Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: ZF38ugdafW41b2/gpTeeQqpYOBTEqpuXAbLIebmD5no=
Subject key identifier: 24:CC:89:85:2F:32:CC:9C:14:9E:83:CE:F8:3E:AC:6D:DB:3E:A0:DA
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019CAC474E63C189C0F769A227B642014C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:01:20 +0000
Manifest this update: Mon 02 Mar 2026 02:01:20 +0000
Manifest next update: Tue 03 Mar 2026 02:01:20 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: RDZnR0J9ILnFJ4PRWaBoUPm79E3vy1ayii+n0Gpi1v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:4e:63:c1:89:c0:f7:69:a2:27:b6:42:01:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Mar 2 02:01:20 2026 GMT
Not After : Mar 3 02:01:20 2026 GMT
Subject: CN=24cc89852f32cc9c149e83cef83eac6ddb3ea0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:68:2d:a9:5f:0b:27:b5:8d:60:f6:c8:d8:
26:ac:eb:e6:c4:86:19:a7:03:13:ed:08:af:4a:49:
0d:1f:07:45:6f:03:52:dc:4d:d5:90:a2:9f:0d:06:
c3:85:22:3c:a4:56:01:48:e1:01:ac:65:24:e5:fe:
1c:86:62:4e:e8:6f:af:0a:cd:13:4b:a6:e7:cf:1a:
bc:50:0f:a2:67:f0:21:57:0a:a2:1f:c2:f9:79:c4:
94:e5:fc:32:55:74:fe:55:c0:48:79:4d:02:e1:e1:
82:27:08:48:f5:9c:60:97:12:cc:31:73:55:09:07:
27:38:cf:d7:c5:2e:e5:e5:ae:21:32:05:80:da:30:
3c:78:b2:cf:d4:a4:7f:73:29:0d:45:06:66:30:ef:
89:0a:50:87:53:9c:a2:b0:bf:b3:f8:54:84:02:23:
20:52:2f:87:b8:87:f2:b5:d4:a0:1f:5e:4d:aa:96:
65:2a:2c:1c:6e:62:b3:bc:dc:18:54:8f:2d:cb:e0:
3d:d2:fa:6c:72:3d:9c:78:bb:e1:4e:6d:45:f8:e1:
1c:7b:2b:52:8e:68:e8:a1:66:9a:f6:d6:ed:4e:b8:
97:73:08:a7:f2:54:84:9f:3d:73:4e:4a:22:22:53:
bf:dd:51:de:65:af:9a:fa:97:81:62:80:7f:49:67:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:89:85:2F:32:CC:9C:14:9E:83:CE:F8:3E:AC:6D:DB:3E:A0:DA
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6b:d0:b5:ec:46:5c:c6:00:e9:ec:d1:45:d0:a3:d5:00:a0:
26:15:7d:46:d6:8e:7f:7f:6f:72:06:e1:fa:f7:1c:0c:d3:6c:
4a:95:39:3f:c9:bd:8d:46:a9:67:6f:77:84:a3:8e:22:a4:ac:
83:4b:82:3b:6c:0c:23:b5:97:50:dd:3a:b6:ef:f4:1b:f4:37:
bb:a0:9d:7b:39:57:d5:4e:0d:5c:d1:d4:ac:23:3d:0d:18:61:
e3:cd:aa:04:95:ca:ca:31:2c:5b:11:0b:d9:73:2c:2b:18:82:
6f:19:05:c2:4f:6c:d6:59:e8:48:d2:e9:57:e7:69:04:73:7c:
ed:da:ce:b8:a5:dd:e9:7f:16:94:92:6f:4a:ad:84:9d:76:34:
3e:e6:81:ff:4e:92:55:c2:79:73:bd:b8:cb:c0:c7:64:c9:99:
0d:97:71:78:f0:29:00:1d:99:d6:d1:cd:19:f7:fa:7b:93:a1:
03:d8:f2:05:f7:72:bc:a2:ea:eb:a3:76:84:76:ff:e7:5e:80:
17:23:14:5b:02:67:7b:3e:58:fd:7f:93:a0:1f:a1:f8:d0:10:
fa:dd:5f:bb:6a:0b:72:a1:78:7e:11:cc:10:36:3a:6a:ee:78:
90:e8:ae:8a:59:3f:a9:6e:cf:26:8a:36:ea:3d:c3:28:78:d2:
b5:3a:f6:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR05jwYnA92miJ7ZCAUxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjYwMzAyMDIwMTIwWhcNMjYwMzAzMDIwMTIwWjAzMTEwLwYDVQQD
EygyNGNjODk4NTJmMzJjYzljMTQ5ZTgzY2VmODNlYWM2ZGRiM2VhMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz9oLalfCye1jWD2yNgmrOvmxIYZ
pwMT7QivSkkNHwdFbwNS3E3VkKKfDQbDhSI8pFYBSOEBrGUk5f4chmJO6G+vCs0T
S6bnzxq8UA+iZ/AhVwqiH8L5ecSU5fwyVXT+VcBIeU0C4eGCJwhI9ZxglxLMMXNV
CQcnOM/XxS7l5a4hMgWA2jA8eLLP1KR/cykNRQZmMO+JClCHU5yisL+z+FSEAiMg
Ui+HuIfytdSgH15NqpZlKiwcbmKzvNwYVI8ty+A90vpscj2ceLvhTm1F+OEceytS
jmjooWaa9tbtTriXcwin8lSEnz1zTkoiIlO/3VHeZa+a+peBYoB/SWcgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTMiYUvMsycFJ6Dzvg+rG3bPqDaMB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGvQtexG
XMYA6ezRRdCj1QCgJhV9RtaOf39vcgbh+vccDNNsSpU5P8m9jUapZ293hKOOIqSs
g0uCO2wMI7WXUN06tu/0G/Q3u6CdezlX1U4NXNHUrCM9DRhh482qBJXKyjEsWxEL
2XMsKxiCbxkFwk9s1lnoSNLpV+dpBHN87drOuKXd6X8WlJJvSq2EnXY0PuaB/06S
VcJ5c724y8DHZMmZDZdxePApAB2Z1tHNGff6e5OhA9jyBfdyvKLq66N2hHb/516A
FyMUWwJnez5Y/X+ToB+h+NAQ+t1fu2oLcqF4fhHMEDY6au54kOiuilk/qW7PJoo2
6j3DKHjStTr2ww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:05 2026 by rpki-client