Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier: Gr8EMwQ6xRS4ups4atw2dm7maEG0ZhlszAj4vTVpD5E=
Subject key identifier: FD:29:8F:21:17:EB:E0:6F:70:03:5B:D5:F8:F5:61:66:61:88:0C:A9
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 019CAE34E60DAC4CE721D6E5212F258EDD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 11:00:28 +0000
Manifest this update: Mon 02 Mar 2026 11:00:28 +0000
Manifest next update: Tue 03 Mar 2026 11:00:28 +0000
Files and hashes: 1: 9tnMBfiIpNVErByTpvjDqn5wKbY.roa (hash: kOpNjJnS/Tt8SHMz9QLvG0L/TVTmkM0mNYtN/5t0qzc=)
2: VJaS-jYIuprV7YtO1DCuyd2g5wY.roa (hash: hL/BN/PlAs7Bgm3HIeGTv4CgOWk68zftN+8vu/Zh/Kk=)
3: eV_cnBLHExwM3HoFdmLAj8EL0dU.roa (hash: izY6q8vOLE3p/u7foQA9fiAmgnD5RtTMesu7+JH2h/0=)
4: n4s3R3iktWUGobIMBTVKacPInjg.roa (hash: XxvWTy0J0RZ/Rk3snkitBdW77lxKp2361BnvrzID/vE=)
5: qDwRi2lUn6QwtTVR74uQNIDyQDY.roa (hash: jR4Cc4WipI4p46sG0PogQImTneHDTqWPMtigJYRDeY8=)
6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: WeS9l942bsk1h3vZYTTye4NFZHxvlgBv1oeBSyrVFug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e6:0d:ac:4c:e7:21:d6:e5:21:2f:25:8e:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Mar 2 11:00:28 2026 GMT
Not After : Mar 3 11:00:28 2026 GMT
Subject: CN=fd298f2117ebe06f70035bd5f8f5616661880ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:d0:47:2b:07:fc:55:c9:ba:89:f3:35:a6:
f1:35:7c:f1:75:91:49:54:91:61:d6:28:83:d5:52:
6a:cb:9d:25:0e:58:39:b2:1c:4b:d8:c7:84:b3:3e:
eb:19:e8:02:93:b5:da:f3:aa:40:c3:ed:41:93:97:
d7:35:4d:b8:a9:4d:7a:a0:3a:7a:ab:2f:55:4a:76:
c1:f0:5a:c9:2d:77:6c:a5:8f:ab:d0:41:61:44:ee:
a4:88:69:28:ff:73:11:c4:6e:51:9b:b5:6e:c2:2c:
ea:90:7b:e4:76:bd:36:d8:85:b0:62:d9:05:f1:0e:
fd:c8:17:24:51:4d:cc:b4:40:10:ca:c3:59:0d:a6:
73:57:da:b0:2c:a1:87:8f:5a:3b:29:a8:b6:e1:b0:
e1:50:4c:72:b0:37:f7:15:92:6f:eb:48:a9:29:12:
73:59:ae:38:30:4a:1c:7b:fe:d6:e8:9b:2c:d4:34:
05:f8:9b:de:a0:4c:81:6f:a0:80:de:9a:f6:84:63:
c1:54:f5:d2:0e:07:c1:8a:c1:3b:67:02:53:f2:2b:
99:94:2e:4c:c4:91:74:94:13:9e:2c:99:13:ec:fe:
c9:01:38:6c:28:9c:ff:f3:5f:bf:e5:ca:c7:d7:f2:
a5:39:0b:f0:90:75:60:a2:09:b7:b5:d9:46:99:62:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:8F:21:17:EB:E0:6F:70:03:5B:D5:F8:F5:61:66:61:88:0C:A9
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:af:00:98:01:10:ea:cb:07:8f:e1:7d:b9:c9:17:71:69:
58:0b:6b:00:fb:c4:27:ff:20:a8:3c:63:38:ca:0f:d4:57:9c:
34:bc:74:2f:cb:f4:68:e9:2f:8b:00:7b:9c:99:39:40:2d:2a:
71:45:10:5e:b2:90:b9:0f:fe:ed:16:64:79:f8:aa:be:31:a6:
e3:69:8c:63:90:af:5c:c6:51:0a:36:77:68:fc:e8:03:2f:06:
b6:7c:68:d5:2b:2f:60:dc:62:4e:3f:42:29:af:57:70:8a:2a:
67:42:f6:3a:5e:1d:d6:35:df:f2:63:97:4e:c9:a3:3a:7a:9e:
97:af:91:72:a7:a3:14:9c:86:b5:70:ff:d5:59:28:6f:81:05:
08:c5:a2:0b:3d:6d:2c:9b:42:65:41:10:ea:92:7f:93:8d:93:
24:7b:dd:91:a6:11:06:08:73:17:ff:ab:bf:eb:00:5f:2e:aa:
97:0b:2c:d1:36:9a:5a:7d:ef:63:56:16:a6:d2:70:5b:a0:d7:
82:44:d3:ce:70:7f:f3:e3:99:a4:d8:b2:99:5a:34:1a:47:bd:
9b:24:94:ef:99:c0:6d:a2:81:df:bc:ef:ed:29:82:02:4e:7f:
a5:2b:f6:03:46:8f:f4:52:0d:a8:9a:90:53:cf:f1:ba:69:f7:
c7:2d:1e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNOYNrEznIdblIS8ljt1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3
MWEyYTIwHhcNMjYwMzAyMTEwMDI4WhcNMjYwMzAzMTEwMDI4WjAzMTEwLwYDVQQD
EyhmZDI5OGYyMTE3ZWJlMDZmNzAwMzViZDVmOGY1NjE2NjYxODgwY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBbQRysH/FXJuonzNabxNXzxdZFJ
VJFh1iiD1VJqy50lDlg5shxL2MeEsz7rGegCk7Xa86pAw+1Bk5fXNU24qU16oDp6
qy9VSnbB8FrJLXdspY+r0EFhRO6kiGko/3MRxG5Rm7VuwizqkHvkdr022IWwYtkF
8Q79yBckUU3MtEAQysNZDaZzV9qwLKGHj1o7Kai24bDhUExysDf3FZJv60ipKRJz
Wa44MEoce/7W6Jss1DQF+JveoEyBb6CA3pr2hGPBVPXSDgfBisE7ZwJT8iuZlC5M
xJF0lBOeLJkT7P7JAThsKJz/81+/5crH1/KlOQvwkHVgogm3tdlGmWJCIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0pjyEX6+BvcANb1fj1YWZhiAypMB8GA1UdIwQY
MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt
ZmQyMmRmM2I1N2Y2LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2
LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpKvAJgB
EOrLB4/hfbnJF3FpWAtrAPvEJ/8gqDxjOMoP1FecNLx0L8v0aOkviwB7nJk5QC0q
cUUQXrKQuQ/+7RZkefiqvjGm42mMY5CvXMZRCjZ3aPzoAy8Gtnxo1SsvYNxiTj9C
Ka9XcIoqZ0L2Ol4d1jXf8mOXTsmjOnqel6+RcqejFJyGtXD/1Vkob4EFCMWiCz1t
LJtCZUEQ6pJ/k42TJHvdkaYRBghzF/+rv+sAXy6qlwss0TaaWn3vY1YWptJwW6DX
gkTTznB/8+OZpNiymVo0Gke9mySU75nAbaKB37zv7SmCAk5/pSv2A0aP9FINqJqQ
U8/xumn3xy0ehg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:24:17 2026 by rpki-client