Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: I/FObLvSLYzKuahLwjFZeBTVMyjcwkkyN2zq/rvrg0o=
Subject key identifier: 5E:78:1B:0D:5C:C3:0F:19:30:6E:47:BB:D0:F6:98:FB:86:07:63:E0
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019E1D90858C597C353FF9CA0A51E5EF4408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0C3B
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: cgkPbZhSDpqOIz2MqZEFUhpTDjFGmN0l1L7RH7oxxfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:85:8c:59:7c:35:3f:f9:ca:0a:51:e5:ef:44:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=5e781b0d5cc30f19306e47bbd0f698fb860763e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:af:a6:8f:f8:62:98:a7:d0:4a:b5:e0:9a:
47:f2:fd:79:87:27:5b:fd:9e:ab:21:29:ea:30:e9:
be:94:af:5b:74:70:78:3e:b4:56:55:09:21:ad:d2:
7b:b5:b4:e8:13:e6:18:b9:5c:14:51:2d:24:b4:68:
34:ae:ea:49:c0:32:e2:41:55:76:23:bf:03:bf:5b:
95:52:0a:4c:43:c5:b5:2d:e0:41:d2:5c:10:b4:c4:
18:f3:f8:5d:9d:08:f6:81:9c:3b:da:43:32:d2:64:
1f:78:28:ea:8b:65:90:40:38:e8:01:32:4d:90:6d:
82:76:99:2f:6d:85:75:e3:d8:d0:76:e7:38:65:0d:
78:72:d8:85:08:24:99:a4:54:ea:ed:31:e4:fe:15:
af:51:88:d9:73:fa:5c:d5:8e:c0:aa:4b:19:51:ed:
76:6f:f6:f5:06:c5:df:06:24:37:0d:53:ee:47:c4:
0d:35:11:d8:07:3e:14:c9:c9:6a:75:15:16:32:3b:
0c:a4:b4:7f:2a:0f:ab:47:c1:fb:9c:fd:b6:b0:23:
73:64:bc:58:94:0c:a9:25:83:0c:63:2d:56:7a:10:
fa:3d:43:8c:16:90:87:e4:48:76:58:bf:16:2c:7e:
df:35:14:43:61:81:1b:d8:f6:c5:50:00:cd:dc:12:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:1B:0D:5C:C3:0F:19:30:6E:47:BB:D0:F6:98:FB:86:07:63:E0
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:a8:b7:24:56:5a:62:6c:9c:a2:28:51:68:3a:41:3e:c1:
76:74:71:65:6f:ae:63:dc:d5:41:fa:0d:f0:e5:96:2a:e9:11:
2a:2e:c7:3b:54:a9:f2:a5:ac:7c:b6:97:4d:68:e4:f4:52:86:
95:4f:dd:70:2b:58:10:49:19:47:09:0c:5e:04:8e:c7:9e:94:
ea:94:57:3a:ec:8a:8c:82:a0:32:f0:ae:3e:a9:d4:ac:62:f0:
fa:13:cc:c5:f6:f7:78:74:e6:d6:53:79:2b:12:11:57:0b:f4:
b8:37:ef:15:8a:32:d5:73:4d:23:2f:f7:60:5f:e0:f6:e1:78:
33:fd:d3:49:b0:36:fd:6f:3f:40:21:1b:e7:e5:c8:34:6f:b6:
11:96:2f:79:c1:16:bc:51:05:53:6b:16:bc:68:90:61:f0:d7:
bc:e8:1e:f6:55:c9:b8:d0:ab:21:41:4d:e6:76:e7:8c:0c:21:
e4:3f:ff:ca:3e:2f:6c:8f:a4:c9:eb:be:42:e2:35:85:89:fd:
80:f4:1e:5e:8d:14:75:6a:c9:b4:87:20:ca:91:e1:4b:d9:14:
33:54:62:39:ca:6f:c6:23:c8:b5:f1:33:1d:d5:b7:a8:84:3c:
b0:ee:ec:28:30:05:5c:8a:a5:77:50:01:bc:88:9f:51:f8:64:
43:a8:61:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIWMWXw1P/nKClHl70QIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjYwNTEyMTkwMTEwWhcNMjYwNTEzMTkwMTEwWjAzMTEwLwYDVQQD
Eyg1ZTc4MWIwZDVjYzMwZjE5MzA2ZTQ3YmJkMGY2OThmYjg2MDc2M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Ovpo/4Ypin0Eq14JpH8v15hydb
/Z6rISnqMOm+lK9bdHB4PrRWVQkhrdJ7tbToE+YYuVwUUS0ktGg0rupJwDLiQVV2
I78Dv1uVUgpMQ8W1LeBB0lwQtMQY8/hdnQj2gZw72kMy0mQfeCjqi2WQQDjoATJN
kG2CdpkvbYV149jQduc4ZQ14ctiFCCSZpFTq7THk/hWvUYjZc/pc1Y7AqksZUe12
b/b1BsXfBiQ3DVPuR8QNNRHYBz4UyclqdRUWMjsMpLR/Kg+rR8H7nP22sCNzZLxY
lAypJYMMYy1WehD6PUOMFpCH5Eh2WL8WLH7fNRRDYYEb2PbFUADN3BJC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF54Gw1cww8ZMG5Hu9D2mPuGB2PgMB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZiotyRW
WmJsnKIoUWg6QT7BdnRxZW+uY9zVQfoN8OWWKukRKi7HO1Sp8qWsfLaXTWjk9FKG
lU/dcCtYEEkZRwkMXgSOx56U6pRXOuyKjIKgMvCuPqnUrGLw+hPMxfb3eHTm1lN5
KxIRVwv0uDfvFYoy1XNNIy/3YF/g9uF4M/3TSbA2/W8/QCEb5+XING+2EZYvecEW
vFEFU2sWvGiQYfDXvOge9lXJuNCrIUFN5nbnjAwh5D//yj4vbI+kyeu+QuI1hYn9
gPQeXo0UdWrJtIcgypHhS9kUM1RiOcpvxiPItfEzHdW3qIQ8sO7sKDAFXIqld1AB
vIifUfhkQ6hhyg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:16 2026 by rpki-client