Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: MGBtlwG9Ql1cl5YtE6r070LQacJaXtw8XdLwk6aJLUM=
Subject key identifier: 21:D9:8A:F5:39:60:2E:CF:81:EE:68:8D:AC:FC:47:A2:17:62:1F:F0
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019E1EA30710EF7A7F8EFA1314B45918E22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 10CC
Signing time: Wed 13 May 2026 00:01:00 +0000
Manifest this update: Wed 13 May 2026 00:01:00 +0000
Manifest next update: Thu 14 May 2026 00:01:00 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: X/oJOy8sFTIPZ8e0oLe3G3av38xTwggiUtmS9/nfV/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:07:10:ef:7a:7f:8e:fa:13:14:b4:59:18:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: May 13 00:01:00 2026 GMT
Not After : May 14 00:01:00 2026 GMT
Subject: CN=21d98af539602ecf81ee688dacfc47a217621ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:01:1b:96:76:24:d7:52:8f:71:be:59:8a:
10:77:dd:df:06:2f:da:2a:30:f7:30:2c:fc:a8:73:
5f:e0:9c:be:77:e0:b7:75:ec:6e:55:93:87:db:c2:
74:19:ec:fe:55:66:95:7c:52:c0:a6:e4:2d:3b:ba:
a7:34:78:43:60:5a:9c:08:ba:f6:76:41:5b:92:95:
44:ad:1f:e3:30:05:e8:d1:3c:10:9e:fb:d9:f5:48:
02:c0:d4:e8:f6:b2:63:95:ec:54:de:59:8c:db:80:
29:39:c1:e9:b6:df:0e:1d:de:38:4f:05:ca:75:e7:
d1:8e:9d:44:dc:08:82:9a:94:00:bb:5e:de:82:0d:
19:7d:77:7b:00:34:7b:a5:1b:98:9f:04:c5:9a:f3:
e9:71:3c:97:b5:e7:4e:40:f2:76:d0:e4:03:17:ae:
5e:9f:66:ee:bc:ea:10:20:5a:e8:8e:d5:16:da:8c:
c3:28:8f:64:7a:d4:e3:f1:dd:d6:a0:e8:9b:4f:24:
97:ec:1b:ad:e6:32:60:40:b9:65:ee:4f:51:dd:08:
3d:9b:8f:eb:fc:86:5c:47:42:73:d6:6a:c0:8b:25:
da:2e:03:25:c4:6b:63:41:e4:bb:9b:f9:a4:b2:51:
6f:92:32:09:2f:46:32:79:89:a5:c9:45:85:a4:ac:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:8A:F5:39:60:2E:CF:81:EE:68:8D:AC:FC:47:A2:17:62:1F:F0
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:17:63:cc:83:c2:87:6d:69:3f:d0:ba:01:4d:50:48:93:
93:f4:d4:5e:d0:82:10:80:6c:c4:73:54:30:ea:bd:c4:7d:c6:
29:dc:98:31:cc:7a:b1:ab:78:e8:d4:e7:7e:5f:a9:a0:af:8c:
87:e5:54:ba:a6:a2:01:a6:69:b7:80:ca:54:cc:c5:bc:8b:b0:
23:dc:e9:fb:ae:e8:1e:51:be:9c:7d:3e:07:43:00:17:e8:a9:
f2:01:f5:e4:0b:f3:90:ee:0a:23:d0:97:e1:8c:9c:e8:70:f7:
ff:ff:51:df:46:7e:17:6b:39:ec:0c:96:6e:16:7e:06:af:87:
21:56:1a:f8:14:83:f1:30:aa:0a:14:8f:62:b8:8b:0c:4c:31:
a0:de:15:d1:c9:64:6f:3f:38:77:9c:bf:5f:83:03:72:de:96:
b2:d6:64:37:c1:e3:25:60:63:9e:de:14:62:29:97:8d:f3:07:
22:f6:52:f9:e1:32:98:b3:36:f4:0d:f2:88:01:33:cc:1d:c7:
05:22:38:1d:d4:0d:34:31:d0:5f:07:f8:1b:3f:ec:e3:99:be:
cf:ef:2a:b5:22:04:94:86:f0:a5:33:5c:e2:e2:2b:74:ba:a1:
f6:92:d1:c7:f7:fe:7e:15:12:ae:7c:71:e4:39:3c:17:14:ac:
3e:22:cc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowcQ73p/jvoTFLRZGOIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjYwNTEzMDAwMTAwWhcNMjYwNTE0MDAwMTAwWjAzMTEwLwYDVQQD
EygyMWQ5OGFmNTM5NjAyZWNmODFlZTY4OGRhY2ZjNDdhMjE3NjIxZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/sBG5Z2JNdSj3G+WYoQd93fBi/a
KjD3MCz8qHNf4Jy+d+C3dexuVZOH28J0Gez+VWaVfFLApuQtO7qnNHhDYFqcCLr2
dkFbkpVErR/jMAXo0TwQnvvZ9UgCwNTo9rJjlexU3lmM24ApOcHptt8OHd44TwXK
defRjp1E3AiCmpQAu17egg0ZfXd7ADR7pRuYnwTFmvPpcTyXtedOQPJ20OQDF65e
n2buvOoQIFrojtUW2ozDKI9ketTj8d3WoOibTySX7But5jJgQLll7k9R3Qg9m4/r
/IZcR0Jz1mrAiyXaLgMlxGtjQeS7m/mkslFvkjIJL0YyeYmlyUWFpKze8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHZivU5YC7Pge5ojaz8R6IXYh/wMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH0XY8yD
wodtaT/QugFNUEiTk/TUXtCCEIBsxHNUMOq9xH3GKdyYMcx6sat46NTnfl+poK+M
h+VUuqaiAaZpt4DKVMzFvIuwI9zp+67oHlG+nH0+B0MAF+ip8gH15AvzkO4KI9CX
4Yyc6HD3//9R30Z+F2s57AyWbhZ+Bq+HIVYa+BSD8TCqChSPYriLDEwxoN4V0clk
bz84d5y/X4MDct6WstZkN8HjJWBjnt4UYimXjfMHIvZS+eEymLM29A3yiAEzzB3H
BSI4HdQNNDHQXwf4Gz/s45m+z+8qtSIElIbwpTNc4uIrdLqh9pLRx/f+fhUSrnxx
5Dk8FxSsPiLMnQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:45:53 2026 by rpki-client