Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: h3d/QbIi7ikGTEOnwb5+p30aBBZpoYa46V0SmZ0gWAg=
Subject key identifier: 10:70:B0:C8:ED:52:AF:1B:B8:2F:92:99:BB:65:83:B5:9B:50:A0:04
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 019CAB6AF199C62D20FA8B4F3ADF05ED75A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 0527
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: PvCgDhF7NMwisHTGu6gMJAQYao8.roa (hash: iU0qJG0gVhiOE7d2EF+iy3h3MwEr90mkXIIvaKDVia4=)
2: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: eZZIqQ7icj6xDmkI7gPOtQorh/BD1Jmg1ZQJwSxZT64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f1:99:c6:2d:20:fa:8b:4f:3a:df:05:ed:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=1070b0c8ed52af1bb82f9299bb6583b59b50a004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:bb:c2:fc:25:98:ec:46:38:01:53:86:34:
e8:82:b1:a0:60:1d:81:06:e0:62:b3:51:07:4f:7c:
2a:c0:4f:39:fd:e1:90:7c:0f:87:e4:db:87:8d:0a:
86:d9:3e:71:50:c6:5b:6d:d2:04:6a:ab:f2:50:af:
15:08:92:9a:ad:7c:c2:69:87:36:7d:a4:9a:22:6a:
24:22:28:6c:15:03:a1:03:1d:46:60:30:7a:b5:7e:
eb:04:dc:50:07:db:95:08:fa:97:f9:9a:0e:1c:ec:
33:b1:08:59:45:7f:af:f3:16:07:8d:d0:d7:41:96:
e0:f3:1a:00:3b:b3:14:d6:ed:f0:94:ed:67:e5:fd:
e1:f6:35:c0:ab:97:61:42:aa:4c:a2:2e:bc:5c:8c:
01:c9:2d:af:3f:3c:f4:e1:a3:c9:9b:64:c4:58:05:
15:b2:b2:f5:8c:3e:43:62:cb:7d:0b:af:ad:7c:e1:
02:a2:30:f2:70:30:82:d8:af:14:54:b2:95:68:14:
2a:ff:6a:78:d4:30:84:f6:94:46:87:87:5d:83:59:
f2:42:15:37:6b:e3:ca:9f:f8:23:d1:ff:71:c9:88:
b3:16:eb:ae:40:41:91:ab:c4:31:cf:c0:9f:4e:06:
04:bc:f8:23:92:a8:ea:9d:a1:e2:60:3e:13:65:5a:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:B0:C8:ED:52:AF:1B:B8:2F:92:99:BB:65:83:B5:9B:50:A0:04
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:d3:9a:9e:f2:57:6a:e3:56:fd:c1:d9:45:d9:4e:97:eb:
78:10:6f:ae:c5:20:2f:aa:a1:5b:78:8a:9b:a8:1c:cc:8a:44:
8c:58:91:19:f8:32:2e:db:98:95:20:90:d9:0b:38:c4:48:27:
1b:dd:ac:cc:9e:ca:cd:99:d9:29:fd:d3:cf:c4:66:20:45:90:
fe:b2:c1:82:83:03:88:45:63:61:be:88:22:00:42:8f:d0:ca:
3c:fb:ce:48:c1:94:25:42:c2:dc:3c:c6:02:e8:9f:98:51:77:
bf:46:7c:6e:d6:d4:91:13:50:73:ff:2e:4f:28:2a:80:f2:f8:
06:d7:14:21:0c:7e:08:e9:0d:4f:38:08:2e:dd:ed:64:a9:a6:
3c:5d:dc:be:8b:63:52:38:a8:fb:fb:e5:c1:19:1a:e3:f2:be:
f8:8f:25:ae:a9:06:4f:2b:4c:2a:cb:bb:b6:1e:ae:20:46:bf:
9f:48:66:eb:fa:83:d5:1d:23:e3:db:e1:79:c8:24:88:e8:3a:
4a:fc:7f:21:37:25:fd:e7:58:cb:53:58:ef:74:68:c2:f1:7b:
ae:b8:ab:c7:d9:b8:30:14:1a:0e:a1:ce:a5:a9:e1:1b:ca:55:
5f:b0:3a:6b:6a:cf:ef:9f:bf:8c:7d:f1:f7:42:29:f0:a7:67:
aa:c4:1b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyravGZxi0g+otPOt8F7XWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjFhNGRhYTdkY2Y0YTRjYjA4YWM0NzQ3Mzc1ZjY5OGFh
ZTg2NDMwHhcNMjYwMzAxMjIwMDM4WhcNMjYwMzAyMjIwMDM4WjAzMTEwLwYDVQQD
EygxMDcwYjBjOGVkNTJhZjFiYjgyZjkyOTliYjY1ODNiNTliNTBhMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaK7wvwlmOxGOAFThjTogrGgYB2B
BuBis1EHT3wqwE85/eGQfA+H5NuHjQqG2T5xUMZbbdIEaqvyUK8VCJKarXzCaYc2
faSaImokIihsFQOhAx1GYDB6tX7rBNxQB9uVCPqX+ZoOHOwzsQhZRX+v8xYHjdDX
QZbg8xoAO7MU1u3wlO1n5f3h9jXAq5dhQqpMoi68XIwByS2vPzz04aPJm2TEWAUV
srL1jD5DYst9C6+tfOECojDycDCC2K8UVLKVaBQq/2p41DCE9pRGh4ddg1nyQhU3
a+PKn/gj0f9xyYizFuuuQEGRq8Qxz8CfTgYEvPgjkqjqnaHiYD4TZVp/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBwsMjtUq8buC+Smbtlg7WbUKAEMB8GA1UdIwQY
MBaAFGAhpNqn3PSkywisR0c3X2mKroZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDct
NGQyYTYzMzRkZTc3LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDctNGQyYTYzMzRkZTc3
LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes3Tmp7y
V2rjVv3B2UXZTpfreBBvrsUgL6qhW3iKm6gczIpEjFiRGfgyLtuYlSCQ2Qs4xEgn
G92szJ7KzZnZKf3Tz8RmIEWQ/rLBgoMDiEVjYb6IIgBCj9DKPPvOSMGUJULC3DzG
AuifmFF3v0Z8btbUkRNQc/8uTygqgPL4BtcUIQx+COkNTzgILt3tZKmmPF3cvotj
Ujio+/vlwRka4/K++I8lrqkGTytMKsu7th6uIEa/n0hm6/qD1R0j49vhecgkiOg6
Svx/ITcl/edYy1NY73RowvF7rrirx9m4MBQaDqHOpanhG8pVX7A6a2rP75+/jH3x
90Ip8KdnqsQbGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:14 2026 by rpki-client