Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: TrYzMQ5ds3no/xhLTjnJy97A9iUL60v8E6DwZpC4KW0=
Subject key identifier: 43:42:92:F4:08:C2:86:DC:81:C8:7D:51:14:4E:CB:0C:FD:B1:90:5D
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019E1EDA08E2CE8AB05A5A6FD743D7357E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 113B
Signing time: Wed 13 May 2026 01:01:05 +0000
Manifest this update: Wed 13 May 2026 01:01:05 +0000
Manifest next update: Thu 14 May 2026 01:01:05 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: lqADrqIJ8IUdvRfmz/uNbmnJfMN3ON7mUmH5iP6CS5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:08:e2:ce:8a:b0:5a:5a:6f:d7:43:d7:35:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: May 13 01:01:05 2026 GMT
Not After : May 14 01:01:05 2026 GMT
Subject: CN=434292f408c286dc81c87d51144ecb0cfdb1905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:bb:da:6c:b4:3d:77:59:64:ce:0e:7b:89:
06:59:c9:d5:f0:23:65:88:03:69:3f:90:12:0d:34:
95:16:d3:0e:9f:8a:43:ac:3b:5d:47:02:00:56:97:
7f:a2:f4:6f:a4:a5:70:a7:81:a5:f1:38:0b:0d:0b:
43:a3:aa:b6:80:56:03:32:43:87:67:51:52:d3:86:
33:b1:b7:0d:d0:b3:e1:f6:14:5c:c0:be:26:bd:be:
cc:58:e5:2f:5b:50:ad:d3:54:9f:03:f0:c5:9b:46:
b7:0d:5e:64:b0:bf:fc:11:93:00:4d:25:1a:e2:db:
77:b0:7c:0b:81:34:bc:10:5b:0d:b7:ff:8d:fa:84:
17:15:f9:b4:28:b1:52:01:f1:49:89:be:92:e3:9c:
33:f4:ae:9a:fd:35:5b:35:ee:7d:fd:af:b8:ef:14:
ae:6d:ed:fb:67:e1:f8:d5:09:b5:64:c8:f2:0c:cc:
77:bf:a0:10:9e:23:13:1e:19:97:d8:16:e1:0b:f1:
0c:1c:70:f6:31:0f:4a:3d:5e:66:ad:94:3a:a7:eb:
b6:b1:1c:16:34:6e:60:49:34:07:c7:ff:4c:84:1a:
a3:b9:f1:ce:0f:5d:47:f1:ec:fb:6f:51:b0:36:c7:
23:a8:ee:b4:00:cd:ae:47:16:d3:0f:7a:65:ab:6a:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:92:F4:08:C2:86:DC:81:C8:7D:51:14:4E:CB:0C:FD:B1:90:5D
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bb:5b:ad:f2:cb:bf:1a:a5:91:76:e3:2d:c4:3e:41:4d:19:
b4:81:b4:38:bd:e5:ad:cd:d1:66:a0:fd:ae:8d:bd:b2:7a:17:
31:f6:ef:64:90:7f:3c:b4:d0:54:9b:05:13:b5:80:a1:58:0b:
d0:07:c2:cc:85:da:0c:db:99:ac:42:30:c7:d8:c3:c4:ea:77:
48:a3:03:ce:43:67:a5:1f:43:a3:0b:7b:c0:96:15:50:b1:13:
d2:4b:16:61:15:ab:7f:aa:52:64:c1:13:dd:83:f8:4b:55:46:
cb:a4:2b:88:b5:ab:67:ac:74:db:9c:37:92:73:6d:b0:cb:b8:
b6:91:95:d3:1e:2f:28:10:de:21:c3:d5:ae:48:06:ac:06:d0:
db:86:e6:93:a8:ab:3b:ce:9c:46:4f:6e:4a:f4:58:b3:27:c6:
8b:06:8f:8d:44:e5:3b:e0:54:68:62:17:bf:81:bc:15:5c:78:
3d:1c:c3:9f:45:4e:52:24:e9:8c:79:c1:6a:11:16:d1:07:e8:
c8:75:d7:88:6d:50:43:0b:f2:be:85:eb:b7:e1:3a:fb:9d:da:
78:48:48:d6:d6:a7:ec:8d:5f:4d:b1:cd:e6:35:f1:4b:0f:2c:
bc:bc:b9:f9:7a:1d:6c:54:7f:17:73:53:b5:02:43:09:d9:57:
0f:18:0c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2gjizoqwWlpv10PXNX5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjYwNTEzMDEwMTA1WhcNMjYwNTE0MDEwMTA1WjAzMTEwLwYDVQQD
Eyg0MzQyOTJmNDA4YzI4NmRjODFjODdkNTExNDRlY2IwY2ZkYjE5MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gy72my0PXdZZM4Oe4kGWcnV8CNl
iANpP5ASDTSVFtMOn4pDrDtdRwIAVpd/ovRvpKVwp4Gl8TgLDQtDo6q2gFYDMkOH
Z1FS04YzsbcN0LPh9hRcwL4mvb7MWOUvW1Ct01SfA/DFm0a3DV5ksL/8EZMATSUa
4tt3sHwLgTS8EFsNt/+N+oQXFfm0KLFSAfFJib6S45wz9K6a/TVbNe59/a+47xSu
be37Z+H41Qm1ZMjyDMx3v6AQniMTHhmX2BbhC/EMHHD2MQ9KPV5mrZQ6p+u2sRwW
NG5gSTQHx/9MhBqjufHOD11H8ez7b1GwNscjqO60AM2uRxbTD3plq2oSnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENCkvQIwobcgch9URROywz9sZBdMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALtbrfLL
vxqlkXbjLcQ+QU0ZtIG0OL3lrc3RZqD9ro29snoXMfbvZJB/PLTQVJsFE7WAoVgL
0AfCzIXaDNuZrEIwx9jDxOp3SKMDzkNnpR9Dowt7wJYVULET0ksWYRWrf6pSZMET
3YP4S1VGy6QriLWrZ6x025w3knNtsMu4tpGV0x4vKBDeIcPVrkgGrAbQ24bmk6ir
O86cRk9uSvRYsyfGiwaPjUTlO+BUaGIXv4G8FVx4PRzDn0VOUiTpjHnBahEW0Qfo
yHXXiG1QQwvyvoXrt+E6+53aeEhI1tan7I1fTbHN5jXxSw8svLy5+XodbFR/F3NT
tQJDCdlXDxgM8A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:58 2026 by rpki-client