Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: Ysibg2ajK68vsVZH8U3tyaYzZbRcAjj+o5F/vMhPvLE=
Subject key identifier: 95:47:61:84:DD:45:68:D2:50:4D:83:80:90:47:D1:9C:FC:10:B6:4A
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019CAD903F1778EF5A094727BBB98728B829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1553
Signing time: Mon 02 Mar 2026 08:00:37 +0000
Manifest this update: Mon 02 Mar 2026 08:00:37 +0000
Manifest next update: Tue 03 Mar 2026 08:00:37 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: 2cQ2Py1ubeGfUteOzg6L2P/qfVzz9OE1LpsFgfz/awc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3f:17:78:ef:5a:09:47:27:bb:b9:87:28:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Mar 2 08:00:37 2026 GMT
Not After : Mar 3 08:00:37 2026 GMT
Subject: CN=95476184dd4568d2504d83809047d19cfc10b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:85:c7:bc:c0:9d:00:42:00:b2:03:35:0c:
94:03:e4:39:14:92:b9:6c:01:8b:0e:60:0c:fa:39:
25:b3:08:f2:71:4b:93:14:c9:16:bf:7e:68:b3:b9:
0c:41:c6:d5:cb:65:b8:8e:00:56:a6:d6:72:2b:80:
b7:a7:9a:53:a1:c4:28:4e:dc:6b:f4:db:25:21:c4:
27:77:e2:9c:9e:34:c2:dc:36:01:1b:3a:11:2d:9f:
98:e1:06:5a:3f:fc:1c:cd:8d:1d:c7:51:2f:b9:98:
a4:45:c2:10:d1:a8:54:9a:fa:7e:46:8a:aa:0d:8d:
e3:a7:8d:9d:97:f8:df:70:f5:93:12:c4:3b:b5:9d:
2d:1c:cf:52:8c:ca:d4:3a:10:43:91:eb:fc:f1:1a:
2e:8b:e2:b7:c0:22:6f:32:6a:75:3e:f3:1b:a7:11:
11:dc:3f:10:a7:6b:7a:7d:7f:00:1c:b0:2d:e3:00:
b8:bf:20:58:84:4d:fb:ea:4d:7a:51:0f:1a:51:30:
da:74:ff:9d:7a:eb:de:80:e5:68:97:07:50:69:1f:
f4:ef:84:ee:ec:ee:ca:a2:a4:38:74:ce:3d:a0:4e:
b4:f7:02:c3:72:0d:26:c7:b4:a0:09:a1:f7:53:ee:
9b:11:09:f7:97:3c:73:31:f9:b3:5f:32:88:b6:04:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:61:84:DD:45:68:D2:50:4D:83:80:90:47:D1:9C:FC:10:B6:4A
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:9a:1c:91:fe:1b:c7:fe:2d:32:f1:5a:94:d8:6c:7c:c0:
be:8f:0c:b8:5a:e9:46:d4:b1:be:7e:69:00:09:dd:27:09:48:
c6:27:a0:1f:be:8f:17:3c:12:13:9a:15:e6:72:cc:58:35:c7:
d9:da:a1:60:09:6f:1f:6b:a2:ef:95:ee:d8:e5:76:7e:20:f4:
df:4d:43:0d:42:ba:e3:7a:63:7c:87:d3:5c:1d:01:95:f5:27:
5e:86:7c:f4:4f:bb:3a:a3:e1:e0:d0:b9:fd:10:a5:8d:43:3f:
12:44:b0:1e:6b:89:34:c5:90:98:cc:6c:b8:d4:2b:ad:dd:d7:
51:b2:e9:4f:21:fa:7e:4d:b1:e4:eb:22:31:3b:6c:76:98:37:
78:f6:a0:78:24:39:26:e6:ac:c1:a6:99:aa:f0:b8:c0:ee:e8:
dc:78:61:a4:54:27:18:80:b7:18:df:6c:8f:14:ef:ef:f9:ee:
95:19:19:1f:ea:67:33:40:5f:8c:7b:14:56:f8:6c:e6:30:cb:
01:83:89:b4:77:b4:e0:a4:f1:46:63:e7:7a:1d:45:46:a6:5f:
94:2b:18:24:fe:13:98:db:b5:b8:a9:7a:8d:c3:6e:be:60:14:
3b:56:e2:e7:0d:4c:6a:73:89:7d:4c:3c:18:ce:31:46:18:f5:
36:3e:44:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkD8XeO9aCUcnu7mHKLgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj
OTc3ZDgwHhcNMjYwMzAyMDgwMDM3WhcNMjYwMzAzMDgwMDM3WjAzMTEwLwYDVQQD
Eyg5NTQ3NjE4NGRkNDU2OGQyNTA0ZDgzODA5MDQ3ZDE5Y2ZjMTBiNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8eFx7zAnQBCALIDNQyUA+Q5FJK5
bAGLDmAM+jklswjycUuTFMkWv35os7kMQcbVy2W4jgBWptZyK4C3p5pTocQoTtxr
9NslIcQnd+KcnjTC3DYBGzoRLZ+Y4QZaP/wczY0dx1EvuZikRcIQ0ahUmvp+Roqq
DY3jp42dl/jfcPWTEsQ7tZ0tHM9SjMrUOhBDkev88Roui+K3wCJvMmp1PvMbpxER
3D8Qp2t6fX8AHLAt4wC4vyBYhE376k16UQ8aUTDadP+deuvegOVolwdQaR/074Tu
7O7KoqQ4dM49oE609wLDcg0mx7SgCaH3U+6bEQn3lzxzMfmzXzKItgRGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVHYYTdRWjSUE2DgJBH0Zz8ELZKMB8GA1UdIwQY
MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt
YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi
LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6maHJH+
G8f+LTLxWpTYbHzAvo8MuFrpRtSxvn5pAAndJwlIxiegH76PFzwSE5oV5nLMWDXH
2dqhYAlvH2ui75Xu2OV2fiD0301DDUK643pjfIfTXB0BlfUnXoZ89E+7OqPh4NC5
/RCljUM/EkSwHmuJNMWQmMxsuNQrrd3XUbLpTyH6fk2x5OsiMTtsdpg3ePageCQ5
JuaswaaZqvC4wO7o3HhhpFQnGIC3GN9sjxTv7/nulRkZH+pnM0BfjHsUVvhs5jDL
AYOJtHe04KTxRmPneh1FRqZflCsYJP4TmNu1uKl6jcNuvmAUO1bi5w1ManOJfUw8
GM4xRhj1Nj5EKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:57 2026 by rpki-client