Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: urmZ50kA/Od4KHqbFHjz5QBA9chOguilfBd9ZdYFUN4=
Subject key identifier: 83:EB:52:CC:AE:10:D1:65:1A:09:1C:24:82:85:57:19:A1:71:D2:E7
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019E213618287DE6F6BB7CBADE5C7BA5BC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0ED5
Signing time: Wed 13 May 2026 12:00:53 +0000
Manifest this update: Wed 13 May 2026 12:00:53 +0000
Manifest next update: Thu 14 May 2026 12:00:53 +0000
Files and hashes: 1: DT8ZHpsnu95pA077Bij5e4AaTEY.roa (hash: QTft8cX4BupKj8g0B2lC6ytondXy0rFBo523NlqKQRE=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: L047gig3gYu8CUwe+QC56yV48GN4Cnco2wigZvxZRRY=)
3: qluoOzLyxaccQSwrFa90RFqcqxg.roa (hash: qpMAcoRGSm/EZYI6/sZIFBd3qkp/MdqT0v4KuQ94Pkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:18:28:7d:e6:f6:bb:7c:ba:de:5c:7b:a5:bc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: May 13 12:00:53 2026 GMT
Not After : May 14 12:00:53 2026 GMT
Subject: CN=83eb52ccae10d1651a091c2482855719a171d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:78:1e:5e:01:32:0f:25:f5:df:a8:b0:83:
33:8e:e1:d4:b7:86:35:28:f9:74:bd:d4:ee:69:ce:
f3:85:54:50:c3:00:31:d5:c2:52:40:d4:56:ac:55:
b0:9d:76:c1:e6:90:48:46:1d:70:aa:56:df:41:3d:
23:e4:8d:fe:e4:5e:2e:6f:cd:4c:99:ec:dc:86:35:
5f:89:06:1b:25:f2:1a:35:c2:f9:f5:51:8c:a2:71:
12:c2:e6:e8:89:99:28:16:e0:d2:e6:e8:43:db:e0:
13:f1:0b:e2:a6:11:30:e7:d1:d2:46:80:47:d6:f9:
79:a4:53:2b:73:b3:5a:c1:97:4d:23:1c:c7:10:31:
0a:b2:27:8a:67:fa:ea:63:4a:bd:5f:eb:78:f1:94:
d8:9c:96:79:2e:fe:f7:ba:e0:9d:60:58:bd:d0:05:
56:e8:49:d1:6f:8b:37:22:98:5f:69:0c:11:f7:e6:
3c:bf:aa:47:ec:e9:b9:0b:b1:fe:04:ba:2a:f5:3f:
99:b9:14:6f:e0:6b:cc:96:66:9a:3c:15:48:15:54:
a6:12:2c:45:26:23:c0:d3:5a:a0:7e:84:39:35:6b:
93:a7:f4:ca:70:5e:ab:d1:75:a8:93:63:de:5b:80:
d1:7f:3a:2e:5b:11:e1:8f:30:0b:bb:be:79:39:47:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:52:CC:AE:10:D1:65:1A:09:1C:24:82:85:57:19:A1:71:D2:E7
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:09:52:90:1f:92:73:27:18:1a:d1:3c:28:f0:e1:c3:1f:
1f:40:f8:7e:8a:8b:42:4f:96:31:ec:5c:d1:ad:4c:13:b4:5f:
ac:2f:86:89:af:19:22:ad:fb:00:4c:5a:fd:1e:5d:97:c6:6a:
96:25:9c:9a:03:57:27:72:bd:2e:be:71:f3:79:64:ec:45:fe:
10:13:79:15:f8:3c:3b:d5:fb:6f:b3:43:c7:64:42:42:4a:91:
e4:38:34:dd:cf:32:9a:a4:d5:f2:7e:08:ab:6f:e5:24:38:f0:
58:22:87:31:9e:35:78:f7:24:69:24:de:e9:b6:c0:1a:56:cc:
21:fa:f9:9b:6b:f3:6e:c6:00:59:91:05:cd:ea:45:fb:46:29:
1a:2f:ef:c4:28:6a:b2:01:de:cd:0e:c7:78:2c:be:46:c4:29:
5d:0d:e2:18:f2:c0:32:74:20:e9:62:35:aa:aa:e2:4a:13:d6:
80:c9:0c:dd:39:7f:e6:f9:af:61:d8:7c:8d:14:ae:68:36:da:
7f:ee:47:a2:74:75:a4:6c:f0:79:eb:c4:00:ab:1e:8c:7a:ee:
c8:12:36:83:6d:e2:96:50:e0:0a:3a:47:f6:b6:d3:50:3a:c4:
53:d5:39:e0:9e:b4:a3:c2:d6:81:8a:24:58:8a:25:49:12:db:
07:ea:88:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNhgofeb2u3y63lx7pbwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4
NWM3ZGUwHhcNMjYwNTEzMTIwMDUzWhcNMjYwNTE0MTIwMDUzWjAzMTEwLwYDVQQD
Eyg4M2ViNTJjY2FlMTBkMTY1MWEwOTFjMjQ4Mjg1NTcxOWExNzFkMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdd4Hl4BMg8l9d+osIMzjuHUt4Y1
KPl0vdTuac7zhVRQwwAx1cJSQNRWrFWwnXbB5pBIRh1wqlbfQT0j5I3+5F4ub81M
mezchjVfiQYbJfIaNcL59VGMonESwuboiZkoFuDS5uhD2+AT8QviphEw59HSRoBH
1vl5pFMrc7NawZdNIxzHEDEKsieKZ/rqY0q9X+t48ZTYnJZ5Lv73uuCdYFi90AVW
6EnRb4s3IphfaQwR9+Y8v6pH7Om5C7H+BLoq9T+ZuRRv4GvMlmaaPBVIFVSmEixF
JiPA01qgfoQ5NWuTp/TKcF6r0XWok2PeW4DRfzouWxHhjzALu755OUd09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPrUsyuENFlGgkcJIKFVxmhcdLnMB8GA1UdIwQY
MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt
ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh
LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv0JUpAf
knMnGBrRPCjw4cMfH0D4foqLQk+WMexc0a1ME7RfrC+Gia8ZIq37AExa/R5dl8Zq
liWcmgNXJ3K9Lr5x83lk7EX+EBN5Ffg8O9X7b7NDx2RCQkqR5Dg03c8ymqTV8n4I
q2/lJDjwWCKHMZ41ePckaSTe6bbAGlbMIfr5m2vzbsYAWZEFzepF+0YpGi/vxChq
sgHezQ7HeCy+RsQpXQ3iGPLAMnQg6WI1qqriShPWgMkM3Tl/5vmvYdh8jRSuaDba
f+5HonR1pGzweevEAKsejHruyBI2g23illDgCjpH9rbTUDrEU9U54J60o8LWgYok
WIolSRLbB+qIyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:27:41 2026 by rpki-client