
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: o0Zdynej+HuBlwMc9nAag/tMXs0AtspTpBrh5BKT20s=
Subject key identifier: 66:18:3D:4C:CA:5A:A8:CA:C4:71:CC:65:B7:DE:81:8C:1F:B4:2D:F2
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 0199FD3462368B178A9775DA06C884086A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: mNsQXXo1ELOaWz8ZLgO1qwEFlDHnWf97b8m8Q9RN2x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:62:36:8b:17:8a:97:75:da:06:c8:84:08:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=66183d4cca5aa8cac471cc65b7de818c1fb42df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:14:4b:c3:08:89:a1:0e:dc:da:00:1c:87:
38:af:09:b8:78:ff:0e:f1:c4:1f:e1:0c:0c:d6:88:
d3:5d:91:44:e9:6b:94:a4:03:8a:a2:8f:ce:7d:e8:
ee:6c:7a:65:c4:8c:5a:8f:e4:89:24:21:3f:e5:66:
a7:5e:dc:92:ae:02:2f:02:53:08:eb:3a:1d:32:48:
ea:7e:79:09:d4:22:a8:55:21:1b:a1:f2:aa:df:18:
da:4a:e3:6e:00:f4:84:14:ee:d9:86:15:42:b7:53:
61:be:7f:bd:16:f5:8f:4c:11:69:2e:b1:58:60:9c:
73:c8:8e:ec:e0:6c:91:2d:78:9e:dc:c9:be:45:77:
46:60:d3:27:14:7b:95:bf:0d:9c:3e:3f:4c:a7:d8:
5d:66:5d:ae:75:ed:45:61:c7:c0:89:ad:e4:2e:45:
ac:d0:34:6d:a6:94:6a:29:71:9a:24:ab:30:11:d5:
29:e7:85:d6:4e:1a:b4:a0:1d:8b:7a:e7:83:20:e7:
2d:cd:90:07:ca:c4:ef:78:16:06:00:48:ea:4e:b5:
9a:2a:2b:34:c9:0b:92:3f:08:e1:6e:4e:bc:d9:8e:
e8:ff:3a:83:d3:3a:b1:c5:dd:a9:dc:cf:dd:69:4b:
d8:d6:56:1a:88:97:13:64:9e:51:ea:7b:46:b4:32:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:3D:4C:CA:5A:A8:CA:C4:71:CC:65:B7:DE:81:8C:1F:B4:2D:F2
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cd:18:57:40:36:7c:5e:5e:e0:3d:ce:20:18:eb:2a:ff:90:
d5:d9:12:ba:77:3c:8c:ad:cb:60:65:8c:c8:0b:a3:73:ca:3e:
bb:dc:e1:be:ed:3b:82:b7:89:11:b9:6b:bf:23:3f:ab:a5:32:
58:cf:30:1b:bb:6b:55:9b:d1:b3:96:21:be:f2:c3:f0:0b:76:
e9:8d:82:79:16:7b:65:6b:db:33:3b:5a:02:57:cd:2f:a9:d3:
36:d3:75:b4:5c:b7:a5:8d:ec:a4:7f:ea:50:b1:46:97:29:b8:
86:b8:f3:db:79:30:fb:66:fc:88:55:22:3f:21:36:c3:46:b0:
a8:b9:03:3a:ab:5f:ec:a7:a8:74:2a:f2:2c:ee:c4:07:df:43:
87:6a:ad:0d:c6:fa:12:fa:78:c8:8e:15:bb:d1:a6:b1:91:1f:
62:7b:9a:13:f3:3f:1a:53:13:ca:e7:bb:18:03:7b:f8:1c:10:
4f:a6:04:aa:23:3c:b8:b2:61:a6:f2:0e:72:ac:b9:ca:a3:68:
7e:65:f7:9a:4e:5d:20:67:03:1d:e2:4d:7c:17:cc:31:64:4a:
06:86:71:d3:20:a5:45:60:53:01:51:6c:71:9c:5d:7d:53:74:
98:6b:61:da:fd:65:4b:4c:c8:48:95:21:06:ea:4b:32:8b:9b:
b5:aa:67:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGI2ixeKl3XaBsiECGoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjUxMDE5MTYwMTMyWhcNMjUxMDIwMTYwMTMyWjAzMTEwLwYDVQQD
Eyg2NjE4M2Q0Y2NhNWFhOGNhYzQ3MWNjNjViN2RlODE4YzFmYjQyZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOsUS8MIiaEO3NoAHIc4rwm4eP8O
8cQf4QwM1ojTXZFE6WuUpAOKoo/OfejubHplxIxaj+SJJCE/5WanXtySrgIvAlMI
6zodMkjqfnkJ1CKoVSEbofKq3xjaSuNuAPSEFO7ZhhVCt1Nhvn+9FvWPTBFpLrFY
YJxzyI7s4GyRLXie3Mm+RXdGYNMnFHuVvw2cPj9Mp9hdZl2ude1FYcfAia3kLkWs
0DRtppRqKXGaJKswEdUp54XWThq0oB2LeueDIOctzZAHysTveBYGAEjqTrWaKis0
yQuSPwjhbk682Y7o/zqD0zqxxd2p3M/daUvY1lYaiJcTZJ5R6ntGtDLFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYYPUzKWqjKxHHMZbfegYwftC3yMB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs0YV0A2
fF5e4D3OIBjrKv+Q1dkSunc8jK3LYGWMyAujc8o+u9zhvu07greJEblrvyM/q6Uy
WM8wG7trVZvRs5YhvvLD8At26Y2CeRZ7ZWvbMztaAlfNL6nTNtN1tFy3pY3spH/q
ULFGlym4hrjz23kw+2b8iFUiPyE2w0awqLkDOqtf7KeodCryLO7EB99Dh2qtDcb6
Evp4yI4Vu9GmsZEfYnuaE/M/GlMTyue7GAN7+BwQT6YEqiM8uLJhpvIOcqy5yqNo
fmX3mk5dIGcDHeJNfBfMMWRKBoZx0yClRWBTAVFscZxdfVN0mGth2v1lS0zISJUh
BupLMoubtapnIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:50 2025 by rpki-client