Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: dSKwHzgH6isU2fpzy58oC7mv5owiA4j4QaJgb9UhlBo=
Subject key identifier: 69:A0:09:58:DD:F1:B9:F3:7F:29:53:7F:B3:7D:34:B7:F2:6E:66:C2
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019CAB6B6614C11CAA49269FD593DF3AC4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=)
2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: N9WD5Vk89H3Lx/R1ZqHr8YRXWsujrzYJLKtgjYddvic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:66:14:c1:1c:aa:49:26:9f:d5:93:df:3a:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=69a00958ddf1b9f37f29537fb37d34b7f26e66c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:55:fb:69:c3:67:35:27:ed:4d:88:6c:82:
40:ef:ef:a9:02:a1:de:e1:5c:92:f8:be:e0:79:f4:
2c:b8:08:7d:82:c8:c1:09:7a:bd:04:83:a6:de:62:
c6:64:40:4d:3c:87:46:7c:d3:fa:94:34:61:bb:7c:
c8:47:51:16:ec:ee:6f:5a:aa:16:b4:6b:ac:b6:1f:
65:3c:ca:1c:05:3f:90:3d:a3:8f:67:44:a9:22:82:
1f:9c:96:9c:06:4e:be:86:74:d4:3f:ae:56:36:10:
d9:b8:9b:eb:23:ac:61:59:71:43:c6:42:78:7b:79:
e9:d1:8a:24:53:49:50:07:b2:d4:7d:f3:1c:52:75:
05:8b:49:69:06:4e:7a:25:01:50:38:78:f3:dc:c4:
58:b7:37:d5:05:58:6a:d0:27:1e:6f:ff:47:72:0c:
c2:92:e8:37:d6:19:cb:f3:fe:4d:2c:d9:34:49:fb:
93:25:f6:1d:53:5e:ef:99:db:c7:ff:af:e6:3e:ed:
64:f9:7d:c6:e6:65:ff:44:37:66:ad:cd:8e:0c:59:
cf:3f:e2:f9:24:6a:7f:a5:89:4b:20:85:4d:96:bf:
a7:65:b7:a3:df:f1:f9:c6:a2:fd:85:f9:8b:1a:28:
78:f2:9f:d6:6a:42:12:92:d6:a0:cc:5f:1e:5e:d8:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:09:58:DD:F1:B9:F3:7F:29:53:7F:B3:7D:34:B7:F2:6E:66:C2
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:6d:29:16:0f:eb:cb:5a:c0:67:f8:46:8b:80:9e:26:cd:30:
59:50:f5:14:87:11:5d:70:c8:98:5c:60:0f:c4:c2:52:64:9d:
43:09:63:ba:1e:4b:21:c7:0e:87:a9:88:d6:9e:ef:b7:7c:2a:
6a:61:66:88:23:f3:13:dc:cc:03:9a:09:35:2b:fe:27:7a:12:
8f:18:14:99:f4:01:16:b2:90:0d:7d:6b:02:1f:44:e7:4d:20:
e4:35:41:18:b7:a1:1f:84:6f:2a:3c:f1:48:10:c0:68:26:a9:
93:95:91:b7:6f:73:c6:67:7e:c3:8c:88:77:6b:65:58:ff:43:
c8:3a:33:44:39:a2:0f:91:c9:c3:6f:34:5f:3c:fc:54:ca:1c:
b5:ad:41:49:32:28:bb:d9:a9:7d:96:94:f3:d1:c8:56:93:2a:
28:73:89:24:7f:f7:10:08:e2:1d:17:c7:32:2c:00:ba:e7:88:
e0:73:68:2e:a3:2a:03:79:0d:1d:32:4e:a2:3f:33:3a:43:fc:
ff:62:34:06:11:b6:78:48:42:37:60:57:d6:c1:20:4e:c5:49:
d8:b0:01:27:a1:25:f1:66:10:8a:2b:a1:92:72:ba:eb:74:cc:
22:01:ae:52:1b:11:20:55:2d:35:98:b8:e9:ee:fe:ac:c0:ca:
3c:f5:ed:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2YUwRyqSSaf1ZPfOsT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk
YmFjYmEwHhcNMjYwMzAxMjIwMTA4WhcNMjYwMzAyMjIwMTA4WjAzMTEwLwYDVQQD
Eyg2OWEwMDk1OGRkZjFiOWYzN2YyOTUzN2ZiMzdkMzRiN2YyNmU2NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszVV+2nDZzUn7U2IbIJA7++pAqHe
4VyS+L7gefQsuAh9gsjBCXq9BIOm3mLGZEBNPIdGfNP6lDRhu3zIR1EW7O5vWqoW
tGusth9lPMocBT+QPaOPZ0SpIoIfnJacBk6+hnTUP65WNhDZuJvrI6xhWXFDxkJ4
e3np0YokU0lQB7LUffMcUnUFi0lpBk56JQFQOHjz3MRYtzfVBVhq0Cceb/9HcgzC
kug31hnL8/5NLNk0SfuTJfYdU17vmdvH/6/mPu1k+X3G5mX/RDdmrc2ODFnPP+L5
JGp/pYlLIIVNlr+nZbej3/H5xqL9hfmLGih48p/WakISktagzF8eXtjnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmgCVjd8bnzfylTf7N9NLfybmbCMB8GA1UdIwQY
MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct
MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy
LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA120pFg/r
y1rAZ/hGi4CeJs0wWVD1FIcRXXDImFxgD8TCUmSdQwljuh5LIccOh6mI1p7vt3wq
amFmiCPzE9zMA5oJNSv+J3oSjxgUmfQBFrKQDX1rAh9E500g5DVBGLehH4RvKjzx
SBDAaCapk5WRt29zxmd+w4yId2tlWP9DyDozRDmiD5HJw280Xzz8VMocta1BSTIo
u9mpfZaU89HIVpMqKHOJJH/3EAjiHRfHMiwAuueI4HNoLqMqA3kNHTJOoj8zOkP8
/2I0BhG2eEhCN2BX1sEgTsVJ2LABJ6El8WYQiiuhknK663TMIgGuUhsRIFUtNZi4
6e7+rMDKPPXt1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:44 2026 by rpki-client