Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: GrgIN/6mcKpjKczoTbi8cknjE5P1OQwO/QvBdExEKIc=
Subject key identifier: 48:F5:B4:1B:1E:C4:E5:A2:8E:3C:61:6F:3E:5E:A1:80:DC:A1:A4:FA
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019E1D905AA6C6D74DBB05372B9528CE5ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0983
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: ImEOf0zEhXVytrmA7n8HCqigiNiRCe1OGJ/3fsQMv28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5a:a6:c6:d7:4d:bb:05:37:2b:95:28:ce:5e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=48f5b41b1ec4e5a28e3c616f3e5ea180dca1a4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:c6:d2:59:41:5a:85:bc:95:42:3d:cc:2b:
6a:9f:70:76:c7:6b:3b:07:7f:0d:c4:7f:2f:2b:6b:
59:50:24:0a:b3:d7:68:f0:2d:fb:33:c6:f5:c8:ab:
c9:41:48:df:86:f7:0a:40:65:da:2a:77:90:d5:50:
e7:2f:12:34:cc:a8:09:60:3f:7f:0e:99:bb:50:bc:
05:92:01:ac:15:4a:03:b8:57:06:66:d5:9f:47:9f:
46:79:0a:1a:6e:37:3d:7f:a8:81:7e:6d:42:95:d6:
79:85:d8:f4:e2:8a:c6:46:d5:cc:65:9f:03:05:4b:
ac:ff:9f:8a:52:65:02:8e:81:9c:4c:f8:87:94:39:
36:d6:27:40:e1:ce:c6:e4:ad:16:49:d5:9b:6a:a4:
7b:d5:b9:c5:06:b3:fc:8a:8f:5e:f6:c1:dc:3b:c3:
e8:47:3b:f5:30:8c:da:34:85:25:74:62:48:be:da:
8e:b8:cb:60:a6:18:53:d0:76:63:49:bb:78:1a:f1:
69:d2:76:71:ff:b3:32:19:57:be:2c:66:9d:ec:9d:
fa:13:3b:6a:51:47:19:e5:81:0b:fa:25:d9:df:27:
e3:3a:2d:30:71:59:2c:da:a7:47:df:9c:f6:21:4a:
70:60:7d:d2:32:fe:45:65:dd:09:8c:e2:91:25:21:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:B4:1B:1E:C4:E5:A2:8E:3C:61:6F:3E:5E:A1:80:DC:A1:A4:FA
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:8c:03:c6:8a:d4:2a:51:3e:1f:0c:4e:50:0b:14:77:95:
2c:20:af:fc:70:a4:0b:18:2e:ae:03:5b:13:8c:0f:e7:d9:cb:
5d:e8:53:db:24:1e:ec:e3:91:6c:6e:88:6c:27:bd:ea:97:0f:
29:46:ba:9b:f6:e2:c6:dc:79:cd:4a:96:c2:ee:19:ab:ff:9c:
32:bd:8b:08:63:20:e5:70:48:72:dd:f6:4a:0c:7a:a2:43:ff:
56:8d:d2:a0:06:c6:73:e4:5f:4d:0c:d4:cc:f1:00:87:30:c3:
aa:09:1f:51:a0:eb:43:aa:03:7d:a7:67:a8:ed:20:79:dc:f8:
91:20:bc:c6:f5:74:fd:d1:b4:18:e1:17:21:01:10:0c:33:4f:
b6:8b:d0:71:e2:4f:39:71:7e:fb:6e:01:6e:f1:ea:b0:81:9e:
ad:cb:a8:f5:99:2b:74:31:92:68:91:bb:1e:91:49:5f:3a:01:
c0:9c:f2:ec:2b:79:94:3b:74:de:bb:bd:42:59:5a:ae:5f:07:
90:ce:6c:68:83:64:fc:34:6e:a3:bb:4a:86:84:42:71:bc:55:
77:94:f2:60:0f:d0:17:e4:af:3f:91:59:08:e3:db:fe:13:ec:
ca:18:53:34:bf:a0:22:10:d8:c4:63:98:e9:c4:da:e9:3a:c7:
24:5b:9c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkFqmxtdNuwU3K5Uozl7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy
OGIwMTgwHhcNMjYwNTEyMTkwMTAwWhcNMjYwNTEzMTkwMTAwWjAzMTEwLwYDVQQD
Eyg0OGY1YjQxYjFlYzRlNWEyOGUzYzYxNmYzZTVlYTE4MGRjYTFhNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnvG0llBWoW8lUI9zCtqn3B2x2s7
B38NxH8vK2tZUCQKs9do8C37M8b1yKvJQUjfhvcKQGXaKneQ1VDnLxI0zKgJYD9/
Dpm7ULwFkgGsFUoDuFcGZtWfR59GeQoabjc9f6iBfm1CldZ5hdj04orGRtXMZZ8D
BUus/5+KUmUCjoGcTPiHlDk21idA4c7G5K0WSdWbaqR71bnFBrP8io9e9sHcO8Po
Rzv1MIzaNIUldGJIvtqOuMtgphhT0HZjSbt4GvFp0nZx/7MyGVe+LGad7J36Eztq
UUcZ5YEL+iXZ3yfjOi0wcVks2qdH35z2IUpwYH3SMv5FZd0JjOKRJSFjmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj1tBsexOWijjxhbz5eoYDcoaT6MB8GA1UdIwQY
MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt
MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi
LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa2MA8aK
1CpRPh8MTlALFHeVLCCv/HCkCxgurgNbE4wP59nLXehT2yQe7OORbG6IbCe96pcP
KUa6m/bixtx5zUqWwu4Zq/+cMr2LCGMg5XBIct32Sgx6okP/Vo3SoAbGc+RfTQzU
zPEAhzDDqgkfUaDrQ6oDfadnqO0gedz4kSC8xvV0/dG0GOEXIQEQDDNPtovQceJP
OXF++24BbvHqsIGercuo9ZkrdDGSaJG7HpFJXzoBwJzy7Ct5lDt03ru9Qllarl8H
kM5saINk/DRuo7tKhoRCcbxVd5TyYA/QF+SvP5FZCOPb/hPsyhhTNL+gIhDYxGOY
6cTa6TrHJFucTg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:45 2026 by rpki-client