Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: myqUwA29bImlbmsHPmbBgDgFgNA8yR0pCdMXt7xYwo8=
Subject key identifier: 8C:A7:4E:6F:A0:90:B2:B8:AD:40:6D:31:90:3E:CC:40:91:33:3C:94
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019E1FEC55AEFF629E5C0522B261A4B7D4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 025A
Signing time: Wed 13 May 2026 06:00:42 +0000
Manifest this update: Wed 13 May 2026 06:00:42 +0000
Manifest next update: Thu 14 May 2026 06:00:42 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: ZJKSqFJlbsFoUklDCw4Coyr/jL0izwvpK72MfIx0TAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:55:ae:ff:62:9e:5c:05:22:b2:61:a4:b7:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: May 13 06:00:42 2026 GMT
Not After : May 14 06:00:42 2026 GMT
Subject: CN=8ca74e6fa090b2b8ad406d31903ecc4091333c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:6c:8e:c6:6b:48:a2:e9:c9:ac:7c:58:74:
62:95:37:c8:9a:20:09:89:75:0e:01:96:07:9c:61:
65:89:fd:7e:5f:1e:d8:d3:d0:a4:17:6a:9f:d9:86:
0e:ef:60:6d:57:01:5e:53:b8:75:4f:9a:0b:04:58:
32:55:76:69:a1:60:c0:4a:f3:3a:8e:f9:4b:da:d8:
d6:6b:97:91:e4:af:a0:7d:53:f5:45:4b:22:67:81:
43:e0:c9:ea:e2:d1:98:a8:c8:97:d2:ea:c3:08:b9:
88:a5:8b:3d:38:25:26:e3:9e:60:db:40:20:b4:38:
10:df:1b:bd:d0:9b:c3:85:b0:b2:12:c2:2f:56:81:
ec:02:06:d2:62:de:72:13:cd:04:87:f2:b0:0c:d1:
e4:c8:67:52:3f:ea:62:75:d3:97:73:a5:77:2c:bb:
79:21:59:87:f5:69:4b:83:68:b1:b6:09:78:92:31:
ca:ee:7c:1a:aa:25:af:0b:25:36:74:24:d5:b1:a9:
98:03:3a:49:9e:6f:d2:ef:55:83:2f:6e:69:8c:1e:
40:da:6e:12:ad:f3:bc:a3:88:8b:81:99:d0:f8:86:
18:2b:93:17:9e:ab:21:cd:e5:66:16:40:5f:e9:da:
d9:b6:70:8a:2d:02:87:d0:f2:bf:d7:f4:11:37:d7:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:4E:6F:A0:90:B2:B8:AD:40:6D:31:90:3E:CC:40:91:33:3C:94
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b3:47:28:62:32:c2:c7:4f:01:3a:2c:4c:40:7d:ae:38:01:
45:be:db:0a:d8:45:e2:42:3a:f5:58:b1:b5:9d:eb:40:40:34:
dd:f8:97:cc:88:6b:00:8f:ce:cf:3e:a6:65:5d:52:bc:ce:c4:
c8:af:23:b8:fc:5c:f3:be:1e:23:ba:18:75:a4:37:72:af:84:
45:d0:7f:f1:b0:a4:7e:57:b2:d5:6f:51:f2:96:38:3f:d2:56:
32:b0:91:57:90:cb:42:ca:99:37:7b:d4:b1:20:eb:e5:44:83:
6c:3e:24:a2:5d:f7:01:c7:ca:40:9a:11:9c:37:05:25:f6:30:
57:c3:29:9f:8b:d1:13:1f:1c:fb:59:4b:d9:84:c3:3c:c9:79:
e0:e4:b0:b4:23:c8:ce:47:74:ed:a6:b4:be:a0:00:f7:6f:2c:
52:86:d6:c4:8e:47:58:59:b4:c8:bb:15:4d:9b:15:1d:cb:df:
d6:ef:8c:7b:13:99:ff:4e:11:0e:95:01:ab:7d:56:1e:c7:25:
21:9e:22:a0:d4:62:1f:ab:b7:fe:27:38:11:24:4f:5e:3c:76:
0d:f1:4a:c4:db:8d:52:10:86:54:ae:e7:d2:ef:76:02:9e:cb:
7a:91:39:d7:89:79:78:1e:a4:d3:d0:a0:3c:75:13:9f:65:e7:
95:06:be:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7FWu/2KeXAUismGkt9SyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2Y2ZjZlMTUwYTYwNDNjYjIwOTNiMDhkZGQzYTJhNGFi
OTdhMzcwHhcNMjYwNTEzMDYwMDQyWhcNMjYwNTE0MDYwMDQyWjAzMTEwLwYDVQQD
Eyg4Y2E3NGU2ZmEwOTBiMmI4YWQ0MDZkMzE5MDNlY2M0MDkxMzMzYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge9sjsZrSKLpyax8WHRilTfImiAJ
iXUOAZYHnGFlif1+Xx7Y09CkF2qf2YYO72BtVwFeU7h1T5oLBFgyVXZpoWDASvM6
jvlL2tjWa5eR5K+gfVP1RUsiZ4FD4Mnq4tGYqMiX0urDCLmIpYs9OCUm455g20Ag
tDgQ3xu90JvDhbCyEsIvVoHsAgbSYt5yE80Eh/KwDNHkyGdSP+piddOXc6V3LLt5
IVmH9WlLg2ixtgl4kjHK7nwaqiWvCyU2dCTVsamYAzpJnm/S71WDL25pjB5A2m4S
rfO8o4iLgZnQ+IYYK5MXnqshzeVmFkBf6drZtnCKLQKH0PK/1/QRN9e+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIynTm+gkLK4rUBtMZA+zECRMzyUMB8GA1UdIwQY
MBaAFGF/b24VCmBDyyCTsI3dOipKuXo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMt
NzFjM2Q2YWEyODk5LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMtNzFjM2Q2YWEyODk5
LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7NHKGIy
wsdPATosTEB9rjgBRb7bCthF4kI69VixtZ3rQEA03fiXzIhrAI/Ozz6mZV1SvM7E
yK8juPxc874eI7oYdaQ3cq+ERdB/8bCkfley1W9R8pY4P9JWMrCRV5DLQsqZN3vU
sSDr5USDbD4kol33AcfKQJoRnDcFJfYwV8Mpn4vREx8c+1lL2YTDPMl54OSwtCPI
zkd07aa0vqAA928sUobWxI5HWFm0yLsVTZsVHcvf1u+MexOZ/04RDpUBq31WHscl
IZ4ioNRiH6u3/ic4ESRPXjx2DfFKxNuNUhCGVK7n0u92Ap7LepE514l5eB6k09Cg
PHUTn2XnlQa+Ow==
-----END CERTIFICATE-----
Generated at Wed May 13 15:37:54 2026 by rpki-client