Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: 1eWP4XwPHY5eNdlIwmNWYH/6+z3a1CzBfgnFYoOeTnk=
Subject key identifier: 84:F4:51:68:03:79:0A:11:23:99:D8:68:87:D1:01:67:F7:F6:12:C7
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019E1DFE463B702E8983507BCAB1EADEDD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:03 +0000
Manifest this update: Tue 12 May 2026 21:01:03 +0000
Manifest next update: Wed 13 May 2026 21:01:03 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: BFMb7jW8HOi5S7NaWbcM51y73KJeryfPxfyEKKsc3kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:46:3b:70:2e:89:83:50:7b:ca:b1:ea:de:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: May 12 21:01:03 2026 GMT
Not After : May 13 21:01:03 2026 GMT
Subject: CN=84f4516803790a112399d86887d10167f7f612c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:22:95:ac:c3:cd:5c:33:75:1a:05:a5:ad:
62:eb:9d:b9:ea:17:12:09:54:c0:72:01:0f:98:be:
ec:4e:a9:60:00:f1:f4:97:a1:a6:0a:ed:9e:2d:11:
da:25:8e:4d:c4:ee:c0:c5:91:e4:a7:b2:ef:08:4d:
13:fb:c5:fc:a5:b1:96:ae:79:b8:e7:ae:7f:fd:c9:
ac:08:c6:f0:26:d9:66:5a:05:56:8b:8a:68:18:e9:
f6:bf:ac:ca:78:b8:56:05:e0:18:c9:bb:20:db:c8:
4e:7d:13:9b:6f:64:79:8f:c4:e6:4f:6e:fd:6a:c1:
b8:d5:4a:a7:67:76:6e:6c:74:55:6e:bd:e3:31:12:
0e:99:f7:72:88:dd:d5:b1:03:1c:ef:fd:b1:9b:1c:
11:64:fd:bc:58:b6:21:da:f1:95:4e:af:a4:2e:45:
cd:2d:a8:df:56:44:0b:4f:8c:4a:f3:47:14:e5:74:
bb:c4:7c:bd:37:f7:f0:f8:af:8e:c7:65:62:7c:c2:
33:68:37:42:26:8f:52:b2:a9:19:da:ee:cf:78:0b:
1f:bf:7b:54:96:fc:5a:00:15:cd:e5:30:27:5d:58:
63:fb:7d:47:6e:0b:d0:4b:35:92:99:77:cc:4f:55:
20:d6:8c:44:6b:d7:2e:84:ca:cf:31:e9:5b:2a:86:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:51:68:03:79:0A:11:23:99:D8:68:87:D1:01:67:F7:F6:12:C7
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:39:1a:49:2b:24:e5:d9:ae:d6:8d:43:aa:3e:12:ca:8c:f6:
06:86:d1:3a:ec:a3:48:51:93:7c:94:9c:d6:69:df:dc:ff:49:
09:f7:05:ee:f1:1d:07:51:06:30:f0:68:9d:b2:cb:33:0b:47:
8d:03:5f:3b:27:80:4b:80:ba:89:b4:14:63:bb:1b:4e:f0:39:
c9:b4:0e:ff:f4:44:5c:ab:c0:4d:c9:ca:ca:21:72:1e:58:9c:
f3:72:12:35:3f:a6:2e:0b:cd:33:5a:fd:6c:f1:5c:44:77:11:
fc:be:15:b3:ba:0b:91:3d:8a:05:27:43:10:0d:a1:fe:0f:5d:
ad:44:f3:d9:49:7d:5c:81:0d:98:04:70:be:07:94:99:89:6e:
bd:ec:6f:3d:94:3f:e7:ea:94:55:28:4a:a7:a6:6c:04:29:f3:
b4:b2:10:f0:24:a3:00:24:27:77:13:a3:e1:f6:b3:72:37:a5:
e3:62:c4:f3:09:a4:18:a1:d4:91:54:9a:5a:a7:dc:ca:d9:ec:
8e:e5:96:9d:ce:ed:73:22:f8:ab:d4:10:36:5a:49:2c:00:19:
77:11:f8:2d:a3:0b:4c:09:02:5d:0b:5f:b0:a2:c1:5e:dd:32:
0b:48:64:0b:3c:5d:88:22:92:4a:0d:4e:f9:c3:bc:9c:75:26:
c2:79:76:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/kY7cC6Jg1B7yrHq3t03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjYwNTEyMjEwMTAzWhcNMjYwNTEzMjEwMTAzWjAzMTEwLwYDVQQD
Eyg4NGY0NTE2ODAzNzkwYTExMjM5OWQ4Njg4N2QxMDE2N2Y3ZjYxMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIilazDzVwzdRoFpa1i65256hcS
CVTAcgEPmL7sTqlgAPH0l6GmCu2eLRHaJY5NxO7AxZHkp7LvCE0T+8X8pbGWrnm4
565//cmsCMbwJtlmWgVWi4poGOn2v6zKeLhWBeAYybsg28hOfRObb2R5j8TmT279
asG41UqnZ3ZubHRVbr3jMRIOmfdyiN3VsQMc7/2xmxwRZP28WLYh2vGVTq+kLkXN
LajfVkQLT4xK80cU5XS7xHy9N/fw+K+Ox2VifMIzaDdCJo9SsqkZ2u7PeAsfv3tU
lvxaABXN5TAnXVhj+31HbgvQSzWSmXfMT1Ug1oxEa9cuhMrPMelbKoYgLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT0UWgDeQoRI5nYaIfRAWf39hLHMB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTkaSSsk
5dmu1o1Dqj4Syoz2BobROuyjSFGTfJSc1mnf3P9JCfcF7vEdB1EGMPBonbLLMwtH
jQNfOyeAS4C6ibQUY7sbTvA5ybQO//REXKvATcnKyiFyHlic83ISNT+mLgvNM1r9
bPFcRHcR/L4Vs7oLkT2KBSdDEA2h/g9drUTz2Ul9XIENmARwvgeUmYluvexvPZQ/
5+qUVShKp6ZsBCnztLIQ8CSjACQndxOj4fazcjel42LE8wmkGKHUkVSaWqfcytns
juWWnc7tcyL4q9QQNlpJLAAZdxH4LaMLTAkCXQtfsKLBXt0yC0hkCzxdiCKSSg1O
+cO8nHUmwnl2tg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:29:48 2026 by rpki-client