Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: oagWxcKfRkO5PQa4x/GsqWsNjhnXkgUJvwjmF+0tLB4=
Subject key identifier: 26:AE:78:EC:A3:20:0E:0B:C5:15:62:F6:BE:82:DC:9B:15:1A:93:A6
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019E1D22346980EB47AB9C42A8E582B24D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: zFmLUTKijjdtoNg1sdHjnaT+fTX/Du/dfhyxr5bWRUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:34:69:80:eb:47:ab:9c:42:a8:e5:82:b2:4d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=26ae78eca3200e0bc51562f6be82dc9b151a93a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:ac:30:5b:da:86:1c:67:41:89:7d:80:13:
93:a2:bc:89:14:8f:5b:3e:31:7f:e4:85:13:b5:9c:
ee:3a:ab:79:f8:72:73:e1:2d:57:17:09:c1:ea:07:
29:04:b0:9b:2b:45:16:f5:8c:13:65:a7:d0:5e:6c:
cc:2e:87:93:6d:f9:91:7c:8e:e1:cf:7b:f5:d2:2f:
a7:8c:a4:24:76:b3:5b:3e:59:10:cc:0d:c2:cf:e9:
d9:b7:45:e8:a5:35:20:e3:f5:4d:b1:0e:82:d8:4b:
4c:23:f8:ca:a6:5e:8c:ef:09:61:df:8d:5f:3c:52:
d8:b3:75:03:e7:0c:48:25:43:c6:ce:95:f5:b6:6a:
12:06:a5:16:57:41:5d:88:57:aa:82:ce:40:d1:4f:
41:ef:c3:49:38:36:3b:d7:9f:f6:15:d4:2d:61:8b:
ea:5c:3f:49:75:18:40:51:6f:28:80:f8:6d:c2:07:
c2:e8:e7:10:00:aa:a0:96:41:8f:92:5a:fe:ea:49:
7c:fe:d3:88:57:3d:c5:a9:d5:23:0c:11:ca:27:dd:
c6:b0:b2:45:33:5c:92:c9:c0:08:54:b8:7f:0c:3c:
e2:67:3b:67:0f:de:05:e6:38:07:1b:b2:39:64:ac:
6f:fa:e1:26:27:d9:42:af:dc:69:b7:f4:8b:95:87:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:78:EC:A3:20:0E:0B:C5:15:62:F6:BE:82:DC:9B:15:1A:93:A6
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d9:e6:cc:7c:96:9f:90:4f:76:f2:04:4d:88:11:1b:0d:f0:
6d:49:e2:ff:51:4c:14:dc:64:f1:a7:9a:4e:02:2f:24:dc:06:
1c:2d:f1:d0:59:68:a0:f3:f4:d0:74:f3:51:bf:95:6e:7c:51:
da:a4:c6:ae:ab:56:32:55:c0:3b:6c:78:6c:e3:46:58:52:e4:
ee:69:b4:c6:d9:f9:16:3e:5f:a6:c1:60:98:08:e0:f4:84:2e:
da:cc:63:fc:f9:1f:8a:52:06:9a:d5:d6:db:24:83:39:c4:4e:
de:14:3d:ee:ea:8a:ec:1d:aa:a2:31:da:5d:ac:ff:dd:36:28:
60:87:76:55:ea:37:38:43:af:e4:7c:5f:3a:7f:e9:f7:df:2c:
5c:26:44:24:25:4d:6f:c9:66:96:04:b0:0a:36:cf:a5:e0:75:
c2:3b:28:9c:bc:7d:43:1a:eb:55:4f:53:04:d5:19:41:52:c1:
c0:33:e1:b3:09:f0:e3:6d:03:42:0e:83:95:19:fc:5d:9e:42:
18:5d:d8:86:03:b7:fb:83:e6:79:cd:49:e8:17:57:67:bf:4e:
e4:ec:2f:eb:72:80:0d:cc:6a:a7:7d:cc:57:f3:c6:26:ac:f5:
f3:1a:09:5b:90:7e:52:d4:01:b1:74:43:1c:e4:29:01:97:b5:
48:1a:02:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIjRpgOtHq5xCqOWCsk05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx
NDc3N2IwHhcNMjYwNTEyMTcwMDQxWhcNMjYwNTEzMTcwMDQxWjAzMTEwLwYDVQQD
EygyNmFlNzhlY2EzMjAwZTBiYzUxNTYyZjZiZTgyZGM5YjE1MWE5M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM6sMFvahhxnQYl9gBOToryJFI9b
PjF/5IUTtZzuOqt5+HJz4S1XFwnB6gcpBLCbK0UW9YwTZafQXmzMLoeTbfmRfI7h
z3v10i+njKQkdrNbPlkQzA3Cz+nZt0XopTUg4/VNsQ6C2EtMI/jKpl6M7wlh341f
PFLYs3UD5wxIJUPGzpX1tmoSBqUWV0FdiFeqgs5A0U9B78NJODY715/2FdQtYYvq
XD9JdRhAUW8ogPhtwgfC6OcQAKqglkGPklr+6kl8/tOIVz3FqdUjDBHKJ93GsLJF
M1ySycAIVLh/DDziZztnD94F5jgHG7I5ZKxv+uEmJ9lCr9xpt/SLlYc53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaueOyjIA4LxRVi9r6C3JsVGpOmMB8GA1UdIwQY
MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt
MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh
LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9nmzHyW
n5BPdvIETYgRGw3wbUni/1FMFNxk8aeaTgIvJNwGHC3x0FlooPP00HTzUb+VbnxR
2qTGrqtWMlXAO2x4bONGWFLk7mm0xtn5Fj5fpsFgmAjg9IQu2sxj/PkfilIGmtXW
2ySDOcRO3hQ97uqK7B2qojHaXaz/3TYoYId2Veo3OEOv5HxfOn/p998sXCZEJCVN
b8lmlgSwCjbPpeB1wjsonLx9QxrrVU9TBNUZQVLBwDPhswnw420DQg6DlRn8XZ5C
GF3YhgO3+4Pmec1J6BdXZ79O5Owv63KADcxqp33MV/PGJqz18xoJW5B+UtQBsXRD
HOQpAZe1SBoCbw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:29:40 2026 by rpki-client