Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: hUopr4VtIsemeNYwiZETSm5o/jzmO6Pq/mPh+mjWivs=
Subject key identifier: 63:81:6C:02:87:87:7D:7B:FE:FC:58:0B:71:35:A5:5B:5D:5F:EA:AA
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019E1FB5CD9D584F3FCB08A84EF9A6675C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 14CA
Signing time: Wed 13 May 2026 05:01:08 +0000
Manifest this update: Wed 13 May 2026 05:01:08 +0000
Manifest next update: Thu 14 May 2026 05:01:08 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: 1yN3DCcUd+IuyLKBbpwuk76jHPtaDVARLhO2KBS8lK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:cd:9d:58:4f:3f:cb:08:a8:4e:f9:a6:67:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: May 13 05:01:08 2026 GMT
Not After : May 14 05:01:08 2026 GMT
Subject: CN=63816c0287877d7bfefc580b7135a55b5d5feaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:0e:dc:48:9f:57:8d:d6:12:64:77:3b:6f:
53:46:35:0a:2e:d0:d7:01:57:5e:d6:79:d5:a7:12:
dd:f0:c3:cb:d8:59:3f:de:34:a2:0e:bf:70:7d:89:
d1:c5:e8:da:41:ea:30:45:1b:cc:df:37:7d:da:6f:
0f:13:4b:6f:71:44:38:73:98:22:1a:6d:c7:8f:77:
84:71:fd:84:db:b0:e6:b5:b6:50:96:15:50:24:8b:
84:7a:a3:88:00:7f:1f:05:87:de:8f:43:39:18:3f:
d1:a7:68:77:8a:66:3a:0a:ff:43:8b:39:e9:e6:e9:
03:60:af:17:93:c3:b7:8a:ce:7d:47:b6:02:0b:86:
53:8c:01:1c:9a:20:1f:68:58:86:62:9a:5f:75:f1:
c4:4e:00:23:7f:42:16:0b:1f:f3:17:de:56:8a:91:
fd:38:40:79:62:75:21:1b:1d:8f:c9:0b:46:58:5b:
b2:55:bc:97:7e:a0:1f:8e:01:2a:86:5b:8f:70:1f:
a1:01:56:98:44:9a:6a:1c:2a:6b:5c:72:5d:37:a0:
71:6b:c1:de:f8:9b:90:4a:87:be:87:fc:d8:62:b2:
9b:49:19:ef:15:a0:0a:03:72:ab:c4:45:12:2e:c1:
8f:1f:0a:74:d9:8b:2b:00:00:ba:f9:a8:75:0d:e2:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:6C:02:87:87:7D:7B:FE:FC:58:0B:71:35:A5:5B:5D:5F:EA:AA
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:3c:dc:d3:44:9f:3c:b3:28:1b:73:7e:13:ed:9b:ea:be:
03:c5:d4:b4:b0:e0:84:8e:b0:ae:cd:e6:3a:ee:40:05:60:61:
1d:a1:00:58:ac:5e:a2:1c:61:56:d5:93:38:04:13:64:b6:08:
6c:6e:96:36:8c:88:bc:77:7b:bd:38:de:93:e9:99:72:13:9a:
f9:8d:ba:d7:12:6f:5b:80:28:1d:1d:d1:83:84:02:27:99:cf:
51:02:17:d9:62:59:e1:2b:95:71:1e:da:97:41:d4:c1:89:ce:
b2:39:68:83:0a:d2:af:52:d7:a5:f9:09:f8:6d:f4:52:b2:f9:
ab:81:78:ad:1b:2b:d6:23:38:be:99:43:a1:7f:3d:56:ed:47:
18:92:d5:2f:2a:42:5c:5a:25:e2:41:0d:d3:71:8e:0d:41:a5:
54:fa:18:f2:88:f2:93:68:92:c4:42:82:76:1e:ff:36:09:38:
05:57:f2:1b:8e:0e:db:fc:76:9a:74:5a:57:4b:a8:1a:c7:79:
18:05:8c:50:d7:88:cd:c3:62:7c:a9:5f:80:40:e4:ec:5e:4a:
87:c8:d6:97:31:1f:0d:e0:fb:8b:ac:4a:b9:fa:10:cb:93:c2:
16:88:50:23:8f:ee:16:db:97:db:d0:b6:e1:e8:af:a2:f7:c9:
5c:3c:bb:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftc2dWE8/ywioTvmmZ1xNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjYwNTEzMDUwMTA4WhcNMjYwNTE0MDUwMTA4WjAzMTEwLwYDVQQD
Eyg2MzgxNmMwMjg3ODc3ZDdiZmVmYzU4MGI3MTM1YTU1YjVkNWZlYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ4O3EifV43WEmR3O29TRjUKLtDX
AVde1nnVpxLd8MPL2Fk/3jSiDr9wfYnRxejaQeowRRvM3zd92m8PE0tvcUQ4c5gi
Gm3Hj3eEcf2E27DmtbZQlhVQJIuEeqOIAH8fBYfej0M5GD/Rp2h3imY6Cv9Diznp
5ukDYK8Xk8O3is59R7YCC4ZTjAEcmiAfaFiGYppfdfHETgAjf0IWCx/zF95WipH9
OEB5YnUhGx2PyQtGWFuyVbyXfqAfjgEqhluPcB+hAVaYRJpqHCprXHJdN6Bxa8He
+JuQSoe+h/zYYrKbSRnvFaAKA3KrxEUSLsGPHwp02YsrAAC6+ah1DeJ4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOBbAKHh317/vxYC3E1pVtdX+qqMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHk83NNE
nzyzKBtzfhPtm+q+A8XUtLDghI6wrs3mOu5ABWBhHaEAWKxeohxhVtWTOAQTZLYI
bG6WNoyIvHd7vTjek+mZchOa+Y261xJvW4AoHR3Rg4QCJ5nPUQIX2WJZ4SuVcR7a
l0HUwYnOsjlogwrSr1LXpfkJ+G30UrL5q4F4rRsr1iM4vplDoX89Vu1HGJLVLypC
XFol4kEN03GODUGlVPoY8ojyk2iSxEKCdh7/Ngk4BVfyG44O2/x2mnRaV0uoGsd5
GAWMUNeIzcNifKlfgEDk7F5Kh8jWlzEfDeD7i6xKufoQy5PCFohQI4/uFtuX29C2
4eivovfJXDy7eg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:14:09 2026 by rpki-client