Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: 2ULzT1oQACRLNyLawKN4jjYgNUk3T/VEbuYA0Y0M0Mc=
Subject key identifier: 21:B0:D9:93:9D:AF:74:2A:4D:30:6A:4A:36:83:AD:66:40:44:54:D2
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019E1DFE875F34F87D2D7628C89CAAEDF667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 0118
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: 4jN70LQR6FlyXHOJ57qkz9YlOLgSM5l3+uKcN3QwItY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:87:5f:34:f8:7d:2d:76:28:c8:9c:aa:ed:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=21b0d9939daf742a4d306a4a3683ad66404454d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:e8:a6:dd:74:a6:d3:4e:aa:60:95:b9:ec:
30:00:88:07:d0:5b:d8:7d:eb:e3:0c:e5:cc:7c:2b:
5a:13:79:e4:35:df:4d:8e:03:5f:c6:13:65:59:9e:
74:99:e8:94:33:4c:e5:b8:34:ac:6c:08:c1:b6:d2:
67:ad:f3:6b:1c:7a:f1:b3:68:7c:36:9f:57:67:0b:
dc:d1:98:d1:f8:f9:68:fd:bc:02:0e:3f:f5:ad:00:
e1:f8:24:21:28:af:25:bc:31:62:2c:54:cc:ba:54:
ee:02:4c:09:a7:70:1d:be:bf:03:72:8b:db:f0:b3:
f1:47:36:eb:00:48:7a:32:c4:99:8c:ff:28:ad:a5:
6d:2d:b9:ba:98:3b:9a:e2:84:c7:2a:28:f6:33:cd:
53:c6:03:33:c6:22:3d:62:85:32:cf:14:26:b1:df:
ca:63:bb:42:dc:77:ed:31:7c:c7:35:5a:f6:95:d1:
07:f3:49:94:32:25:53:6e:42:b5:0a:df:3a:9e:82:
b1:21:42:57:f1:4e:1a:67:7c:8b:59:bd:14:4c:33:
46:cc:95:ec:ff:da:ff:7a:3d:40:1c:20:0d:20:19:
c5:62:10:32:f9:b7:5f:1e:3e:75:42:6a:38:28:fe:
14:86:73:49:20:d9:e4:c9:5c:96:07:05:0e:a1:b3:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:D9:93:9D:AF:74:2A:4D:30:6A:4A:36:83:AD:66:40:44:54:D2
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9b:8c:c5:6b:1c:bc:cd:23:56:ea:a5:54:c2:bb:3c:57:05:
44:4f:8d:3c:21:cb:67:37:bc:2e:e5:a6:7e:4d:30:64:ff:fe:
68:94:63:01:cd:99:23:f8:f7:d6:33:b4:d6:ab:76:88:9a:23:
87:67:4a:fc:2e:ce:44:03:a4:34:13:cb:17:9a:ac:29:63:22:
a9:6d:54:d7:8f:2e:80:44:95:12:46:20:08:02:59:a3:37:da:
f9:e8:fa:91:a6:aa:dd:a8:f1:61:fb:f7:36:2c:20:77:29:ea:
88:15:09:b5:f9:0a:81:c9:97:0e:78:c1:69:82:3d:4d:0b:40:
5a:53:94:52:2b:14:32:eb:48:bd:84:d1:b8:1d:2c:c1:61:ec:
95:61:98:91:68:fc:34:28:43:94:99:1c:1c:35:8f:a0:f7:18:
62:5a:43:da:21:14:e0:00:3e:90:a2:b8:b3:00:56:50:d7:69:
1e:ee:60:f6:67:55:70:66:ae:51:7e:2b:1d:cd:96:71:e9:54:
0e:ac:8b:9e:82:a8:ad:66:99:ba:4b:75:43:46:5f:94:8a:c5:
a8:6c:2f:91:45:be:fc:62:26:9c:69:e2:e5:4c:d0:0b:45:ac:
34:e7:da:90:fe:f5:eb:79:fc:a8:e3:62:a2:1f:0b:95:9a:77:
e4:f6:21:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/odfNPh9LXYoyJyq7fZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YmIyYzE0OGVmMGVlMDBmZjVhMjIxYWYxYmM2MWM3ZTE4
YWE0YmMwHhcNMjYwNTEyMjEwMTIwWhcNMjYwNTEzMjEwMTIwWjAzMTEwLwYDVQQD
EygyMWIwZDk5MzlkYWY3NDJhNGQzMDZhNGEzNjgzYWQ2NjQwNDQ1NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXnopt10ptNOqmCVuewwAIgH0FvY
fevjDOXMfCtaE3nkNd9NjgNfxhNlWZ50meiUM0zluDSsbAjBttJnrfNrHHrxs2h8
Np9XZwvc0ZjR+Plo/bwCDj/1rQDh+CQhKK8lvDFiLFTMulTuAkwJp3Advr8Dcovb
8LPxRzbrAEh6MsSZjP8oraVtLbm6mDua4oTHKij2M81TxgMzxiI9YoUyzxQmsd/K
Y7tC3HftMXzHNVr2ldEH80mUMiVTbkK1Ct86noKxIUJX8U4aZ3yLWb0UTDNGzJXs
/9r/ej1AHCANIBnFYhAy+bdfHj51Qmo4KP4UhnNJINnkyVyWBwUOobPrawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGw2ZOdr3QqTTBqSjaDrWZARFTSMB8GA1UdIwQY
MBaAFMm7LBSO8O4A/1oiGvG8YcfhiqS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUt
MmVhNzA5OGZlODg1LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUtMmVhNzA5OGZlODg1
LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5uMxWsc
vM0jVuqlVMK7PFcFRE+NPCHLZze8LuWmfk0wZP/+aJRjAc2ZI/j31jO01qt2iJoj
h2dK/C7ORAOkNBPLF5qsKWMiqW1U148ugESVEkYgCAJZozfa+ej6kaaq3ajxYfv3
NiwgdynqiBUJtfkKgcmXDnjBaYI9TQtAWlOUUisUMutIvYTRuB0swWHslWGYkWj8
NChDlJkcHDWPoPcYYlpD2iEU4AA+kKK4swBWUNdpHu5g9mdVcGauUX4rHc2WcelU
DqyLnoKorWaZukt1Q0ZflIrFqGwvkUW+/GImnGni5UzQC0WsNOfakP7163n8qONi
oh8LlZp35PYhUA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:05:53 2026 by rpki-client