Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: EyUZI3RIRG0Gk4T8BuxJg0DloawQxy9kFP+ictcwutE=
Subject key identifier: 3E:2E:4C:A1:8E:D7:AA:CF:F8:34:3A:70:B7:15:62:B9:D5:AB:B2:C2
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 019E20232F20A18700370C3EEE02045E0436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 02A1
Signing time: Wed 13 May 2026 07:00:37 +0000
Manifest this update: Wed 13 May 2026 07:00:37 +0000
Manifest next update: Thu 14 May 2026 07:00:37 +0000
Files and hashes: 1: NpoFl8aCEfIX1DekH8Hxr-GsW5I.asa (hash: OTPlU6M/sI8rHqRDdKs1ngPrkO32rdeRFwTy9zgaXQE=)
2: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: gvXby+LFrUxLSQ1a9VGWnEbTfBEFXkzP1Kooeazys0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:2f:20:a1:87:00:37:0c:3e:ee:02:04:5e:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: May 13 07:00:37 2026 GMT
Not After : May 14 07:00:37 2026 GMT
Subject: CN=3e2e4ca18ed7aacff8343a70b71562b9d5abb2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:c4:0d:7c:8f:cf:90:ee:0a:46:ec:ab:ed:
9b:9a:68:87:73:26:98:99:60:45:aa:97:9b:ca:05:
08:31:3f:95:bf:c9:2e:22:52:36:4a:9e:07:f6:38:
a2:86:af:ac:2d:c4:42:78:c9:58:3b:73:e1:78:64:
c7:71:c4:14:24:2c:c0:16:76:c9:12:9d:44:80:3e:
3f:79:43:b4:6e:2c:48:cd:ce:68:00:ae:b8:83:20:
06:c8:35:d6:d0:92:57:4d:f4:9f:c9:7a:e4:b1:91:
7a:8b:76:d1:ca:7a:b1:e8:f1:3e:53:53:55:e9:7a:
52:52:fa:fb:2e:25:ba:4a:0c:f6:88:77:a8:de:51:
73:02:48:04:6f:be:5e:d9:7a:c3:eb:5d:85:9a:f4:
59:dc:9f:59:36:9a:0f:a2:2d:4c:21:a9:7f:c3:d1:
e1:69:0d:62:99:f2:d7:a0:4c:0e:c3:95:7b:8c:2c:
dd:44:b1:a9:db:e4:31:d8:58:95:3e:e0:c6:03:97:
cf:1f:02:ef:a4:48:57:70:06:75:0a:6d:89:7e:9d:
23:5b:2a:62:ce:13:7e:48:bc:d0:c0:f6:d2:ba:8a:
4f:2d:de:0d:c5:32:57:95:6c:ba:c3:7b:84:2d:7e:
8f:c2:56:5d:55:01:8e:9c:18:6b:72:d9:d7:f0:54:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:4C:A1:8E:D7:AA:CF:F8:34:3A:70:B7:15:62:B9:D5:AB:B2:C2
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:bc:5a:2f:36:11:9a:42:bc:44:b5:38:59:de:87:14:4a:
2b:a3:fe:13:3f:82:d4:c0:8b:15:6e:ee:66:88:59:ec:7f:b4:
df:ce:38:d9:ff:db:31:2d:ee:fe:bd:0e:2b:fb:6c:b4:c9:62:
9f:c7:7b:47:4f:47:f4:bb:16:79:61:69:ff:cc:8b:79:f9:c7:
f8:39:20:62:08:8c:a6:c9:83:70:e0:bf:50:ef:e5:29:61:cb:
c7:e5:b3:04:8c:b3:d6:54:14:73:62:81:29:31:3a:96:bd:d3:
51:c0:f6:23:36:ee:66:ac:6c:1b:ad:44:0d:80:e6:99:71:a6:
dc:8f:cf:1e:43:53:32:5b:a5:59:5f:58:cb:80:03:ba:d6:0e:
06:60:85:1f:1b:48:d1:91:37:1e:98:44:9a:37:bc:62:54:e5:
00:03:1f:10:b1:3b:ce:ea:8a:67:be:a5:4f:b3:39:21:58:26:
a5:a8:79:e8:bb:da:37:1e:91:a6:ca:46:03:ae:fe:87:35:ba:
a0:a8:06:c3:c0:5f:61:6c:99:57:cb:2c:7e:b5:7f:e7:5a:33:
43:f1:93:82:03:83:d4:6a:3b:90:83:60:33:ad:bf:ab:a2:af:
9d:b6:ac:4d:05:7b:14:3e:2d:ba:e5:02:a6:2e:2b:33:89:93:
5b:89:61:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gIy8goYcANww+7gIEXgQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYzhjMDY0NmViNmNiZjI2OThiYjBhNzYwNTAzYmNkYjkx
ZjFhNWMwHhcNMjYwNTEzMDcwMDM3WhcNMjYwNTE0MDcwMDM3WjAzMTEwLwYDVQQD
EygzZTJlNGNhMThlZDdhYWNmZjgzNDNhNzBiNzE1NjJiOWQ1YWJiMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbvEDXyPz5DuCkbsq+2bmmiHcyaY
mWBFqpebygUIMT+Vv8kuIlI2Sp4H9jiihq+sLcRCeMlYO3PheGTHccQUJCzAFnbJ
Ep1EgD4/eUO0bixIzc5oAK64gyAGyDXW0JJXTfSfyXrksZF6i3bRynqx6PE+U1NV
6XpSUvr7LiW6Sgz2iHeo3lFzAkgEb75e2XrD612FmvRZ3J9ZNpoPoi1MIal/w9Hh
aQ1imfLXoEwOw5V7jCzdRLGp2+Qx2FiVPuDGA5fPHwLvpEhXcAZ1Cm2Jfp0jWypi
zhN+SLzQwPbSuopPLd4NxTJXlWy6w3uELX6PwlZdVQGOnBhrctnX8FQkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4uTKGO16rP+DQ6cLcVYrnVq7LCMB8GA1UdIwQY
MBaAFMvIwGRutsvyaYuwp2BQO825HxpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgt
OTA4ZThiMjc4NTUyLzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgtOTA4ZThiMjc4NTUy
LzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmru8Wi82
EZpCvES1OFnehxRKK6P+Ez+C1MCLFW7uZohZ7H+038442f/bMS3u/r0OK/tstMli
n8d7R09H9LsWeWFp/8yLefnH+DkgYgiMpsmDcOC/UO/lKWHLx+WzBIyz1lQUc2KB
KTE6lr3TUcD2IzbuZqxsG61EDYDmmXGm3I/PHkNTMlulWV9Yy4ADutYOBmCFHxtI
0ZE3HphEmje8YlTlAAMfELE7zuqKZ76lT7M5IVgmpah56LvaNx6RpspGA67+hzW6
oKgGw8BfYWyZV8ssfrV/51ozQ/GTggOD1Go7kINgM62/q6KvnbasTQV7FD4tuuUC
pi4rM4mTW4lhNg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:35:35 2026 by rpki-client