Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: GSAhjALHoaeTAsSc7sK0c4wiUPmF9J7SMO243sKyqTs=
Subject key identifier: 8C:B4:5B:12:84:F0:48:F5:0E:B5:5B:78:FD:8D:73:15:3C:C1:44:B7
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 019E1D904360207C43BA3BFA552EDC3BE057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: G80UYFTPNMNhQKwl0jD5+K/R0nSnXz8uOxomNoi1vRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:43:60:20:7c:43:ba:3b:fa:55:2e:dc:3b:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=8cb45b1284f048f50eb55b78fd8d73153cc144b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:40:ff:43:08:bd:3a:d3:5e:04:e3:b7:23:
ee:d5:63:e9:70:58:ed:ce:7c:97:5a:29:d5:e7:97:
bb:f2:76:48:aa:ff:5a:57:0c:bf:b3:46:a3:7c:8e:
38:fb:49:10:8b:15:0e:e0:c7:0c:49:fd:dc:12:64:
e6:a1:05:41:7a:49:74:ef:1b:6b:c3:da:34:e3:1b:
93:75:af:03:51:92:da:8a:ce:4c:d2:21:0e:a1:ad:
3a:76:d9:be:7d:77:d0:3a:2c:ae:f8:56:c6:34:10:
11:77:d1:58:d5:80:74:07:00:d0:e1:0e:9b:13:54:
3c:46:68:90:59:94:f6:be:dd:30:bb:1d:f6:97:15:
87:c7:b9:03:80:d1:52:60:04:96:52:7b:74:4f:25:
9f:e6:b4:f8:f0:f6:3d:26:ff:7b:23:b1:29:01:fa:
21:42:34:a1:73:d7:e5:7a:a5:13:5f:33:be:fa:b1:
52:d1:52:6d:11:50:d2:97:d1:46:25:83:48:11:ae:
d3:ea:a9:b1:fb:07:7d:e9:bf:94:c2:4b:d5:57:eb:
79:d7:06:ba:53:63:f7:53:82:a9:9a:89:14:76:54:
d7:2e:49:dc:d5:f9:e2:0a:50:fe:5a:8d:df:0a:0e:
ef:9f:61:ca:5f:69:0b:18:42:d6:2c:6d:73:7c:88:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:5B:12:84:F0:48:F5:0E:B5:5B:78:FD:8D:73:15:3C:C1:44:B7
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:fd:18:e2:19:59:34:61:d3:ab:68:09:e5:10:1e:8b:51:6a:
17:04:99:8c:6c:6a:26:6e:03:49:eb:80:8f:a7:62:74:b4:53:
e8:31:6e:fb:01:12:12:5a:72:53:5a:ff:97:ed:bc:a7:44:50:
03:65:3c:a7:60:88:0d:33:43:ea:a5:b2:e4:7c:7c:55:79:80:
2c:66:67:ee:ef:9f:3e:e5:e8:88:62:0b:b4:35:54:73:f7:7c:
6a:28:75:a8:90:02:48:8e:3b:60:53:09:96:0f:73:81:60:f7:
97:3f:b2:3f:09:b9:14:91:cb:b0:63:49:94:d0:44:b1:cb:b8:
ca:40:47:db:11:e8:1a:07:88:63:ba:1b:28:ea:00:34:d7:81:
2f:70:46:70:04:ac:ac:9b:96:05:fe:8d:df:53:1d:dc:07:d1:
d0:a7:fd:9b:ab:08:9c:bc:f8:e3:10:8d:87:07:1f:58:11:98:
12:74:f8:56:e6:46:75:d0:31:49:45:e5:e6:da:5c:23:52:6f:
d2:09:43:e6:c8:f4:dd:51:17:23:37:a9:ca:4d:80:e6:9c:23:
4c:98:fd:d2:09:1d:79:a0:1a:59:ac:41:50:31:6a:a9:1a:3d:
d1:1b:f4:61:06:26:1a:26:70:d7:d7:cc:17:b9:41:85:a0:75:
c5:86:47:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkENgIHxDujv6VS7cO+BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDk2ZTM3NDA5MmNjMzAwYmQwYmIwNmM0MTY0MDkzMmVj
ZjhiNDkwHhcNMjYwNTEyMTkwMDU0WhcNMjYwNTEzMTkwMDU0WjAzMTEwLwYDVQQD
Eyg4Y2I0NWIxMjg0ZjA0OGY1MGViNTViNzhmZDhkNzMxNTNjYzE0NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzRA/0MIvTrTXgTjtyPu1WPpcFjt
znyXWinV55e78nZIqv9aVwy/s0ajfI44+0kQixUO4McMSf3cEmTmoQVBekl07xtr
w9o04xuTda8DUZLais5M0iEOoa06dtm+fXfQOiyu+FbGNBARd9FY1YB0BwDQ4Q6b
E1Q8RmiQWZT2vt0wux32lxWHx7kDgNFSYASWUnt0TyWf5rT48PY9Jv97I7EpAfoh
QjShc9fleqUTXzO++rFS0VJtEVDSl9FGJYNIEa7T6qmx+wd96b+UwkvVV+t51wa6
U2P3U4KpmokUdlTXLknc1fniClD+Wo3fCg7vn2HKX2kLGELWLG1zfIju0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy0WxKE8Ej1DrVbeP2NcxU8wUS3MB8GA1UdIwQY
MBaAFGAJbjdAkswwC9C7BsQWQJMuz4tJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODct
YzQ1ODUyYzdiZTIwLzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODctYzQ1ODUyYzdiZTIw
LzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzv0Y4hlZ
NGHTq2gJ5RAei1FqFwSZjGxqJm4DSeuAj6didLRT6DFu+wESElpyU1r/l+28p0RQ
A2U8p2CIDTND6qWy5Hx8VXmALGZn7u+fPuXoiGILtDVUc/d8aih1qJACSI47YFMJ
lg9zgWD3lz+yPwm5FJHLsGNJlNBEscu4ykBH2xHoGgeIY7obKOoANNeBL3BGcASs
rJuWBf6N31Md3AfR0Kf9m6sInLz44xCNhwcfWBGYEnT4VuZGddAxSUXl5tpcI1Jv
0glD5sj03VEXIzepyk2A5pwjTJj90gkdeaAaWaxBUDFqqRo90Rv0YQYmGiZw19fM
F7lBhaB1xYZHzA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:34:37 2026 by rpki-client