Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: D6banpSP9Lcydvp4ewuhZpyqd3BCSfBKmrpV7+2TUH4=
Subject key identifier: CC:B2:55:D6:96:C4:9B:56:AF:D0:48:0F:03:CD:2E:F1:75:F9:50:8D
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019CAB343DB5472E1430AAE2E69C522B8481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 1408
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: 1Xm89aaBpVMV9cKG43MJiEDRyXM.roa (hash: xvK5vKdtM3Q6AqquyM/QFwGngU91NCTC/sOOpP25kiI=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: o+ZwTWZy3pNbkAj0JjsNak1y4J3P9MeFSajkH0CdQjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3d:b5:47:2e:14:30:aa:e2:e6:9c:52:2b:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=ccb255d696c49b56afd0480f03cd2ef175f9508d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:51:f8:b0:83:c9:e7:be:90:fe:17:f4:d7:
71:72:a4:98:03:1f:43:44:78:d7:2e:21:8a:85:38:
75:6d:0b:8e:9f:4a:de:29:5a:86:a9:2d:8b:dc:d8:
20:94:2a:71:38:d9:e5:e2:0f:d3:22:10:10:f8:83:
d9:fd:ad:4f:2d:23:5c:d5:3c:90:65:b7:06:8d:5b:
bf:62:ed:cb:15:60:86:80:31:22:55:bf:ca:24:d2:
0c:4f:15:5e:cd:a2:7d:02:9f:b2:e7:14:38:88:45:
30:20:a9:64:ee:1f:21:6c:27:e7:0c:b2:47:68:35:
21:1c:5c:b4:c1:f6:c1:12:80:e3:3c:e7:2d:49:5c:
4c:52:3f:38:f3:ff:aa:6f:4f:28:7c:a4:49:00:7c:
4c:3c:c1:60:fc:76:9f:97:36:95:a6:5f:d3:47:8a:
8e:75:61:37:b1:49:e6:70:7c:67:3c:f6:6e:1d:71:
42:14:3f:31:26:5f:78:74:0d:eb:85:7f:1b:a1:8c:
37:f6:8c:1a:b3:e8:ad:24:bb:bf:a7:1e:9b:7d:99:
1c:d5:f6:90:2e:46:2b:d5:90:f4:01:90:29:1a:89:
11:f2:ab:7a:e1:d7:b1:42:e0:9f:63:ce:c7:66:fd:
22:3d:09:9d:e7:19:0b:a3:09:15:86:ce:d5:8f:a9:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:55:D6:96:C4:9B:56:AF:D0:48:0F:03:CD:2E:F1:75:F9:50:8D
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5a:5e:d7:66:bd:62:99:30:7b:c2:07:7f:9f:0b:39:7d:05:
4b:2d:db:ef:e9:8b:0d:9b:2a:db:60:e4:d1:97:22:fa:a3:5b:
a2:c2:b6:f4:da:61:23:cb:e7:fc:16:6b:68:59:82:52:d8:73:
2f:ac:a0:19:ca:ce:f3:26:f4:f7:45:b5:a5:df:d4:07:28:e0:
eb:b3:87:b3:7b:c3:cd:aa:d7:2c:ff:cf:37:4b:8b:cc:37:70:
b0:4f:c6:ff:0b:e6:45:6a:5f:40:53:35:07:eb:2d:c9:06:26:
a1:34:e8:d4:e4:77:63:c4:92:16:ae:85:37:f6:71:7a:02:46:
3f:16:94:d6:05:1a:94:af:9c:22:37:41:f9:68:a0:5b:47:b0:
67:b9:8c:a0:f1:23:5f:d7:05:43:cf:ad:9d:e9:6d:e8:94:64:
94:ac:e3:28:d7:18:90:57:39:33:81:50:fd:98:f2:e9:59:f2:
42:d4:98:d3:79:f0:03:5e:61:12:dc:99:da:6c:c9:98:09:ce:
da:21:57:47:79:26:24:49:d2:94:65:ed:e1:6c:3e:b7:8f:cb:
d6:e2:1d:c0:15:75:04:dc:b1:69:b6:3c:91:55:8b:e8:5d:96:
eb:f6:ab:00:af:cb:4c:9a:c0:b5:d3:be:ac:26:04:b2:4c:3e:
61:0a:f9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrND21Ry4UMKri5pxSK4SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw
NThlNjkwHhcNMjYwMzAxMjEwMDUzWhcNMjYwMzAyMjEwMDUzWjAzMTEwLwYDVQQD
EyhjY2IyNTVkNjk2YzQ5YjU2YWZkMDQ4MGYwM2NkMmVmMTc1Zjk1MDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuslR+LCDyee+kP4X9NdxcqSYAx9D
RHjXLiGKhTh1bQuOn0reKVqGqS2L3NgglCpxONnl4g/TIhAQ+IPZ/a1PLSNc1TyQ
ZbcGjVu/Yu3LFWCGgDEiVb/KJNIMTxVezaJ9Ap+y5xQ4iEUwIKlk7h8hbCfnDLJH
aDUhHFy0wfbBEoDjPOctSVxMUj848/+qb08ofKRJAHxMPMFg/HaflzaVpl/TR4qO
dWE3sUnmcHxnPPZuHXFCFD8xJl94dA3rhX8boYw39owas+itJLu/px6bfZkc1faQ
LkYr1ZD0AZApGokR8qt64dexQuCfY87HZv0iPQmd5xkLowkVhs7Vj6kFVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyyVdaWxJtWr9BIDwPNLvF1+VCNMB8GA1UdIwQY
MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt
ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl
LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlpe12a9
Ypkwe8IHf58LOX0FSy3b7+mLDZsq22Dk0Zci+qNbosK29NphI8vn/BZraFmCUthz
L6ygGcrO8yb090W1pd/UByjg67OHs3vDzarXLP/PN0uLzDdwsE/G/wvmRWpfQFM1
B+styQYmoTTo1OR3Y8SSFq6FN/ZxegJGPxaU1gUalK+cIjdB+WigW0ewZ7mMoPEj
X9cFQ8+tnelt6JRklKzjKNcYkFc5M4FQ/Zjy6VnyQtSY03nwA15hEtyZ2mzJmAnO
2iFXR3kmJEnSlGXt4Ww+t4/L1uIdwBV1BNyxabY8kVWL6F2W6/arAK/LTJrAtdO+
rCYEskw+YQr50Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:55 2026 by rpki-client