Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: 0erfCWCOd8N+gj4X+YTixtJDMFR9Q+zRK2FLqQZIwd8=
Subject key identifier: 43:4F:2D:F1:3A:39:13:49:CE:5B:9F:1D:5F:D8:94:01:37:44:EE:D5
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019CAD9024680C3BF1F57BD34C3F1999006A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0796
Signing time: Mon 02 Mar 2026 08:00:30 +0000
Manifest this update: Mon 02 Mar 2026 08:00:30 +0000
Manifest next update: Tue 03 Mar 2026 08:00:30 +0000
Files and hashes: 1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: rALtbIENN/gHzwMYoEQGhOPQx6ThL9Dr/uL78+I/pEI=)
3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:24:68:0c:3b:f1:f5:7b:d3:4c:3f:19:99:00:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Mar 2 08:00:30 2026 GMT
Not After : Mar 3 08:00:30 2026 GMT
Subject: CN=434f2df13a391349ce5b9f1d5fd894013744eed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:c9:0b:dd:90:34:0f:58:76:66:80:e8:19:
00:c4:88:8e:82:33:a0:1d:75:0f:d1:ae:08:6a:0e:
6d:74:53:a4:ae:27:6f:28:90:1a:91:0f:30:26:37:
67:cb:05:72:91:11:40:eb:93:28:6b:7e:5e:c8:fc:
ee:b5:e1:fd:ef:62:39:87:36:23:64:da:fe:6f:05:
43:8e:9b:6e:6a:60:e6:6f:f1:c9:8a:ea:a9:b0:d4:
f7:9e:fd:eb:53:75:6c:1a:21:04:03:e9:c0:c9:6c:
96:dc:35:db:52:54:fd:54:83:31:bc:af:2e:2c:c3:
ef:ad:6d:ca:16:5e:64:0b:80:12:f1:fc:67:19:1d:
0a:9e:a7:19:15:a1:e8:b1:93:1d:2e:b3:7b:3e:a1:
75:72:8d:cb:04:91:c6:e2:55:8a:19:f4:b8:ea:33:
de:1e:02:63:9d:c1:35:bd:14:20:5f:3c:c0:e8:c4:
95:ea:c6:11:f2:7b:62:3c:af:9e:34:0c:bc:d5:61:
29:e7:d9:89:fc:8c:25:46:54:65:01:18:63:74:26:
d9:3c:10:89:e5:6e:54:b8:2d:53:7a:15:21:6e:79:
b1:ab:42:4e:b9:f3:f0:dd:78:db:6d:83:95:21:82:
93:ef:a8:d4:32:bb:d7:ea:f4:89:26:3d:2a:98:0e:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:2D:F1:3A:39:13:49:CE:5B:9F:1D:5F:D8:94:01:37:44:EE:D5
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:64:ff:f8:c9:4f:e3:e5:c0:44:42:14:a9:76:67:55:89:8e:
e6:05:e8:28:e9:b0:d0:7b:97:c2:eb:4b:b2:38:51:78:e4:62:
19:b7:89:d4:93:3c:2e:ea:38:a0:65:2d:23:51:31:7f:99:cd:
9b:a7:71:fb:cf:ae:92:b8:90:64:e0:36:18:bd:af:08:28:18:
59:89:85:c6:84:b6:42:5c:40:53:95:a8:f6:75:e0:a9:46:f0:
be:cc:25:57:bc:a9:9a:70:9d:df:12:18:75:6b:57:b0:81:5a:
be:72:b0:62:8b:43:66:d3:72:5d:6f:95:52:5b:0c:bd:79:c9:
05:41:59:23:c9:a6:1f:3c:27:e7:a5:bd:aa:4c:6a:58:2c:52:
d2:25:2e:da:6c:b2:55:5e:14:94:6b:79:96:bb:bb:f7:c4:31:
d5:f3:bc:51:df:8a:c0:cb:2f:a9:cb:d8:da:74:a1:13:1b:65:
ec:52:9c:10:4d:34:a2:0f:5f:38:ba:9a:8e:aa:eb:86:c1:c6:
53:be:89:3c:ee:d2:b6:5d:ca:46:f2:8d:18:ec:27:ac:d6:88:
34:71:5c:50:4b:29:a3:ae:92:8a:34:7c:43:16:48:d2:6d:c5:
54:9a:3c:0a:0f:20:84:3c:df:9d:e8:a6:aa:bc:59:97:cf:73:
92:b4:5d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkCRoDDvx9XvTTD8ZmQBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3
NGZhODUwHhcNMjYwMzAyMDgwMDMwWhcNMjYwMzAzMDgwMDMwWjAzMTEwLwYDVQQD
Eyg0MzRmMmRmMTNhMzkxMzQ5Y2U1YjlmMWQ1ZmQ4OTQwMTM3NDRlZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLXJC92QNA9YdmaA6BkAxIiOgjOg
HXUP0a4Iag5tdFOkridvKJAakQ8wJjdnywVykRFA65Moa35eyPzuteH972I5hzYj
ZNr+bwVDjptuamDmb/HJiuqpsNT3nv3rU3VsGiEEA+nAyWyW3DXbUlT9VIMxvK8u
LMPvrW3KFl5kC4AS8fxnGR0KnqcZFaHosZMdLrN7PqF1co3LBJHG4lWKGfS46jPe
HgJjncE1vRQgXzzA6MSV6sYR8ntiPK+eNAy81WEp59mJ/IwlRlRlARhjdCbZPBCJ
5W5UuC1TehUhbnmxq0JOufPw3XjbbYOVIYKT76jUMrvX6vSJJj0qmA6UswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENPLfE6ORNJzlufHV/YlAE3RO7VMB8GA1UdIwQY
MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt
MWZjMjU5YmI3ZGUyLzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy
LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmT/+MlP
4+XAREIUqXZnVYmO5gXoKOmw0HuXwutLsjhReORiGbeJ1JM8Luo4oGUtI1Exf5nN
m6dx+8+ukriQZOA2GL2vCCgYWYmFxoS2QlxAU5Wo9nXgqUbwvswlV7ypmnCd3xIY
dWtXsIFavnKwYotDZtNyXW+VUlsMvXnJBUFZI8mmHzwn56W9qkxqWCxS0iUu2myy
VV4UlGt5lru798Qx1fO8Ud+KwMsvqcvY2nShExtl7FKcEE00og9fOLqajqrrhsHG
U76JPO7Stl3KRvKNGOwnrNaINHFcUEspo66SijR8QxZI0m3FVJo8Cg8ghDzfneim
qrxZl89zkrRdXg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:58 2026 by rpki-client