Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File: YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier: bqFZGVwmaqs4xdGDEpqmZKfW8nH/QuTJd/GrY1+bjt4=
Subject key identifier: AB:9D:34:D5:DC:8B:6E:B8:72:3B:1F:3D:AC:45:C1:59:8B:42:B8:EE
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer: /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial: 019E1FB5E7AB78A6B5858E4A85ABBF42967D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number: 47
Signing time: Wed 13 May 2026 05:01:15 +0000
Manifest this update: Wed 13 May 2026 05:01:15 +0000
Manifest next update: Thu 14 May 2026 05:01:15 +0000
Files and hashes: 1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: aHaB6fbmI5gzFb2fScr+9XDnW/lR3aNWH1E3pWery0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:e7:ab:78:a6:b5:85:8e:4a:85:ab:bf:42:96:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Validity
Not Before: May 13 05:01:15 2026 GMT
Not After : May 14 05:01:15 2026 GMT
Subject: CN=ab9d34d5dc8b6eb8723b1f3dac45c1598b42b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:7e:43:d5:65:2d:e3:6f:51:fd:08:9e:8f:
64:e6:cf:1e:88:f0:64:13:b7:8b:24:43:d6:e5:5c:
81:21:df:12:94:4a:30:be:6a:2d:42:b1:97:c8:68:
71:4e:59:09:23:24:7d:04:ac:71:a1:46:9d:7b:69:
01:d7:01:0d:8b:c5:4f:62:2b:0f:e2:24:b5:57:e6:
7f:d6:2d:62:be:4b:8b:0d:a1:49:b9:13:39:68:24:
73:a9:dc:3b:87:72:8b:63:d9:94:99:47:ac:db:b3:
db:93:b0:cf:93:82:2d:14:db:ea:5b:69:75:c7:cc:
25:2f:81:94:f1:06:3e:12:31:d5:18:d3:b6:ed:d1:
4d:7f:4d:11:1e:95:84:59:d1:2a:b2:0c:b8:20:e7:
6e:87:4d:ea:45:fa:70:74:17:fa:6f:88:41:bc:e3:
f8:10:c9:47:54:77:44:d6:4a:45:cb:8c:7f:c3:2a:
e3:82:58:d2:ab:ea:d3:9c:18:ad:7d:9c:5a:ae:74:
3b:9b:1c:ba:37:78:8b:08:c3:10:86:31:bb:3f:01:
30:32:8f:1c:89:55:8c:46:d9:01:89:eb:ac:0d:fd:
de:63:88:02:cb:ca:07:24:89:37:01:ad:b4:d4:83:
b9:23:f9:98:a1:95:5d:fa:05:54:f9:ea:e0:8f:01:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:34:D5:DC:8B:6E:B8:72:3B:1F:3D:AC:45:C1:59:8B:42:B8:EE
X509v3 Authority Key Identifier:
keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:24:dd:5e:03:16:4b:dd:b7:a7:aa:5c:e5:f5:f2:3a:6b:
c2:0f:89:99:a8:bf:1e:49:82:50:c1:cf:e5:58:44:f2:00:5c:
d7:95:28:68:be:89:3a:51:90:89:f1:ba:05:c8:cc:d7:e2:21:
51:06:3a:f4:ab:67:d8:03:ce:b3:97:14:1c:e8:5b:d8:79:c4:
8b:85:99:39:4d:8c:33:bb:0b:0a:28:28:eb:f8:2a:d0:29:22:
9e:a1:30:c1:5b:cc:73:31:e6:67:d4:da:a9:83:75:31:bb:a1:
d8:8f:60:bb:a6:92:da:03:45:29:56:6d:7d:16:48:7a:41:d8:
34:54:03:67:51:09:08:25:e2:c2:67:45:92:02:75:a8:bb:fe:
bc:5b:2e:4d:dd:66:d1:05:cf:c7:b0:fc:eb:46:4c:a5:ff:07:
6a:1f:93:cb:e6:f7:1a:bf:95:a8:d2:39:53:45:b0:2c:1e:39:
82:d9:03:96:37:1b:d0:c5:3a:4c:8f:d5:69:c3:6d:37:64:b3:
61:13:58:4f:75:4b:a8:78:2b:a9:57:6d:40:20:f7:1a:be:c2:
df:3a:51:fd:5a:a6:b1:b3:f2:fd:bc:1f:40:df:2d:60:f3:71:
29:3e:86:68:b6:fa:05:05:d0:e9:b9:ce:03:a3:8c:98:4f:e4:
c5:cd:83:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fteereKa1hY5Khau/QpZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWI0YmExMzNmMjM4ZGQ2YWIzZTBhOWFjODg3NWM4ZDgw
YmY2YjcwHhcNMjYwNTEzMDUwMTE1WhcNMjYwNTE0MDUwMTE1WjAzMTEwLwYDVQQD
EyhhYjlkMzRkNWRjOGI2ZWI4NzIzYjFmM2RhYzQ1YzE1OThiNDJiOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9+Q9VlLeNvUf0Ino9k5s8eiPBk
E7eLJEPW5VyBId8SlEowvmotQrGXyGhxTlkJIyR9BKxxoUade2kB1wENi8VPYisP
4iS1V+Z/1i1ivkuLDaFJuRM5aCRzqdw7h3KLY9mUmUes27Pbk7DPk4ItFNvqW2l1
x8wlL4GU8QY+EjHVGNO27dFNf00RHpWEWdEqsgy4IOduh03qRfpwdBf6b4hBvOP4
EMlHVHdE1kpFy4x/wyrjgljSq+rTnBitfZxarnQ7mxy6N3iLCMMQhjG7PwEwMo8c
iVWMRtkBieusDf3eY4gCy8oHJIk3Aa201IO5I/mYoZVd+gVU+ergjwEW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKudNNXci264cjsfPaxFwVmLQrjuMB8GA1UdIwQY
MBaAFGAbS6Ez8jjdarPgqayIdcjYC/a3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgt
N2QyNDJmY2FiMTcwLzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgtN2QyNDJmY2FiMTcw
LzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNMk3V4D
Fkvdt6eqXOX18jprwg+Jmai/HkmCUMHP5VhE8gBc15UoaL6JOlGQifG6BcjM1+Ih
UQY69Ktn2APOs5cUHOhb2HnEi4WZOU2MM7sLCigo6/gq0CkinqEwwVvMczHmZ9Ta
qYN1Mbuh2I9gu6aS2gNFKVZtfRZIekHYNFQDZ1EJCCXiwmdFkgJ1qLv+vFsuTd1m
0QXPx7D860ZMpf8Hah+Ty+b3Gr+VqNI5U0WwLB45gtkDljcb0MU6TI/VacNtN2Sz
YRNYT3VLqHgrqVdtQCD3Gr7C3zpR/VqmsbPy/bwfQN8tYPNxKT6GaLb6BQXQ6bnO
A6OMmE/kxc2DzA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:27 2026 by rpki-client