
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
File: _yNu-MNnK1qw0si3J_fkUU6EV0s.mft (raw, json)
Hash identifier: MZ9WwnON2OPMeRY9f97EziS4h7aXwFYwU/8+3I+LhBo=
Subject key identifier: AE:EF:59:56:4B:32:48:24:0F:91:81:64:C7:DF:4C:62:DD:28:69:77
Authority key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
Certificate issuer: /CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Certificate serial: 019E1EA32EBF2A6E9E851ACC6D268620CE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
Manifest number: 0117
Signing time: Wed 13 May 2026 00:01:11 +0000
Manifest this update: Wed 13 May 2026 00:01:11 +0000
Manifest next update: Thu 14 May 2026 00:01:11 +0000
Files and hashes: 1: X_T0FWjs8sv99TO96Nigw_PWdoI.roa (hash: IF+H0gvY6TuEuAilrDvZ1qnXKE+yBwSYsjOx1dwn1C8=)
2: _yNu-MNnK1qw0si3J_fkUU6EV0s.crl (hash: cz73vpYhSr2c1g02sq8GKADjPGGSME1Bfp441hivxT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2e:bf:2a:6e:9e:85:1a:cc:6d:26:86:20:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Validity
Not Before: May 13 00:01:11 2026 GMT
Not After : May 14 00:01:11 2026 GMT
Subject: CN=aeef59564b3248240f918164c7df4c62dd286977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1a:d5:66:b8:5a:66:a0:b8:e5:02:48:f4:e3:
c6:8d:5d:7e:5d:53:c8:17:08:de:43:a9:37:64:9a:
26:2a:07:52:15:87:f7:ac:70:b4:f8:7f:94:47:6c:
a2:d2:c6:d7:b9:28:d8:5b:4f:75:e7:cc:79:33:37:
3d:65:54:03:e0:66:d9:fa:57:11:41:c0:30:ac:24:
31:a0:b1:23:af:0e:11:18:d4:4a:47:70:0e:a8:61:
d3:cb:51:7b:c9:80:eb:b2:f3:98:7c:a9:21:c8:00:
47:29:ac:94:7e:fb:0e:32:db:d8:25:8f:95:e9:05:
4a:4e:1d:cf:5c:8e:5a:d7:31:8a:4e:17:49:23:86:
3f:2b:c9:1c:5c:cc:0a:57:db:0c:58:5c:86:e8:82:
4a:63:9f:bd:e4:0c:3f:c4:3c:dc:da:07:da:71:51:
70:86:04:e8:2c:cf:ca:f4:f7:b2:83:e2:63:d9:46:
b4:25:83:a7:a6:51:35:4c:6b:13:27:4c:f8:8d:33:
9b:9e:6a:92:f7:41:d2:35:d5:fb:b5:cf:4c:f8:a9:
b2:1c:34:d0:91:cd:b6:08:ed:70:cb:92:18:9a:fa:
d6:28:aa:ba:a4:84:bb:7e:fd:4e:b1:ab:b1:6f:28:
84:97:10:b0:13:d6:3a:24:82:4e:68:68:71:e5:45:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:59:56:4B:32:48:24:0F:91:81:64:C7:DF:4C:62:DD:28:69:77
X509v3 Authority Key Identifier:
keyid:FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c8:88:51:55:ee:9e:20:44:18:6e:5b:c1:65:c6:f0:fc:c1:
38:f7:6c:e0:07:66:ce:82:c7:0d:d0:44:18:80:dd:67:ff:f7:
03:43:64:6d:d3:13:0a:40:b6:78:a7:55:c6:45:bc:0b:d1:c9:
b2:92:90:57:f5:82:13:d6:5b:41:e2:4f:12:0a:d7:bb:ef:2f:
a2:d1:62:2e:ca:2c:a4:46:12:6b:4d:63:61:d0:79:63:20:1d:
c7:c5:88:d5:9c:91:95:db:ee:db:b3:b5:f5:b2:3a:9a:e1:a0:
5b:32:22:de:97:9e:88:70:a4:67:49:cd:94:d6:b0:b7:22:f3:
f9:6c:64:69:c8:d7:6f:67:0c:37:1f:f8:a8:5b:5a:a9:76:81:
06:c9:6d:fb:06:cc:ef:dd:c2:07:b4:04:4c:65:99:ea:98:25:
20:f8:40:b1:69:7b:d9:cb:2b:66:a1:0a:3b:fe:0b:73:9f:36:
c3:7c:73:ae:e3:d0:d7:0e:5c:b3:12:3a:bb:0d:6d:af:0c:b2:
d3:82:fe:a3:d1:d2:65:84:df:50:d1:a1:ad:80:d3:47:13:9d:
17:f3:90:d5:80:56:4f:1c:0f:78:99:72:86:7b:1c:9b:29:f7:
16:d8:41:76:6f:7a:1d:94:04:3a:db:06:79:a2:f4:e7:84:ab:
00:b5:82:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoy6/Km6ehRrMbSaGIM4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjM2ZWY4YzM2NzJiNWFiMGQyYzhiNzI3ZjdlNDUxNGU4
NDU3NGIwHhcNMjYwNTEzMDAwMTExWhcNMjYwNTE0MDAwMTExWjAzMTEwLwYDVQQD
EyhhZWVmNTk1NjRiMzI0ODI0MGY5MTgxNjRjN2RmNGM2MmRkMjg2OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hrVZrhaZqC45QJI9OPGjV1+XVPI
FwjeQ6k3ZJomKgdSFYf3rHC0+H+UR2yi0sbXuSjYW09158x5Mzc9ZVQD4GbZ+lcR
QcAwrCQxoLEjrw4RGNRKR3AOqGHTy1F7yYDrsvOYfKkhyABHKayUfvsOMtvYJY+V
6QVKTh3PXI5a1zGKThdJI4Y/K8kcXMwKV9sMWFyG6IJKY5+95Aw/xDzc2gfacVFw
hgToLM/K9Peyg+Jj2Ua0JYOnplE1TGsTJ0z4jTObnmqS90HSNdX7tc9M+KmyHDTQ
kc22CO1wy5IYmvrWKKq6pIS7fv1OsauxbyiElxCwE9Y6JIJOaGhx5UWZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7vWVZLMkgkD5GBZMffTGLdKGl3MB8GA1UdIwQY
MBaAFP8jbvjDZytasNLItyf35FFOhFdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lOdS1NTm5LMXF3MHNpM0pfZmtVVTZFVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iYWU2NDctODJmYi00YWE5LTkwMjkt
MjNhMDU2ZTFkMmYxLzEvX3lOdS1NTm5LMXF3MHNpM0pfZmtVVTZFVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iYWU2NDctODJmYi00YWE5LTkwMjktMjNhMDU2ZTFkMmYx
LzEvX3lOdS1NTm5LMXF3MHNpM0pfZmtVVTZFVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsiIUVXu
niBEGG5bwWXG8PzBOPds4AdmzoLHDdBEGIDdZ//3A0NkbdMTCkC2eKdVxkW8C9HJ
spKQV/WCE9ZbQeJPEgrXu+8votFiLsospEYSa01jYdB5YyAdx8WI1ZyRldvu27O1
9bI6muGgWzIi3peeiHCkZ0nNlNawtyLz+WxkacjXb2cMNx/4qFtaqXaBBslt+wbM
793CB7QETGWZ6pglIPhAsWl72csrZqEKO/4Lc582w3xzruPQ1w5csxI6uw1trwyy
04L+o9HSZYTfUNGhrYDTRxOdF/OQ1YBWTxwPeJlyhnscmyn3FthBdm96HZQEOtsG
eaL054SrALWCXA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:39:17 2026 by rpki-client