p6ga4Op2uW
1YXVC0aM0FzKLyDCjm6cidQIdFyYttk29ITogrviYUsd0O1suYCm/vQLMbhuaQN7
OAoeKVCvMd0CfoNsjmR0XwXUpEP4i41VINWw2U7O87L729PTHvROfXIOK1kZXdzK
hpaTPr4t8RwM+g3hgXkb655pNlCOLj1UMRv7Oo9FZ05q5QNFOBILER7TzSSdUR8D
sRXNMQBPJJM4YS9aYBJFLvRla85U0v76D5tXjnFN4TC4DW6WBWS+cIb0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/0XqU7BwTz6uZTRaoOKRKdMVb1MB8GA1UdIwQY
MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt
MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2
LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaItqu2P
aXCdQ5QNGXzf6ak/Z9zVTwCeLYeqLNSwpWKgBuIDhkwyJLE86CcTnAHbGcIe1tyj
fuof1XbEUwH9V9QuS0B8z1eKogXbkl0sncGiP1VTM47nxtPVNmDYfYp1gtnn3n6R
sn8kBMnNo8Tehv9PRVz96ZzwgKLq5HNGrvOq500LnRz+hwChJvruUPRcHZ3o+TvJ
8ptqOFmNcrQR+1Qrs9yOOItyN2SQNVMdAJdhwJLOqqsiIfjectAenOv+i2k4ykt9
2Z9nxeniJ3VfbJ/vyH5NM1GkFqBSDvusK2KvNyopWRvDwNdMWLe71ktUrX8b5X6X
a/q9sfr2xpbFTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:00 2026 by rpki-client