Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: Q9ADD2Nz16mXSD5Ufm8JmDWH4V/enx+ea9wkvzrnz4Y=
Subject key identifier: 4D:82:6B:C3:20:0C:7D:A9:BD:6A:E5:1B:5C:0D:17:33:6D:66:9B:F1
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019E1D90D611EA8CD31BCC14BF33C30AB98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 0877
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: A+YxACTvOc4ha0EUMlz2b+X4sCTw9Vf/5k0sJAYro4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d6:11:ea:8c:d3:1b:cc:14:bf:33:c3:0a:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=4d826bc3200c7da9bd6ae51b5c0d17336d669bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:e7:aa:34:84:77:79:46:9a:61:50:a1:93:
94:5d:4e:c1:80:67:c9:24:f7:3a:27:bc:2d:76:95:
3a:85:3f:b1:6b:88:95:16:40:94:11:8b:dd:6d:76:
1d:04:84:1a:3d:83:ac:06:09:c0:95:00:05:bd:01:
7e:57:13:90:8d:96:fd:10:7a:ae:e9:be:5e:6b:f7:
a8:09:f2:be:dd:aa:b5:5c:96:a7:36:21:0e:27:12:
6f:e1:6e:d7:34:60:2b:e6:71:71:c7:f1:b4:36:4d:
7e:06:62:c5:7d:a6:a2:d2:a7:1e:d2:bc:c3:45:a1:
9b:8c:93:4e:1d:93:a0:3c:c4:78:37:21:90:16:2a:
09:96:30:56:e0:0d:8d:ea:d7:15:d8:a2:87:b6:95:
90:13:3e:ef:dc:d2:53:65:3c:8a:c7:91:62:db:8c:
e0:bd:c0:4e:4f:6a:5d:39:20:94:06:32:fb:81:85:
5e:12:8f:0c:47:1c:27:84:aa:43:4f:17:b5:ce:33:
e7:c3:59:bf:72:ba:75:83:23:be:cf:c8:d6:5f:08:
97:a6:57:33:40:7b:4c:15:f6:52:f6:5e:8c:80:70:
f9:30:b3:c6:7b:53:2e:77:68:51:20:f6:7d:06:18:
cc:a7:b6:cd:11:c5:b0:d3:9b:c4:17:6b:2f:8c:48:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:6B:C3:20:0C:7D:A9:BD:6A:E5:1B:5C:0D:17:33:6D:66:9B:F1
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:10:f0:13:a5:a8:af:13:77:04:8d:b4:e1:ef:56:e3:1f:
1d:91:c3:d6:bb:67:04:3a:c6:23:3e:7e:58:f4:59:3f:e9:56:
03:77:43:08:da:cd:1c:a1:54:80:47:a4:85:18:99:70:79:df:
e2:5e:f2:11:57:ed:03:79:81:12:22:9f:91:9a:26:71:26:71:
0a:38:7f:91:61:c2:e4:f8:63:a2:a0:0e:d4:61:b7:2f:5c:56:
b8:06:77:f1:07:87:2c:23:d7:75:3f:d1:54:94:31:91:f4:31:
a5:3f:b2:76:71:63:e1:51:57:6b:50:5c:92:f2:7f:d4:c5:da:
e7:51:3a:17:10:21:63:f4:81:d3:2c:60:43:ca:93:71:ca:a8:
2b:47:09:e5:29:d0:18:16:55:ce:9a:0f:01:f1:13:c8:2d:02:
6e:88:10:3f:61:a3:49:dc:c9:5d:26:16:87:66:9e:fd:b6:69:
ca:a6:2f:bf:0f:50:b0:d2:8b:6d:c7:fb:8b:05:be:63:e4:fb:
57:d0:1b:e0:74:48:e5:fa:8f:25:56:e4:da:89:46:3f:16:af:
d1:c6:7e:9f:39:2a:79:66:ed:fe:80:f7:62:d9:79:91:cc:46:
e1:8c:7f:de:6c:24:42:24:af:58:16:f8:da:41:6d:14:09:20:
f2:fc:4c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkNYR6ozTG8wUvzPDCrmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5
YTI2OTQwHhcNMjYwNTEyMTkwMTMxWhcNMjYwNTEzMTkwMTMxWjAzMTEwLwYDVQQD
Eyg0ZDgyNmJjMzIwMGM3ZGE5YmQ2YWU1MWI1YzBkMTczMzZkNjY5YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/nqjSEd3lGmmFQoZOUXU7BgGfJ
JPc6J7wtdpU6hT+xa4iVFkCUEYvdbXYdBIQaPYOsBgnAlQAFvQF+VxOQjZb9EHqu
6b5ea/eoCfK+3aq1XJanNiEOJxJv4W7XNGAr5nFxx/G0Nk1+BmLFfaai0qce0rzD
RaGbjJNOHZOgPMR4NyGQFioJljBW4A2N6tcV2KKHtpWQEz7v3NJTZTyKx5Fi24zg
vcBOT2pdOSCUBjL7gYVeEo8MRxwnhKpDTxe1zjPnw1m/crp1gyO+z8jWXwiXplcz
QHtMFfZS9l6MgHD5MLPGe1Mud2hRIPZ9BhjMp7bNEcWw05vEF2svjEgr/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2Ca8MgDH2pvWrlG1wNFzNtZpvxMB8GA1UdIwQY
MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSQQ8BOl
qK8TdwSNtOHvVuMfHZHD1rtnBDrGIz5+WPRZP+lWA3dDCNrNHKFUgEekhRiZcHnf
4l7yEVftA3mBEiKfkZomcSZxCjh/kWHC5PhjoqAO1GG3L1xWuAZ38QeHLCPXdT/R
VJQxkfQxpT+ydnFj4VFXa1BckvJ/1MXa51E6FxAhY/SB0yxgQ8qTccqoK0cJ5SnQ
GBZVzpoPAfETyC0CbogQP2GjSdzJXSYWh2ae/bZpyqYvvw9QsNKLbcf7iwW+Y+T7
V9Ab4HRI5fqPJVbk2olGPxav0cZ+nzkqeWbt/oD3Ytl5kcxG4Yx/3mwkQiSvWBb4
2kFtFAkg8vxMhg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:49:24 2026 by rpki-client