Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: Ca4RVGSTr5DjcN2OxU/W2AxbNRdofS52TnFiRCVumzA=
Subject key identifier: 33:DE:32:19:32:71:9B:95:09:FB:EA:5F:ED:E1:9B:8D:F5:63:2B:7E
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 019E1FECAE7DAD2CB763AF026BCB69F87FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 0BD5
Signing time: Wed 13 May 2026 06:01:05 +0000
Manifest this update: Wed 13 May 2026 06:01:05 +0000
Manifest next update: Thu 14 May 2026 06:01:05 +0000
Files and hashes: 1: 4AjGjVkO2tVBx0Eie_ffAJbIoko.roa (hash: HDPfPT6f6mvgy7P34ZeKqbqyBJoxXjtENIEEg/9aLlo=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: jpYVFrtWn4s4L4cImsEK3+IFAiGIzqp72qnM2NA2Mik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:ae:7d:ad:2c:b7:63:af:02:6b:cb:69:f8:7f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: May 13 06:01:05 2026 GMT
Not After : May 14 06:01:05 2026 GMT
Subject: CN=33de321932719b9509fbea5fede19b8df5632b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:18:bb:4d:59:e5:fa:20:b1:f2:2b:d8:ab:
81:54:37:a8:65:53:b6:ad:f2:ed:5d:cf:f8:7a:4d:
57:16:b6:98:59:08:68:43:97:a8:b4:26:cd:4f:8e:
91:50:88:a2:11:1e:5b:21:c7:62:e6:2d:52:f5:f6:
c0:ac:a9:e0:be:7d:ec:e0:3d:7d:12:32:3a:0b:4e:
fc:27:c5:eb:da:39:c9:bc:64:65:97:c0:83:97:b0:
a4:f2:44:0d:3f:42:63:dd:6e:83:f9:cc:4c:8b:28:
f3:c7:77:0b:9d:e7:23:2a:25:29:3d:97:8a:f8:90:
f7:af:b0:82:70:d1:17:b9:81:07:d2:0c:13:05:09:
61:f2:35:96:4f:da:95:6a:b8:57:98:4e:4c:29:64:
60:2b:8c:eb:76:89:4d:79:d8:10:5a:f5:ca:d9:84:
ce:85:6b:f7:69:19:92:70:33:59:cb:9a:35:52:4a:
02:88:1f:5c:ae:17:25:ef:9e:5b:fb:a4:1c:3e:f2:
d3:14:c4:1e:47:02:ac:56:e6:cb:b5:10:d0:f9:a7:
b5:66:12:ed:58:42:04:d8:dc:72:aa:0f:69:e9:0b:
74:ee:4d:e4:a2:da:fc:72:d7:d0:29:56:fb:15:e5:
63:03:f4:55:22:cd:7f:bb:07:29:2c:e8:95:da:e1:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:32:19:32:71:9B:95:09:FB:EA:5F:ED:E1:9B:8D:F5:63:2B:7E
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:43:ed:2e:0c:40:ca:50:e0:11:11:b7:26:08:33:ed:7f:57:
dd:b9:fa:55:00:d4:67:b7:cb:bf:53:41:b6:bc:85:06:27:f2:
d8:c1:8c:49:f3:5f:e4:d9:26:1b:87:eb:f3:ea:99:b2:43:56:
99:5c:8d:11:bf:70:69:38:4e:5a:90:c8:ba:bd:ff:44:ca:02:
8e:90:c5:fc:73:b4:b9:bf:6b:db:c8:c9:21:2d:38:97:e5:03:
f3:b9:3f:9a:29:ac:b6:8a:b8:1b:6d:78:e6:c1:bc:af:3a:a1:
a3:11:83:47:ea:d8:ef:b9:52:e7:2a:0e:5d:cd:3a:84:13:6d:
eb:d6:f8:0b:2e:97:23:5a:f0:ec:14:89:2a:35:3e:36:89:66:
dc:f8:8f:17:3b:b1:70:8f:04:ca:aa:4a:1b:40:fe:1e:82:9c:
0c:4c:66:94:af:30:44:15:59:0a:8f:f3:a7:dc:9b:8e:9d:b2:
7d:07:59:cd:d1:6e:9f:ab:2e:af:d5:50:4b:ef:be:ad:26:77:
43:35:f0:77:03:3c:4c:c8:bc:15:16:b9:2f:9a:d5:e2:a7:82:
2c:5e:12:f2:15:3f:57:ac:07:5e:00:d3:fb:c1:25:24:d2:3a:
a8:9d:c2:3b:1e:57:65:11:40:89:e8:f4:db:b3:6d:e5:95:27:
f3:f1:8d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7K59rSy3Y68Ca8tp+H/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj
Yzc0MzUwHhcNMjYwNTEzMDYwMTA1WhcNMjYwNTE0MDYwMTA1WjAzMTEwLwYDVQQD
EygzM2RlMzIxOTMyNzE5Yjk1MDlmYmVhNWZlZGUxOWI4ZGY1NjMyYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA528Yu01Z5fogsfIr2KuBVDeoZVO2
rfLtXc/4ek1XFraYWQhoQ5eotCbNT46RUIiiER5bIcdi5i1S9fbArKngvn3s4D19
EjI6C078J8Xr2jnJvGRll8CDl7Ck8kQNP0Jj3W6D+cxMiyjzx3cLnecjKiUpPZeK
+JD3r7CCcNEXuYEH0gwTBQlh8jWWT9qVarhXmE5MKWRgK4zrdolNedgQWvXK2YTO
hWv3aRmScDNZy5o1UkoCiB9crhcl755b+6QcPvLTFMQeRwKsVubLtRDQ+ae1ZhLt
WEIE2Nxyqg9p6Qt07k3kotr8ctfQKVb7FeVjA/RVIs1/uwcpLOiV2uFLRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPeMhkycZuVCfvqX+3hm431Yyt+MB8GA1UdIwQY
MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt
Yjg0NTNlZWJiMjY3LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3
LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEPtLgxA
ylDgERG3Jggz7X9X3bn6VQDUZ7fLv1NBtryFBify2MGMSfNf5NkmG4fr8+qZskNW
mVyNEb9waThOWpDIur3/RMoCjpDF/HO0ub9r28jJIS04l+UD87k/mimstoq4G214
5sG8rzqhoxGDR+rY77lS5yoOXc06hBNt69b4Cy6XI1rw7BSJKjU+Nolm3PiPFzux
cI8EyqpKG0D+HoKcDExmlK8wRBVZCo/zp9ybjp2yfQdZzdFun6sur9VQS+++rSZ3
QzXwdwM8TMi8FRa5L5rV4qeCLF4S8hU/V6wHXgDT+8ElJNI6qJ3COx5XZRFAiej0
27Nt5ZUn8/GNgA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:34 2026 by rpki-client