Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: oMoPzOImAqj7mLrg1uzbop7INxOnyt/lmLMlCcRFrJI=
Subject key identifier: 16:3D:2E:C1:52:4F:51:91:C2:91:4A:4D:4F:49:90:DD:B1:5A:5C:03
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019E1E6C96E3EDAAB34BDCF19E506EA05D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 14D9
Signing time: Tue 12 May 2026 23:01:33 +0000
Manifest this update: Tue 12 May 2026 23:01:33 +0000
Manifest next update: Wed 13 May 2026 23:01:33 +0000
Files and hashes: 1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
2: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
3: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
4: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
5: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: V8Cf3Xch1KDokbPxrx2aP7PZmgh+JhuUJEkS4mJfZ9I=)
6: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
7: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
8: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:96:e3:ed:aa:b3:4b:dc:f1:9e:50:6e:a0:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: May 12 23:01:33 2026 GMT
Not After : May 13 23:01:33 2026 GMT
Subject: CN=163d2ec1524f5191c2914a4d4f4990ddb15a5c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:de:9b:4a:04:5c:1f:71:80:56:23:41:94:
1d:c4:ff:cd:97:20:97:0c:32:c1:32:f6:d0:5a:8f:
9f:db:c2:9e:cf:39:09:ec:36:ce:cf:a4:7c:03:4c:
b5:07:11:0b:08:c8:f1:22:8d:b1:a8:49:83:91:3c:
58:d0:ba:88:a0:37:9d:13:b2:16:28:8a:21:78:0d:
03:07:93:61:72:63:2f:89:01:58:7a:74:84:de:0b:
8c:6e:4c:d4:9f:89:7d:2a:59:1d:0f:f3:26:05:91:
bd:bd:5f:35:05:ca:33:f2:52:7a:81:db:d7:5c:da:
9a:a7:0d:76:89:76:13:f9:b7:13:27:18:13:52:9e:
c2:b5:ae:dc:6d:89:51:a2:2a:6e:7d:a6:09:f6:dc:
cf:6e:79:d6:a2:11:f1:62:60:1d:b7:75:68:aa:f2:
b1:8d:fc:f1:55:55:f1:f8:3a:99:1b:82:46:b9:7f:
22:1e:71:90:02:0f:be:df:33:63:92:ea:ac:89:18:
f1:bc:79:33:f4:59:dc:bc:51:b9:8c:84:d1:ea:68:
ca:10:e8:8c:45:2b:a2:e1:ed:a8:a9:fc:2c:ed:33:
6f:ac:3d:b0:bd:3d:dd:32:be:d3:76:9a:9c:60:52:
c6:8f:48:43:f2:83:f5:e2:ff:05:99:cf:4c:0b:5c:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:2E:C1:52:4F:51:91:C2:91:4A:4D:4F:49:90:DD:B1:5A:5C:03
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:aa:7c:fa:cd:33:06:c8:41:af:fa:c6:31:e1:37:6d:68:88:
cf:2c:5b:8e:82:fb:91:9e:27:40:b9:ae:12:97:b3:93:52:be:
1a:91:13:75:de:02:34:9f:f6:b9:bc:46:16:25:12:f2:23:e8:
43:c3:43:c2:37:76:e7:f4:0b:b3:77:96:05:52:8c:97:a4:88:
0c:cb:1f:1e:44:22:da:27:2c:5d:6b:dd:f6:28:0f:a4:9d:98:
ee:e9:d8:8f:18:a1:60:3d:3e:8a:a8:db:74:01:65:1d:78:17:
e2:d7:af:01:2f:0f:59:8b:05:25:6a:75:b5:f7:41:93:3b:d1:
af:32:2f:66:69:3e:d4:35:4e:f9:9f:6d:f5:a0:95:97:17:1e:
36:79:dc:bf:e2:67:05:e3:ca:38:45:cb:49:75:42:07:15:37:
96:ad:0d:25:ba:03:15:e3:3c:d1:bf:cc:fe:30:5d:5e:54:2e:
dd:93:1d:75:7b:d7:7f:0d:a5:64:24:cd:f5:22:f6:5a:20:2b:
5e:04:44:d9:9c:f9:6a:13:60:0a:e7:1a:42:b4:ef:19:24:74:
5d:74:5c:dd:b6:7a:65:31:da:85:ec:a1:64:8b:b9:46:2b:96:
fe:85:db:c4:cf:ca:77:41:1f:36:7f:ec:b0:79:b7:2e:a7:25:
a5:44:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:08 2026 by rpki-client