Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: MR+t9XHncX01vazm28Ta+mffLjCnZvlLBdojJPc5OV8=
Subject key identifier: F2:A4:80:EF:1A:D5:F5:9D:F6:5D:2F:A6:8B:FC:69:31:1E:42:FB:87
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 019E2135DC7A70F6F165AF9E300E3422B08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 0984
Signing time: Wed 13 May 2026 12:00:38 +0000
Manifest this update: Wed 13 May 2026 12:00:38 +0000
Manifest next update: Thu 14 May 2026 12:00:38 +0000
Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: TonJfC1Cci1yDOPq7ixkIoTTwL6F0iivKH+HgAo14tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:dc:7a:70:f6:f1:65:af:9e:30:0e:34:22:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: May 13 12:00:38 2026 GMT
Not After : May 14 12:00:38 2026 GMT
Subject: CN=f2a480ef1ad5f59df65d2fa68bfc69311e42fb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:63:cc:a4:0d:16:56:02:39:b9:bb:70:86:
76:c3:f1:3d:f8:69:26:d0:03:9f:ff:89:dc:fe:75:
d2:f1:f0:64:c1:13:1e:8d:83:56:b7:4e:8a:58:6d:
8c:3f:a0:5f:59:dc:d6:fb:8f:6a:e4:ed:ad:f0:1a:
a3:1b:4b:c5:6b:8a:31:7c:b0:5b:ce:20:55:d8:03:
fe:b1:82:99:be:40:d4:68:5a:0a:cc:33:28:40:a9:
83:91:24:93:1c:7e:43:12:08:b9:84:ec:6b:28:5a:
93:7a:2f:20:50:26:0b:d7:e4:52:cd:a6:84:07:c1:
51:2d:21:69:37:d0:72:5f:b6:0c:1d:99:07:2b:a6:
5e:ac:da:90:ed:dc:db:ae:1d:49:ce:04:1b:ea:03:
77:60:7e:b5:22:b9:14:d2:00:cd:d2:cf:fb:a3:31:
3b:5c:26:71:ac:90:40:20:b9:7b:31:85:5d:49:b2:
45:ff:95:d7:c2:c7:ab:76:73:3e:1a:c8:e5:68:1d:
7f:39:23:d7:df:ac:c2:15:f6:2d:cd:c9:84:dd:db:
52:13:ec:dc:55:b0:e4:bb:fb:c7:b3:84:9f:90:65:
78:30:70:a3:83:1c:71:24:fb:42:03:e7:14:fa:9e:
16:ef:a5:f3:6d:10:89:f9:06:88:bc:cf:49:5c:a3:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:80:EF:1A:D5:F5:9D:F6:5D:2F:A6:8B:FC:69:31:1E:42:FB:87
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:2f:53:65:18:5c:05:ae:f8:e7:fb:45:8f:f3:3f:c8:e3:
1e:49:66:ed:49:84:07:cb:2a:d8:04:e4:5f:76:ba:6c:b4:b3:
e4:0a:11:a5:9e:80:5a:4b:c9:6f:bf:b3:7e:a1:52:68:91:bf:
d8:10:5e:74:c9:c1:5a:bd:10:1a:e6:9b:cd:f1:46:58:f7:6c:
2a:6a:b3:ea:13:48:58:0e:6e:df:9b:7e:fe:a5:81:23:50:9f:
7d:da:a6:d0:8e:11:54:8b:60:a6:86:6e:d5:3c:fc:c0:ec:5e:
88:6e:9a:c9:3a:c9:df:79:02:9d:5f:dc:b8:a5:5f:ad:9a:be:
41:e8:41:98:68:b2:d3:3e:8a:6f:4e:0f:82:17:a5:2a:80:6b:
19:c6:b5:64:52:c1:ac:45:58:9b:52:09:0b:47:24:28:ee:2c:
64:db:3d:c7:f4:7e:1d:d6:8e:94:79:d5:84:d0:0f:7e:1a:b5:
0e:38:8e:84:42:73:63:92:30:35:21:ec:2f:65:15:32:6f:9f:
db:f9:2d:d8:12:ff:0f:10:3b:13:a0:ed:f9:cb:26:84:da:74:
45:78:ba:3f:91:25:5f:a2:a1:1b:78:4b:b0:f6:f8:96:a6:33:
be:5d:3d:a7:65:f0:65:b2:e0:17:b2:48:3b:c2:a7:ac:b5:d2:
20:23:10:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNdx6cPbxZa+eMA40IrCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy
YThlYWMwHhcNMjYwNTEzMTIwMDM4WhcNMjYwNTE0MTIwMDM4WjAzMTEwLwYDVQQD
EyhmMmE0ODBlZjFhZDVmNTlkZjY1ZDJmYTY4YmZjNjkzMTFlNDJmYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX5jzKQNFlYCObm7cIZ2w/E9+Gkm
0AOf/4nc/nXS8fBkwRMejYNWt06KWG2MP6BfWdzW+49q5O2t8BqjG0vFa4oxfLBb
ziBV2AP+sYKZvkDUaFoKzDMoQKmDkSSTHH5DEgi5hOxrKFqTei8gUCYL1+RSzaaE
B8FRLSFpN9ByX7YMHZkHK6ZerNqQ7dzbrh1JzgQb6gN3YH61IrkU0gDN0s/7ozE7
XCZxrJBAILl7MYVdSbJF/5XXwserdnM+GsjlaB1/OSPX36zCFfYtzcmE3dtSE+zc
VbDku/vHs4SfkGV4MHCjgxxxJPtCA+cU+p4W76XzbRCJ+QaIvM9JXKMPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKkgO8a1fWd9l0vpov8aTEeQvuHMB8GA1UdIwQY
MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct
ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz
LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi8vU2UY
XAWu+Of7RY/zP8jjHklm7UmEB8sq2ATkX3a6bLSz5AoRpZ6AWkvJb7+zfqFSaJG/
2BBedMnBWr0QGuabzfFGWPdsKmqz6hNIWA5u35t+/qWBI1Cffdqm0I4RVItgpoZu
1Tz8wOxeiG6ayTrJ33kCnV/cuKVfrZq+QehBmGiy0z6Kb04PghelKoBrGca1ZFLB
rEVYm1IJC0ckKO4sZNs9x/R+HdaOlHnVhNAPfhq1DjiOhEJzY5IwNSHsL2UVMm+f
2/kt2BL/DxA7E6Dt+csmhNp0RXi6P5ElX6KhG3hLsPb4lqYzvl09p2XwZbLgF7JI
O8KnrLXSICMQUQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:07:12 2026 by rpki-client