Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: cvzNvt43out1D45jlz/pURJ7WSfQq+rddbp9ZMo2XRg=
Subject key identifier: 2E:49:BE:C0:76:2B:75:F2:31:BB:87:84:A5:B6:51:D7:F3:3D:57:88
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 019CA90EA85A10544BA21A709B9365844A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 069D
Signing time: Sun 01 Mar 2026 11:00:35 +0000
Manifest this update: Sun 01 Mar 2026 11:00:35 +0000
Manifest next update: Mon 02 Mar 2026 11:00:35 +0000
Files and hashes: 1: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
2: jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa (hash: a4/BoGxMxUQA6ejTQInWpx7OBve66J6mI7qjuV4Hb5Q=)
3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: X5FzPfjaYUUAA0ATOAWle7DsvQ7ECoTGxZboFkbb2RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:a8:5a:10:54:4b:a2:1a:70:9b:93:65:84:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Mar 1 11:00:35 2026 GMT
Not After : Mar 2 11:00:35 2026 GMT
Subject: CN=2e49bec0762b75f231bb8784a5b651d7f33d5788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:06:4a:2e:66:c6:ac:07:a8:2d:50:bf:fd:
9d:b6:73:c5:f1:0c:63:5d:8c:c6:00:37:2b:78:cc:
d3:54:b1:c5:43:36:3c:f7:26:4b:3a:0e:a8:ce:b1:
31:d3:5b:7a:18:3e:7d:6e:e4:30:47:19:80:0e:7d:
f2:0d:07:9c:0d:7f:3e:51:67:b1:c9:d6:d0:77:88:
0e:03:0a:76:b5:43:a1:33:d8:43:cb:d5:a6:0b:da:
be:f3:4f:d7:cf:a1:50:44:53:13:f2:14:32:33:8a:
96:6a:7d:b1:7a:2f:00:0c:1f:cb:8e:74:8c:a7:b1:
84:05:8c:bd:58:5e:6d:d3:d6:ef:f1:7a:38:fc:71:
01:0e:ef:ee:f9:a1:09:16:24:c3:31:2d:fe:5e:9e:
0a:f2:08:e8:f1:a1:73:4b:ed:75:82:c9:bc:e4:c2:
af:48:41:14:3a:9e:2d:d4:72:e7:50:db:e9:ba:d7:
9b:07:81:20:d3:37:97:57:51:59:91:08:4b:f7:42:
9a:58:f8:ab:7f:6c:c2:8e:fe:1a:0b:c8:03:c6:f3:
18:aa:fd:74:25:34:5f:c0:22:07:3e:b3:50:5a:fa:
0b:bc:ff:db:89:75:63:d4:f0:07:aa:6b:ea:b4:0b:
41:8b:0f:a9:d5:66:89:39:f2:50:57:93:0a:77:6f:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:BE:C0:76:2B:75:F2:31:BB:87:84:A5:B6:51:D7:F3:3D:57:88
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5f:73:83:02:5b:b2:3f:a4:47:98:fa:0e:87:2c:2d:27:b7:
96:05:c5:d1:73:80:8f:53:9f:5f:9c:55:4a:8a:db:47:97:a5:
6b:c5:4f:65:95:61:51:ba:5a:30:0e:1b:ed:b3:5d:9a:6e:65:
ff:09:17:2a:80:bc:86:a8:70:f1:83:2f:ab:d9:dd:4a:f5:b4:
c4:b9:e7:4d:6f:92:ce:76:52:2b:e1:25:6b:aa:40:21:7c:1b:
c0:44:97:da:c0:61:74:82:55:4e:7f:9b:41:16:df:28:b0:f9:
f8:ed:63:94:40:ea:31:e6:27:c2:83:38:f7:5b:ee:23:44:48:
22:cd:d4:f2:59:d5:3d:72:2d:26:e0:a1:43:3d:7d:73:7f:8a:
53:95:1c:5e:8f:c6:26:1c:53:b9:05:35:3e:1c:1c:d4:d7:30:
f6:f4:bd:77:31:00:d2:ed:ac:64:4e:d1:d9:f1:2e:8f:44:3a:
c3:9c:a1:2d:0e:58:23:05:56:5d:ee:c1:02:dd:18:f1:18:e8:
7e:a1:2a:ed:8d:94:d6:27:3c:52:de:31:b6:ae:f6:11:48:77:
d2:28:13:69:68:69:28:fc:59:a3:20:a7:30:4d:fb:d8:d7:5b:
0c:0a:dd:2b:78:df:a3:fe:04:2b:e5:e6:45:94:43:fc:eb:ae:
64:9a:b4:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDqhaEFRLohpwm5NlhEp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTE1NDE1ODkwNWQxZDQ0YzQ1ODhkZmQyNTgwMmYzMjRh
OTNkNjEwHhcNMjYwMzAxMTEwMDM1WhcNMjYwMzAyMTEwMDM1WjAzMTEwLwYDVQQD
EygyZTQ5YmVjMDc2MmI3NWYyMzFiYjg3ODRhNWI2NTFkN2YzM2Q1Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/EGSi5mxqwHqC1Qv/2dtnPF8Qxj
XYzGADcreMzTVLHFQzY89yZLOg6ozrEx01t6GD59buQwRxmADn3yDQecDX8+UWex
ydbQd4gOAwp2tUOhM9hDy9WmC9q+80/Xz6FQRFMT8hQyM4qWan2xei8ADB/LjnSM
p7GEBYy9WF5t09bv8Xo4/HEBDu/u+aEJFiTDMS3+Xp4K8gjo8aFzS+11gsm85MKv
SEEUOp4t1HLnUNvputebB4Eg0zeXV1FZkQhL90KaWPirf2zCjv4aC8gDxvMYqv10
JTRfwCIHPrNQWvoLvP/biXVj1PAHqmvqtAtBiw+p1WaJOfJQV5MKd29pDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5JvsB2K3XyMbuHhKW2UdfzPVeIMB8GA1UdIwQY
MBaAFMpRVBWJBdHUTEWI39JYAvMkqT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTct
MTAwOTBkMWU3ZDk0LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNTU4YWEtNTVlZi00NTBmLThiOTctMTAwOTBkMWU3ZDk0
LzEveWxGVUZZa0YwZFJNUllqZjBsZ0M4eVNwUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil9zgwJb
sj+kR5j6DocsLSe3lgXF0XOAj1OfX5xVSorbR5ela8VPZZVhUbpaMA4b7bNdmm5l
/wkXKoC8hqhw8YMvq9ndSvW0xLnnTW+SznZSK+Ela6pAIXwbwESX2sBhdIJVTn+b
QRbfKLD5+O1jlEDqMeYnwoM491vuI0RIIs3U8lnVPXItJuChQz19c3+KU5UcXo/G
JhxTuQU1Phwc1Ncw9vS9dzEA0u2sZE7R2fEuj0Q6w5yhLQ5YIwVWXe7BAt0Y8Rjo
fqEq7Y2U1ic8Ut4xtq72EUh30igTaWhpKPxZoyCnME372NdbDArdK3jfo/4EK+Xm
RZRD/OuuZJq0Jg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:48 2026 by rpki-client