Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: PZPPkQEIyyJZH+woIorO9DDHEvVxpE7N4r1BOb3p3Bc=
Subject key identifier: 27:31:FD:86:DD:7D:80:62:A8:5B:C5:52:6E:5D:35:09:28:7D:66:08
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019E1E35C9B4820349280F86F3FBF14430F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 14D2
Signing time: Tue 12 May 2026 22:01:41 +0000
Manifest this update: Tue 12 May 2026 22:01:41 +0000
Manifest next update: Wed 13 May 2026 22:01:41 +0000
Files and hashes: 1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: hx8rpoytxH6R+QclUgLyoo5s5zKMI/yhuC8cfN9FcJ0=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c9:b4:82:03:49:28:0f:86:f3:fb:f1:44:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: May 12 22:01:41 2026 GMT
Not After : May 13 22:01:41 2026 GMT
Subject: CN=2731fd86dd7d8062a85bc5526e5d3509287d6608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:b0:07:cb:fc:97:3c:29:9d:86:dd:a0:82:
62:1b:22:38:30:85:dd:ea:b7:8d:3b:fb:b2:74:b8:
43:c0:2f:5c:7a:3f:f2:2e:b3:19:9b:22:cb:87:09:
b8:1d:a8:e0:87:a0:d8:f7:c5:e3:ab:e7:7d:e0:18:
52:0b:54:fe:30:d8:ac:43:09:84:47:80:4b:31:da:
b7:f8:58:92:0b:66:4d:37:21:08:24:d4:04:98:32:
be:72:bc:c7:b1:16:c0:f8:4a:ab:a8:6a:cf:e4:cf:
f8:e4:d1:3e:7c:4a:6d:1d:bc:00:bf:ba:87:d5:a2:
3b:06:ee:71:69:3e:c2:4d:fb:cf:cc:4a:f9:03:1d:
35:9d:3d:7a:b6:d9:0c:96:bf:fd:0a:bd:88:de:41:
99:e9:89:79:70:af:d8:91:51:61:c7:ff:39:58:b7:
b2:56:e7:4d:96:e1:75:84:3f:d3:00:ac:ae:bb:20:
f7:94:9c:3f:2b:a0:d6:6d:5f:2f:4f:96:e4:d0:50:
13:67:63:7c:32:1f:c3:a1:a8:c3:bf:f6:d4:8a:0d:
32:24:2d:e9:a8:c6:71:31:ab:8a:59:4c:9f:20:56:
91:09:eb:29:52:cf:9f:a3:d7:78:24:96:ba:ec:f4:
1f:fe:d9:c5:30:62:9d:fa:1f:27:e2:a0:95:86:c6:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:FD:86:DD:7D:80:62:A8:5B:C5:52:6E:5D:35:09:28:7D:66:08
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2e:2d:12:b9:d2:b4:bf:0d:78:33:71:1e:a2:0b:9b:f6:2c:
60:9f:29:fa:94:53:11:cc:6f:eb:08:ad:b7:6c:f9:c8:64:f7:
ee:71:30:66:e4:18:1f:c0:d2:c1:de:ec:fa:82:08:f5:9a:ae:
e8:26:a9:cb:02:40:7b:87:b4:db:f5:0e:18:8d:41:ae:c6:10:
df:e4:16:59:b8:29:99:ff:1b:e3:ca:73:da:1c:e4:3b:d5:f7:
10:20:04:db:a6:4d:01:51:68:aa:2e:a3:14:6d:00:18:a6:93:
2d:93:44:fc:6d:b1:e4:f2:4b:4d:dd:25:e6:10:90:8e:73:9a:
5f:f4:09:79:dc:22:ca:3f:a6:5e:04:53:d3:71:16:c0:46:fb:
3e:f5:83:86:8e:d5:94:b8:70:fa:f1:7f:9a:26:70:d4:32:37:
75:c9:d6:22:f7:3c:5d:62:ca:13:ba:ba:ea:43:bd:8e:92:30:
8d:7a:0f:ef:b5:73:0e:f7:d1:0f:a8:59:26:dd:ff:f2:b1:aa:
6c:93:b7:b1:b8:91:80:ba:39:d3:1a:21:ff:f9:5d:b6:92:11:
67:31:c0:b9:3d:ad:c3:5f:4c:29:7e:cc:8f:cf:ee:09:35:45:
5c:ce:67:a7:2a:b8:91:04:19:b3:8a:78:3b:8a:c7:1d:0a:be:
39:60:b9:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNcm0ggNJKA+G8/vxRDD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx
ZDc2NzQwHhcNMjYwNTEyMjIwMTQxWhcNMjYwNTEzMjIwMTQxWjAzMTEwLwYDVQQD
EygyNzMxZmQ4NmRkN2Q4MDYyYTg1YmM1NTI2ZTVkMzUwOTI4N2Q2NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoewB8v8lzwpnYbdoIJiGyI4MIXd
6reNO/uydLhDwC9cej/yLrMZmyLLhwm4Hajgh6DY98Xjq+d94BhSC1T+MNisQwmE
R4BLMdq3+FiSC2ZNNyEIJNQEmDK+crzHsRbA+EqrqGrP5M/45NE+fEptHbwAv7qH
1aI7Bu5xaT7CTfvPzEr5Ax01nT16ttkMlr/9Cr2I3kGZ6Yl5cK/YkVFhx/85WLey
VudNluF1hD/TAKyuuyD3lJw/K6DWbV8vT5bk0FATZ2N8Mh/DoajDv/bUig0yJC3p
qMZxMauKWUyfIFaRCespUs+fo9d4JJa67PQf/tnFMGKd+h8n4qCVhsaj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcx/YbdfYBiqFvFUm5dNQkofWYIMB8GA1UdIwQY
MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt
ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj
LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwy4tErnS
tL8NeDNxHqILm/YsYJ8p+pRTEcxv6witt2z5yGT37nEwZuQYH8DSwd7s+oII9Zqu
6CapywJAe4e02/UOGI1BrsYQ3+QWWbgpmf8b48pz2hzkO9X3ECAE26ZNAVFoqi6j
FG0AGKaTLZNE/G2x5PJLTd0l5hCQjnOaX/QJedwiyj+mXgRT03EWwEb7PvWDho7V
lLhw+vF/miZw1DI3dcnWIvc8XWLKE7q66kO9jpIwjXoP77VzDvfRD6hZJt3/8rGq
bJO3sbiRgLo50xoh//ldtpIRZzHAuT2tw19MKX7Mj8/uCTVFXM5npyq4kQQZs4p4
O4rHHQq+OWC5qQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:07 2026 by rpki-client