Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: p6yVjX3B6rbwGYtmbY+WFwLFSr7I1k0UTln+4d55RKA=
Subject key identifier: BF:9D:11:F3:F9:18:C6:DF:DE:DB:F8:A3:14:37:EF:D7:0B:D2:1F:80
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019E1FB56552A0BCB4B3BD8E9D15551B2E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 05:00:42 +0000
Manifest this update: Wed 13 May 2026 05:00:42 +0000
Manifest next update: Thu 14 May 2026 05:00:42 +0000
Files and hashes: 1: X3ZQenpvE8l1hGo8jarjWIZlEHg.roa (hash: z2dHWQocjAT7eQBvB40EN/2l3Ks2v71LcjzkY2camiw=)
2: ko8WrvZomBgcI3Hqp37PqXOWiSI.roa (hash: 8LPZPPU2MH1K+TEuOxL4YKzpLJKTkh0MI1eoRloRcik=)
3: p5uygMovU567H0ml5c8C_ZDtiZY.roa (hash: PWQLRe33NpLQ7v5TkzLMs7Rxm+rn1zWzKAt3r3JdpTc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: WJ2C+DqllDL88Rkdrj7NWD/3WpZ6b+5GFLrPC+ThP08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:65:52:a0:bc:b4:b3:bd:8e:9d:15:55:1b:2e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: May 13 05:00:42 2026 GMT
Not After : May 14 05:00:42 2026 GMT
Subject: CN=bf9d11f3f918c6dfdedbf8a31437efd70bd21f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:71:30:d7:5c:98:3f:9e:b1:ad:eb:d8:8f:
67:f7:77:e3:91:f3:ec:0b:08:37:5a:73:51:9c:da:
a4:94:6f:7a:cf:57:11:bd:28:c8:1b:17:5c:b0:b0:
bf:56:2e:47:60:21:b5:0e:5c:79:ec:0d:20:2d:71:
09:fb:ea:af:e6:0c:2b:2b:fa:ce:e6:cf:76:d5:8b:
dd:ef:9c:a0:ce:17:9a:fd:90:9d:a5:ed:41:f3:7c:
f8:11:1c:2b:8c:75:72:17:5a:da:2f:50:bb:5b:76:
32:92:71:da:d4:76:3b:93:83:85:7a:c8:39:49:1c:
c7:6f:01:12:21:ce:e2:9c:1f:7a:87:14:f0:0c:64:
19:31:c3:cc:09:71:d8:75:62:d7:72:3d:23:0f:2a:
0d:0f:04:de:e9:f4:73:cb:e8:04:b1:30:55:af:5b:
41:2c:fb:19:28:b4:de:89:b9:00:db:fa:09:2d:14:
b8:01:cc:3e:c0:53:09:dc:52:91:26:87:a9:1f:68:
27:15:40:b8:86:97:4e:4a:63:9b:5f:5e:9d:8b:65:
4d:e1:42:8d:91:8d:c0:b1:9d:bd:ba:c6:b8:94:6f:
4f:81:68:a3:e1:a8:c9:e3:f7:88:19:0c:a5:c7:15:
c1:35:4e:b0:e8:ca:47:4e:fa:72:39:5e:33:18:b1:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:11:F3:F9:18:C6:DF:DE:DB:F8:A3:14:37:EF:D7:0B:D2:1F:80
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:ef:48:2d:e6:bb:e1:f5:33:c3:54:e4:c2:10:63:97:47:
ec:d0:af:27:37:6b:8a:7f:8a:0a:56:89:c7:ba:eb:d7:9a:32:
da:5f:88:ce:25:bc:5c:3f:31:cf:39:1a:a3:b9:09:11:01:59:
28:d4:5f:cd:2e:98:af:b6:a8:3a:02:56:79:8f:07:23:7a:d2:
1e:65:ee:09:5b:5d:c8:d9:eb:c6:ed:bf:f1:09:b3:d8:1f:d9:
3d:13:11:b4:4c:12:92:7e:b5:37:e8:c9:f5:b0:6b:6c:47:07:
4e:70:db:1b:c8:b8:3f:83:d3:99:dd:e7:8e:85:d3:88:7d:51:
87:60:49:2e:00:cd:49:d5:83:ae:2b:88:6e:f6:f9:bf:74:92:
0e:1b:7b:c0:40:fa:8b:1f:8e:06:ba:59:13:8f:f9:9e:92:ad:
5f:3d:b6:92:78:26:67:f7:55:5a:8c:3f:d2:ec:be:87:7c:01:
03:c4:2d:88:a1:8d:d4:29:6b:d5:69:90:64:6a:a5:64:8d:0b:
6b:f1:4b:0c:dd:04:b3:65:eb:38:3f:64:c0:34:0c:20:c4:dd:
c1:8a:f7:11:62:f3:92:a6:df:c4:36:93:18:50:5c:72:bd:4d:
ca:9f:9e:86:60:12:f0:c3:fe:97:ba:3d:e2:f9:ee:d8:34:22:
1e:34:2b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftWVSoLy0s72OnRVVGy4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjYwNTEzMDUwMDQyWhcNMjYwNTE0MDUwMDQyWjAzMTEwLwYDVQQD
EyhiZjlkMTFmM2Y5MThjNmRmZGVkYmY4YTMxNDM3ZWZkNzBiZDIxZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGFxMNdcmD+esa3r2I9n93fjkfPs
Cwg3WnNRnNqklG96z1cRvSjIGxdcsLC/Vi5HYCG1Dlx57A0gLXEJ++qv5gwrK/rO
5s921Yvd75ygzhea/ZCdpe1B83z4ERwrjHVyF1raL1C7W3YyknHa1HY7k4OFesg5
SRzHbwESIc7inB96hxTwDGQZMcPMCXHYdWLXcj0jDyoNDwTe6fRzy+gEsTBVr1tB
LPsZKLTeibkA2/oJLRS4Acw+wFMJ3FKRJoepH2gnFUC4hpdOSmObX16di2VN4UKN
kY3AsZ29usa4lG9PgWij4ajJ4/eIGQylxxXBNU6w6MpHTvpyOV4zGLFEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+dEfP5GMbf3tv4oxQ379cL0h+AMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiobvSC3m
u+H1M8NU5MIQY5dH7NCvJzdrin+KClaJx7rr15oy2l+IziW8XD8xzzkao7kJEQFZ
KNRfzS6Yr7aoOgJWeY8HI3rSHmXuCVtdyNnrxu2/8Qmz2B/ZPRMRtEwSkn61N+jJ
9bBrbEcHTnDbG8i4P4PTmd3njoXTiH1Rh2BJLgDNSdWDriuIbvb5v3SSDht7wED6
ix+OBrpZE4/5npKtXz22kngmZ/dVWow/0uy+h3wBA8QtiKGN1Clr1WmQZGqlZI0L
a/FLDN0Es2XrOD9kwDQMIMTdwYr3EWLzkqbfxDaTGFBccr1Nyp+ehmAS8MP+l7o9
4vnu2DQiHjQrYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:41 2026 by rpki-client