Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: NNeFunpsYSBCUpYJRYGTvIi/Tf4ysvMTxkt1+Vv/4Nk=
Subject key identifier: 63:E9:D5:03:E2:2C:82:AD:34:C1:2B:81:16:3C:71:3A:D5:E4:85:78
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019E20C84F1A647B29B466ACDB7ACB80A179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:00:58 +0000
Manifest this update: Wed 13 May 2026 10:00:58 +0000
Manifest next update: Thu 14 May 2026 10:00:58 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: mXEEfGJDkmhfMlRU2ewreZwiZdYw3toEu3vubB3ULXA=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:4f:1a:64:7b:29:b4:66:ac:db:7a:cb:80:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: May 13 10:00:58 2026 GMT
Not After : May 14 10:00:58 2026 GMT
Subject: CN=63e9d503e22c82ad34c12b81163c713ad5e48578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:b3:c0:d2:25:a6:b0:46:3c:79:f2:c0:db:
cb:59:75:de:85:d1:52:59:0f:54:1a:48:21:f3:b6:
4c:26:81:9d:2e:e5:72:0d:6e:7b:34:45:89:83:0d:
ba:0b:29:2d:30:dd:6a:28:b8:e0:48:67:01:7e:a1:
28:ba:f1:9c:f0:e3:14:34:01:2b:5e:51:d3:21:fc:
05:7c:f6:6f:eb:14:95:3e:8c:67:72:4a:61:7c:dc:
68:65:0d:97:1c:65:e6:cf:0d:c4:df:f3:10:d0:65:
a6:d1:90:8c:57:66:e6:d2:9c:c7:07:6c:41:56:2f:
a8:3f:57:75:1a:8d:94:7c:78:6a:db:a0:d3:e9:48:
63:37:83:21:83:42:8b:f7:cc:9f:38:3c:c3:3a:14:
50:c0:ff:df:49:5f:b7:bb:af:e3:36:e3:2c:dc:dc:
a4:83:b4:ab:e5:da:d4:8e:c4:5b:bb:f7:a0:3b:47:
a8:11:53:3a:0b:fd:6f:38:13:1d:ef:60:7c:5c:b0:
05:62:ea:79:90:a6:ea:d5:f7:76:e3:a2:8c:8c:15:
82:43:af:9d:68:5d:bf:d7:91:d4:39:23:31:81:2e:
ae:76:0c:aa:54:17:fe:aa:96:e1:88:2f:31:bb:67:
1f:83:a3:e2:f0:1c:35:9c:1d:82:66:22:4d:c2:39:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:D5:03:E2:2C:82:AD:34:C1:2B:81:16:3C:71:3A:D5:E4:85:78
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:92:63:b5:2b:8d:8a:9e:87:f0:d1:d8:7d:c8:c4:5f:9a:bd:
6c:b6:ed:80:8d:93:1a:9c:29:65:3a:a8:21:07:5c:be:f2:be:
ac:47:84:24:0f:ef:a8:7a:81:56:76:b4:67:47:ee:7f:65:0e:
08:e7:6f:89:53:cf:0d:71:09:3c:f2:21:30:51:ed:42:56:79:
41:6e:5e:e8:68:d7:3b:1e:c8:f9:ef:d2:81:bb:1a:e6:f3:de:
be:b4:78:7b:20:e2:26:8d:f1:14:3f:6c:1b:b1:5f:f9:ac:29:
89:14:0d:6f:a1:8c:be:c5:0e:75:da:b3:9c:f4:df:99:29:22:
32:1e:ce:0e:39:70:37:1a:41:43:d1:df:d1:e8:25:e0:33:70:
3d:ea:dd:6c:8b:bd:c9:f3:ac:56:3a:09:33:b4:0c:5c:d0:5b:
ac:71:f9:a9:32:04:2e:e0:a9:b7:b3:c8:2c:5e:3f:c4:ef:53:
db:e3:0a:03:c9:61:7d:b5:67:99:dc:67:fd:00:73:82:2c:f3:
18:2e:e4:9b:a2:00:bc:ba:09:e3:1a:28:e2:5b:a7:71:90:7b:
b3:6a:44:73:e4:cd:88:f9:7c:5c:8f:25:2b:0a:ba:c5:ae:f0:
23:1f:fa:cd:a7:ba:46:58:72:1b:52:18:4f:82:c8:81:cf:3f:
76:50:fe:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyE8aZHsptGas23rLgKF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjYwNTEzMTAwMDU4WhcNMjYwNTE0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2M2U5ZDUwM2UyMmM4MmFkMzRjMTJiODExNjNjNzEzYWQ1ZTQ4NTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbCzwNIlprBGPHnywNvLWXXehdFS
WQ9UGkgh87ZMJoGdLuVyDW57NEWJgw26CyktMN1qKLjgSGcBfqEouvGc8OMUNAEr
XlHTIfwFfPZv6xSVPoxnckphfNxoZQ2XHGXmzw3E3/MQ0GWm0ZCMV2bm0pzHB2xB
Vi+oP1d1Go2UfHhq26DT6UhjN4Mhg0KL98yfODzDOhRQwP/fSV+3u6/jNuMs3Nyk
g7Sr5drUjsRbu/egO0eoEVM6C/1vOBMd72B8XLAFYup5kKbq1fd246KMjBWCQ6+d
aF2/15HUOSMxgS6udgyqVBf+qpbhiC8xu2cfg6Pi8Bw1nB2CZiJNwjkr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPp1QPiLIKtNMErgRY8cTrV5IV4MB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJJjtSuN
ip6H8NHYfcjEX5q9bLbtgI2TGpwpZTqoIQdcvvK+rEeEJA/vqHqBVna0Z0fuf2UO
COdviVPPDXEJPPIhMFHtQlZ5QW5e6GjXOx7I+e/Sgbsa5vPevrR4eyDiJo3xFD9s
G7Ff+awpiRQNb6GMvsUOddqznPTfmSkiMh7ODjlwNxpBQ9Hf0egl4DNwPerdbIu9
yfOsVjoJM7QMXNBbrHH5qTIELuCpt7PILF4/xO9T2+MKA8lhfbVnmdxn/QBzgizz
GC7km6IAvLoJ4xoo4luncZB7s2pEc+TNiPl8XI8lKwq6xa7wIx/6zae6RlhyG1IY
T4LIgc8/dlD+2A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:17 2026 by rpki-client