Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: AO1wzo/Zdz7bWl9iTXPBrImHbtJAyPzf81izVreADTA=
Subject key identifier: 5A:16:32:33:8F:DE:06:80:D8:95:F6:A0:50:A9:63:F7:D8:E4:66:55
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019E1CEB6CF6D47B3FC9279C8232B73D77D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 088A
Signing time: Tue 12 May 2026 16:00:51 +0000
Manifest this update: Tue 12 May 2026 16:00:51 +0000
Manifest next update: Wed 13 May 2026 16:00:51 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: T5Kob374bpc+9HYhXx4Zz3kZNYJLaAJGOY1viBqkOcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:6c:f6:d4:7b:3f:c9:27:9c:82:32:b7:3d:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: May 12 16:00:51 2026 GMT
Not After : May 13 16:00:51 2026 GMT
Subject: CN=5a1632338fde0680d895f6a050a963f7d8e46655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:50:22:6c:80:fc:29:b9:98:c9:45:4c:16:
85:c6:44:4e:e4:b0:4d:a4:81:a2:cf:5d:7d:3b:79:
a4:3e:04:b7:d8:f6:3b:b9:60:5b:d4:83:53:b0:85:
78:26:89:48:ef:f1:42:70:9e:5a:5b:9c:cc:91:67:
3f:bb:16:93:88:36:f9:fc:8b:e8:29:a0:9c:71:b0:
ac:20:a4:fc:51:b0:1f:62:b6:a3:d8:4b:87:21:03:
b7:27:48:f9:53:d2:39:63:9d:59:05:24:ec:f2:e2:
c3:fb:c4:d7:eb:eb:87:5c:5a:23:46:89:b9:c8:dc:
93:36:39:eb:4d:16:1a:96:21:80:bc:68:66:9f:3c:
b4:7e:91:1f:64:3e:6a:83:9b:61:5d:ec:08:6e:b9:
db:f8:91:77:bc:4d:d7:97:11:9c:1a:d2:93:7c:83:
73:b0:54:c1:42:0d:c1:cc:93:e6:8e:ea:28:de:6b:
5a:02:8d:26:22:44:1f:c3:ed:ef:7a:a3:0e:f8:c1:
dc:ec:54:38:51:41:84:32:0d:ca:95:73:b3:a0:55:
c1:89:3c:42:7f:0f:7a:f2:ba:cd:95:72:68:d4:ed:
0a:e3:5a:dc:2b:1f:aa:e2:7e:6d:69:b0:ba:4a:b1:
b2:6a:c9:0e:66:66:67:a5:56:b0:1a:18:0b:91:a6:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:32:33:8F:DE:06:80:D8:95:F6:A0:50:A9:63:F7:D8:E4:66:55
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:50:dd:11:45:3e:6a:71:79:e4:0b:3a:0d:97:66:fa:10:d0:
c5:03:00:f5:17:f8:71:47:1d:d4:de:60:b2:c8:bd:3b:00:a2:
cd:26:24:9d:e3:b4:2b:31:e8:4e:36:5a:70:86:f9:c0:1f:4a:
c2:15:3c:74:1b:0d:94:63:5a:c6:86:68:2d:e6:7c:44:59:de:
80:a1:d9:96:9c:09:c0:e2:59:7c:c4:71:7c:96:e8:29:a2:d3:
a5:0d:61:aa:59:32:66:58:74:72:6c:24:30:dc:8e:f0:dd:e3:
a2:96:3e:cc:ba:2e:84:43:6c:a6:97:50:9b:65:66:59:83:2e:
5b:06:7d:27:70:31:94:a1:2a:64:db:fd:9e:c2:aa:cc:12:18:
d1:bd:d8:87:06:19:fa:4e:b4:08:aa:25:31:f4:d6:1e:e1:2a:
f6:20:49:8f:f5:7e:ee:9c:12:44:ab:32:38:7c:e7:5e:55:1e:
8d:c0:80:85:d9:f9:b8:e2:e9:de:45:81:92:47:a5:fa:b2:ac:
8e:f7:7e:14:bd:32:62:0c:71:7b:06:02:2c:ff:7d:8c:65:55:
d4:29:c4:9c:2e:32:53:31:cb:56:d7:df:af:53:d0:23:85:74:
a1:2f:cf:af:a6:5c:66:5a:f5:0c:a6:69:e3:50:70:97:fa:d2:
3d:84:9d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c62z21Hs/ySecgjK3PXfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjYwNTEyMTYwMDUxWhcNMjYwNTEzMTYwMDUxWjAzMTEwLwYDVQQD
Eyg1YTE2MzIzMzhmZGUwNjgwZDg5NWY2YTA1MGE5NjNmN2Q4ZTQ2NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPxQImyA/Cm5mMlFTBaFxkRO5LBN
pIGiz119O3mkPgS32PY7uWBb1INTsIV4JolI7/FCcJ5aW5zMkWc/uxaTiDb5/Ivo
KaCccbCsIKT8UbAfYraj2EuHIQO3J0j5U9I5Y51ZBSTs8uLD+8TX6+uHXFojRom5
yNyTNjnrTRYaliGAvGhmnzy0fpEfZD5qg5thXewIbrnb+JF3vE3XlxGcGtKTfINz
sFTBQg3BzJPmjuoo3mtaAo0mIkQfw+3veqMO+MHc7FQ4UUGEMg3KlXOzoFXBiTxC
fw968rrNlXJo1O0K41rcKx+q4n5tabC6SrGyaskOZmZnpVawGhgLkabtnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoWMjOP3gaA2JX2oFCpY/fY5GZVMB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVDdEUU+
anF55As6DZdm+hDQxQMA9Rf4cUcd1N5gssi9OwCizSYkneO0KzHoTjZacIb5wB9K
whU8dBsNlGNaxoZoLeZ8RFnegKHZlpwJwOJZfMRxfJboKaLTpQ1hqlkyZlh0cmwk
MNyO8N3jopY+zLouhENsppdQm2VmWYMuWwZ9J3AxlKEqZNv9nsKqzBIY0b3YhwYZ
+k60CKolMfTWHuEq9iBJj/V+7pwSRKsyOHznXlUejcCAhdn5uOLp3kWBkkel+rKs
jvd+FL0yYgxxewYCLP99jGVV1CnEnC4yUzHLVtffr1PQI4V0oS/Pr6ZcZlr1DKZp
41Bwl/rSPYSd5A==
-----END CERTIFICATE-----
Generated at Wed May 13 01:20:50 2026 by rpki-client