Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: /KBHSllaA0AqdFu1Mg8RiGCIB6XRj6xgxC0a+Xit4Q0=
Subject key identifier: 50:2B:CD:6A:A5:62:F4:32:2C:3C:30:E6:F8:D3:B9:79:6E:77:CD:32
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019E2024344950AEA21F75143320C5F1A439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 128C
Signing time: Wed 13 May 2026 07:01:43 +0000
Manifest this update: Wed 13 May 2026 07:01:43 +0000
Manifest next update: Thu 14 May 2026 07:01:43 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: e+2V6y7VJaipBo7+y/YI1ZypVYysmtTW2Lg15H/zQ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:34:49:50:ae:a2:1f:75:14:33:20:c5:f1:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: May 13 07:01:43 2026 GMT
Not After : May 14 07:01:43 2026 GMT
Subject: CN=502bcd6aa562f4322c3c30e6f8d3b9796e77cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:f0:bc:18:81:15:e8:21:11:ef:84:30:2d:
23:bc:48:d7:52:a3:8d:05:85:cb:22:5b:fb:d7:a0:
d6:12:16:bc:09:7b:c8:82:d2:e6:49:fd:68:42:6d:
6c:68:de:ac:da:9d:19:06:e9:75:3f:36:6d:90:12:
3c:1c:8a:04:9b:84:f4:42:d5:6a:92:ae:95:9a:14:
23:0f:69:80:49:4b:49:e6:f5:99:f1:47:58:21:15:
23:86:be:6a:76:93:8f:cf:a1:e6:fd:4c:36:60:d6:
15:e5:c8:17:5b:9d:7f:9c:79:6d:8b:66:72:0a:36:
fa:9b:39:26:91:47:ec:f3:6a:25:e6:df:56:9e:96:
c3:19:96:2f:93:02:13:a1:e4:e7:29:d8:d5:6d:79:
c9:47:78:7b:e2:c5:53:a0:09:08:89:cd:a9:2f:54:
9f:d8:65:69:be:b5:ab:d3:d5:57:29:1e:52:c5:bd:
9a:72:a8:6a:d1:55:12:46:0c:9f:e4:ee:b3:c4:62:
31:be:93:d9:f6:f7:67:e3:a0:18:14:eb:01:43:cd:
f5:35:66:14:f4:82:f6:5d:f6:8f:6f:27:4e:9b:20:
bf:5d:29:5b:07:ec:68:65:d7:a9:a0:30:fe:4a:74:
2b:63:23:2a:8c:68:f2:7d:f0:50:dd:73:c8:ef:9e:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:CD:6A:A5:62:F4:32:2C:3C:30:E6:F8:D3:B9:79:6E:77:CD:32
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:1a:7b:53:0c:b7:1e:c2:d5:75:a1:bf:4b:d9:f2:7b:89:
4d:3f:65:b8:ee:6c:50:de:d8:32:8e:1c:96:ce:50:78:b3:47:
b9:cb:81:b6:47:8b:de:0d:34:1f:79:26:fb:bc:0d:2c:70:d5:
ea:77:9b:f2:f0:15:fb:3c:18:fa:04:86:1a:a4:22:4c:39:1c:
18:e2:8f:8b:db:c1:dd:e3:85:78:38:b3:39:80:de:38:53:1d:
24:cc:5c:d3:3a:83:42:4c:00:17:01:6d:61:f3:70:ac:f5:07:
3b:ea:bd:b4:13:37:dc:5b:b1:0b:e8:e3:bf:17:09:0f:73:a2:
f7:a4:6a:c2:67:f1:8d:e7:a4:99:bf:d6:87:00:7e:25:95:dd:
6f:b7:51:23:2c:63:49:1b:ab:ee:c8:7e:4e:74:da:4b:58:02:
65:4f:0a:5b:76:25:ec:b7:0a:cd:c1:b6:98:92:58:9a:94:81:
e7:ac:9f:9f:c0:cd:66:42:c9:40:a6:6c:1c:e4:0f:09:3f:3f:
89:d1:23:35:1b:69:5c:cb:9a:d0:eb:00:7e:f1:e3:af:96:2d:
e1:ee:7c:38:2a:59:4c:9a:41:c9:98:e8:06:d8:1a:a9:64:33:
4f:b5:d1:43:88:26:d3:73:fb:4e:a4:7a:74:13:20:2a:41:2e:
76:30:3d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJDRJUK6iH3UUMyDF8aQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw
MzRhYmYwHhcNMjYwNTEzMDcwMTQzWhcNMjYwNTE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg1MDJiY2Q2YWE1NjJmNDMyMmMzYzMwZTZmOGQzYjk3OTZlNzdjZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y7wvBiBFeghEe+EMC0jvEjXUqON
BYXLIlv716DWEha8CXvIgtLmSf1oQm1saN6s2p0ZBul1PzZtkBI8HIoEm4T0QtVq
kq6VmhQjD2mASUtJ5vWZ8UdYIRUjhr5qdpOPz6Hm/Uw2YNYV5cgXW51/nHlti2Zy
Cjb6mzkmkUfs82ol5t9WnpbDGZYvkwIToeTnKdjVbXnJR3h74sVToAkIic2pL1Sf
2GVpvrWr09VXKR5Sxb2acqhq0VUSRgyf5O6zxGIxvpPZ9vdn46AYFOsBQ831NWYU
9IL2XfaPbydOmyC/XSlbB+xoZdepoDD+SnQrYyMqjGjyffBQ3XPI757v6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFArzWqlYvQyLDww5vjTuXlud80yMB8GA1UdIwQY
MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt
OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj
LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq8ae1MM
tx7C1XWhv0vZ8nuJTT9luO5sUN7YMo4cls5QeLNHucuBtkeL3g00H3km+7wNLHDV
6neb8vAV+zwY+gSGGqQiTDkcGOKPi9vB3eOFeDizOYDeOFMdJMxc0zqDQkwAFwFt
YfNwrPUHO+q9tBM33FuxC+jjvxcJD3Oi96Rqwmfxjeekmb/WhwB+JZXdb7dRIyxj
SRur7sh+TnTaS1gCZU8KW3Yl7LcKzcG2mJJYmpSB56yfn8DNZkLJQKZsHOQPCT8/
idEjNRtpXMua0OsAfvHjr5Yt4e58OCpZTJpByZjoBtgaqWQzT7XRQ4gm03P7TqR6
dBMgKkEudjA91A==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:08 2026 by rpki-client