Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: UkSMLYMZ/acCmEiOaYJ9Qu3tiiQRdsFN8jw64iQKGl4=
Subject key identifier: 44:A6:50:BF:42:EB:5C:6F:A9:1A:CF:46:21:43:6A:92:06:C1:98:7D
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019E1F481816CEED2810206E556E1AD8E2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0958
Signing time: Wed 13 May 2026 03:01:18 +0000
Manifest this update: Wed 13 May 2026 03:01:18 +0000
Manifest next update: Thu 14 May 2026 03:01:18 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: F21VKlDpTaXu4saXxs9XVQDxNKAm7sDWXvUFarALrnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:18:16:ce:ed:28:10:20:6e:55:6e:1a:d8:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: May 13 03:01:18 2026 GMT
Not After : May 14 03:01:18 2026 GMT
Subject: CN=44a650bf42eb5c6fa91acf4621436a9206c1987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:69:e3:40:e8:ef:94:48:19:d5:8f:24:79:
dc:2e:49:6a:79:6a:23:01:3e:e7:e5:91:f4:6c:69:
d8:84:00:e9:e7:ee:c0:1f:78:bd:f9:b6:fa:15:80:
ba:67:d5:8e:ab:7e:00:d1:64:d1:e9:40:88:65:ff:
dc:0f:06:88:ca:50:30:59:18:fc:88:87:b8:fe:b8:
dc:8b:15:71:08:04:a5:4d:aa:15:95:75:95:b5:18:
ca:72:b3:5d:a7:14:ed:7d:c9:b4:a5:c5:d3:c8:81:
e7:6b:06:2f:b7:e3:55:3c:98:48:24:e4:af:99:15:
ee:55:5e:3b:b9:c1:de:1c:d5:79:4d:e3:a2:37:9e:
3c:de:80:69:b7:c4:ac:72:8a:9f:d6:4a:8d:b9:88:
d8:5a:8c:0a:1c:14:ea:b7:9f:98:7d:1a:5d:1a:36:
48:3e:a4:dc:e2:e4:a0:9f:45:74:7a:bd:91:95:c5:
00:6d:c5:fa:00:dd:ba:f6:53:02:cf:75:0a:35:1c:
2f:b5:11:7e:66:06:1f:2e:16:20:36:dd:2f:1b:98:
2c:bc:64:4e:2d:b4:67:ee:92:f7:85:75:db:f0:2b:
fe:4e:d0:cf:f2:b3:dc:8d:fa:7f:c2:9e:b2:dc:98:
56:a7:6d:aa:e4:ab:e9:e9:b6:9a:d2:7c:fb:55:5b:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:50:BF:42:EB:5C:6F:A9:1A:CF:46:21:43:6A:92:06:C1:98:7D
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:75:3d:ac:44:f9:22:b1:2a:5c:99:6c:cd:f8:8f:1e:e7:41:
fe:34:33:3b:e3:95:db:0e:4a:1e:74:0e:27:3f:62:ef:09:0a:
23:bf:d2:12:44:52:d3:40:c4:a6:04:63:31:0f:78:d2:bf:75:
26:4e:d2:76:0a:78:98:e3:b3:13:41:51:3f:d4:4e:80:3b:37:
d7:fc:a0:a0:0d:36:15:83:5a:73:eb:4f:5b:46:b4:38:5c:17:
ab:38:78:15:d2:fe:f6:c7:93:57:41:2f:aa:87:7d:c7:5b:2e:
71:88:ba:06:b4:1e:53:f8:aa:9e:b8:78:ac:5c:7e:ea:11:2d:
e1:fb:f1:5e:d6:47:77:f4:72:a5:0b:81:d6:c7:1e:48:ae:8f:
fe:ad:4f:2b:23:10:0f:c2:9b:f4:86:2a:0c:77:36:ef:10:7d:
51:8a:17:83:77:c7:48:8e:4d:10:d9:df:87:64:5a:8b:7a:69:
55:8b:2b:f7:2a:08:a1:46:96:fc:08:df:d0:82:8f:1b:ba:6a:
28:9a:20:18:22:a8:47:fe:27:55:fe:95:a2:6d:d0:56:68:2e:
8c:bc:34:62:d1:ed:af:9a:60:95:20:53:de:43:44:37:03:6f:
44:9b:e1:1b:85:70:8c:8e:b8:77:1e:ba:cf:2d:5c:c2:af:f2:
e7:7b:df:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSBgWzu0oECBuVW4a2OLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm
YTE4MjkwHhcNMjYwNTEzMDMwMTE4WhcNMjYwNTE0MDMwMTE4WjAzMTEwLwYDVQQD
Eyg0NGE2NTBiZjQyZWI1YzZmYTkxYWNmNDYyMTQzNmE5MjA2YzE5ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJp40Do75RIGdWPJHncLklqeWoj
AT7n5ZH0bGnYhADp5+7AH3i9+bb6FYC6Z9WOq34A0WTR6UCIZf/cDwaIylAwWRj8
iIe4/rjcixVxCASlTaoVlXWVtRjKcrNdpxTtfcm0pcXTyIHnawYvt+NVPJhIJOSv
mRXuVV47ucHeHNV5TeOiN5483oBpt8Sscoqf1kqNuYjYWowKHBTqt5+YfRpdGjZI
PqTc4uSgn0V0er2RlcUAbcX6AN269lMCz3UKNRwvtRF+ZgYfLhYgNt0vG5gsvGRO
LbRn7pL3hXXb8Cv+TtDP8rPcjfp/wp6y3JhWp22q5Kvp6baa0nz7VVv8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESmUL9C61xvqRrPRiFDapIGwZh9MB8GA1UdIwQY
MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt
MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw
LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHU9rET5
IrEqXJlszfiPHudB/jQzO+OV2w5KHnQOJz9i7wkKI7/SEkRS00DEpgRjMQ940r91
Jk7Sdgp4mOOzE0FRP9ROgDs31/ygoA02FYNac+tPW0a0OFwXqzh4FdL+9seTV0Ev
qod9x1sucYi6BrQeU/iqnrh4rFx+6hEt4fvxXtZHd/RypQuB1sceSK6P/q1PKyMQ
D8Kb9IYqDHc27xB9UYoXg3fHSI5NENnfh2Rai3ppVYsr9yoIoUaW/Ajf0IKPG7pq
KJogGCKoR/4nVf6Vom3QVmgujLw0YtHtr5pglSBT3kNENwNvRJvhG4VwjI64dx66
zy1cwq/y53vfKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:33:31 2026 by rpki-client