Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: WKsyo2vBLSDonXWY8zNAkR+l1drja57mZ2WFBdwcr1s=
Subject key identifier: BD:82:8B:C4:4D:9E:D3:A3:53:08:9E:C7:AB:BC:CF:07:87:D5:79:5B
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019E1FECF78D97DC78568838E904412C6E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 06:01:23 +0000
Manifest this update: Wed 13 May 2026 06:01:23 +0000
Manifest next update: Thu 14 May 2026 06:01:23 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: A4mV+WPMWrcKRg8n9NDrFHEpvNRxrjfKhLFCLY1p9vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:f7:8d:97:dc:78:56:88:38:e9:04:41:2c:6e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: May 13 06:01:23 2026 GMT
Not After : May 14 06:01:23 2026 GMT
Subject: CN=bd828bc44d9ed3a353089ec7abbccf0787d5795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:0b:f4:e7:4b:ef:3b:a9:bf:69:db:9c:7d:
3b:fb:34:06:94:f7:5b:77:a2:2b:b6:66:da:58:2e:
95:33:19:e5:d3:99:5b:8d:35:85:8b:4c:61:5f:c7:
e2:97:f2:59:60:9f:28:60:bc:9d:0b:49:eb:e4:2e:
49:10:3c:8c:23:2c:88:04:f5:42:f6:0e:77:68:10:
12:5b:40:74:45:9d:3c:c9:b6:3b:58:c8:11:5e:12:
62:43:3e:54:3d:b9:7a:b5:d1:eb:db:40:5b:8e:12:
cd:27:f1:bf:ac:f5:8d:93:93:13:de:cd:9c:26:4e:
cd:5e:aa:05:e9:71:a1:73:0f:1d:bb:03:1a:9f:06:
1b:c7:c9:c9:20:38:8c:0f:96:8b:fd:d0:54:9c:fa:
02:74:77:58:d2:40:1a:ae:ad:45:8e:cb:09:a1:6b:
75:16:3f:67:93:d6:6d:7a:c5:16:f1:41:22:10:cb:
30:6f:8e:01:bf:9d:82:c9:bd:43:17:34:34:ed:d6:
5a:fd:c1:a3:d5:c9:38:3f:f6:e3:09:d6:03:ed:31:
b5:7e:ce:d1:9e:75:ca:2c:a8:b4:0a:1f:06:20:61:
6e:03:16:be:3d:d3:3a:68:7a:46:af:8c:b3:b5:e0:
13:77:24:8a:b7:2e:44:b4:77:78:79:d6:4e:7b:fd:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:8B:C4:4D:9E:D3:A3:53:08:9E:C7:AB:BC:CF:07:87:D5:79:5B
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:fb:de:2e:14:6d:30:75:cb:59:20:be:95:37:41:df:56:
9f:ad:1b:68:30:d0:97:15:16:ef:0f:3e:4a:e2:1d:75:bd:c3:
6c:86:71:54:76:ad:0b:17:8d:99:78:c1:cc:40:2e:3b:ef:94:
b2:90:ec:64:6e:aa:81:6f:4c:29:77:ec:9f:21:bb:bc:7d:49:
f9:27:56:e1:bd:4b:eb:b9:83:e1:92:70:a1:16:4e:98:80:2c:
3b:fb:7a:43:d2:43:f3:d4:0f:5e:09:3e:df:51:8f:9e:69:25:
33:a1:c4:b7:09:ed:52:13:d9:2f:9f:72:bb:66:44:00:94:6d:
68:92:6f:ee:36:62:c1:03:43:e5:cf:81:f9:91:ba:7f:2a:6d:
11:9e:68:3d:c2:84:b3:b1:cf:dd:96:f3:5b:a9:c5:47:5a:65:
7a:df:4b:64:09:0f:7d:c5:db:46:9e:c5:7b:e3:da:20:ba:2c:
67:30:05:6e:50:3b:71:22:7a:43:00:50:ab:d0:a6:d7:cc:29:
be:52:14:05:75:b8:65:1a:09:02:2a:1e:d0:27:32:c4:7c:fd:
dc:95:4a:b5:17:88:93:bb:6f:a3:28:e1:4b:ec:fd:0d:01:d8:
0c:28:05:5d:fd:c7:29:50:2a:0c:d1:cc:fd:68:85:1a:5c:93:
72:82:2a:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7PeNl9x4Vog46QRBLG6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZDBiMDIwNzYwM2JlNDNkODQ5MmU5ODUxMzc4YjhiNGYw
OTU5NGYwHhcNMjYwNTEzMDYwMTIzWhcNMjYwNTE0MDYwMTIzWjAzMTEwLwYDVQQD
EyhiZDgyOGJjNDRkOWVkM2EzNTMwODllYzdhYmJjY2YwNzg3ZDU3OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lEL9OdL7zupv2nbnH07+zQGlPdb
d6IrtmbaWC6VMxnl05lbjTWFi0xhX8fil/JZYJ8oYLydC0nr5C5JEDyMIyyIBPVC
9g53aBASW0B0RZ08ybY7WMgRXhJiQz5UPbl6tdHr20BbjhLNJ/G/rPWNk5MT3s2c
Jk7NXqoF6XGhcw8duwManwYbx8nJIDiMD5aL/dBUnPoCdHdY0kAarq1FjssJoWt1
Fj9nk9ZtesUW8UEiEMswb44Bv52Cyb1DFzQ07dZa/cGj1ck4P/bjCdYD7TG1fs7R
nnXKLKi0Ch8GIGFuAxa+PdM6aHpGr4yzteATdySKty5EtHd4edZOe/2A+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2Ci8RNntOjUwiex6u8zweH1XlbMB8GA1UdIwQY
MBaAFGDQsCB2A75D2EkumFE3i4tPCVlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDIt
ZjQ5ZmVhNTQ1ZTc4LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDItZjQ5ZmVhNTQ1ZTc4
LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrD73i4U
bTB1y1kgvpU3Qd9Wn60baDDQlxUW7w8+SuIddb3DbIZxVHatCxeNmXjBzEAuO++U
spDsZG6qgW9MKXfsnyG7vH1J+SdW4b1L67mD4ZJwoRZOmIAsO/t6Q9JD89QPXgk+
31GPnmklM6HEtwntUhPZL59yu2ZEAJRtaJJv7jZiwQND5c+B+ZG6fyptEZ5oPcKE
s7HP3ZbzW6nFR1plet9LZAkPfcXbRp7Fe+PaILosZzAFblA7cSJ6QwBQq9Cm18wp
vlIUBXW4ZRoJAioe0CcyxHz93JVKtReIk7tvoyjhS+z9DQHYDCgFXf3HKVAqDNHM
/WiFGlyTcoIqzg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:35 2026 by rpki-client