Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: Ik83EMAIDq9qFQ4H3jXsvnjh6+VxKawgdIHc+FWoJgU=
Subject key identifier: 3C:E4:E2:31:C8:7D:F3:21:9A:41:6D:F1:2E:22:A7:58:02:FC:56:3E
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019E2091D5359E2D282F38C575AA620C83E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 1097
Signing time: Wed 13 May 2026 09:01:28 +0000
Manifest this update: Wed 13 May 2026 09:01:28 +0000
Manifest next update: Thu 14 May 2026 09:01:28 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: VSVJZhze9WgwOczZ/JcL/DFT0TjG6MOQtj+J3INKu9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:d5:35:9e:2d:28:2f:38:c5:75:aa:62:0c:83:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: May 13 09:01:28 2026 GMT
Not After : May 14 09:01:28 2026 GMT
Subject: CN=3ce4e231c87df3219a416df12e22a75802fc563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:20:e6:9f:e6:ce:ac:6c:67:1e:e1:3f:47:
a2:20:09:ea:5a:e0:7a:d7:aa:bc:db:09:60:4b:85:
7b:d3:04:06:9f:86:1c:67:2b:5d:3c:18:54:58:4e:
d6:8e:31:13:57:39:89:11:6d:a5:ff:23:d0:ee:67:
a3:fc:d7:9c:e2:aa:4d:fe:5c:46:99:f8:b2:7f:8c:
a2:36:6d:0b:ee:6d:7a:71:bb:a8:d7:c8:03:f7:e9:
35:f4:08:ba:78:9c:bc:c2:6f:e3:c8:78:a4:cf:f4:
0d:ce:6f:fc:5f:b4:3b:d8:c1:74:da:c2:f6:fb:84:
52:b6:4b:96:25:40:6d:c4:66:5a:05:b3:95:35:a0:
eb:3b:a7:bb:13:e6:9b:0f:aa:9c:43:5a:62:9b:4c:
0c:a3:4e:8f:e6:b3:8a:65:82:b8:20:31:97:64:c1:
59:af:39:75:1e:a2:79:1a:ff:93:99:e5:c8:9e:ee:
8b:aa:61:80:ea:bb:14:25:a3:47:be:05:e1:87:28:
1f:5e:47:ea:d3:61:48:53:32:21:e1:f7:dd:09:58:
35:21:3f:e8:35:a2:36:55:8a:08:b7:9e:f4:a3:a5:
12:1a:5c:a5:c5:b6:7d:a6:e4:8d:a3:56:9b:b4:49:
30:59:48:77:24:bd:ed:77:2d:52:7a:f4:21:ec:b7:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:E2:31:C8:7D:F3:21:9A:41:6D:F1:2E:22:A7:58:02:FC:56:3E
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:ea:7e:0e:71:e8:2b:36:61:58:0f:18:17:7a:22:c8:5f:
73:27:85:9b:da:12:46:73:6b:52:6a:8f:ed:eb:15:b4:d4:c2:
a5:c8:00:c6:b2:6c:3c:1d:17:2c:23:59:44:1d:1d:4a:2a:76:
e5:47:64:e6:58:47:cc:d8:5e:cd:d9:f2:36:ee:6b:ac:95:14:
9a:27:e9:3f:d5:7d:51:69:9a:5b:01:a8:0a:79:89:c5:c5:af:
63:75:0e:84:81:b0:a1:d0:28:69:f5:f9:0c:8a:79:cb:95:e1:
a6:2a:f5:d1:bf:a6:2c:d1:61:c2:66:b9:90:94:a0:dd:14:55:
d2:a1:ab:78:aa:c2:16:f3:65:1d:d5:c5:ee:76:9d:a4:d5:8f:
1a:35:20:a0:e9:46:0e:68:12:48:95:da:ca:8b:69:6a:15:89:
57:5f:8d:b5:0a:28:42:43:00:0a:d3:1e:da:e1:29:2f:db:2d:
02:9f:f5:94:42:c4:6d:2e:0d:38:3e:c9:a6:31:08:6f:cb:12:
ef:0b:03:ac:bb:00:24:3a:d5:ca:27:96:f9:b5:ee:e6:02:b4:
9e:5d:4f:ed:98:d9:ed:fe:82:2c:4f:a0:c5:88:ea:51:90:6c:
33:a1:4b:0b:af:7e:7c:b1:c9:ee:b3:d2:6a:65:cc:17:fa:57:
6d:ee:c1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkdU1ni0oLzjFdapiDIPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy
YTg2ZDAwHhcNMjYwNTEzMDkwMTI4WhcNMjYwNTE0MDkwMTI4WjAzMTEwLwYDVQQD
EygzY2U0ZTIzMWM4N2RmMzIxOWE0MTZkZjEyZTIyYTc1ODAyZmM1NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYAg5p/mzqxsZx7hP0eiIAnqWuB6
16q82wlgS4V70wQGn4YcZytdPBhUWE7WjjETVzmJEW2l/yPQ7mej/Nec4qpN/lxG
mfiyf4yiNm0L7m16cbuo18gD9+k19Ai6eJy8wm/jyHikz/QNzm/8X7Q72MF02sL2
+4RStkuWJUBtxGZaBbOVNaDrO6e7E+abD6qcQ1pim0wMo06P5rOKZYK4IDGXZMFZ
rzl1HqJ5Gv+TmeXInu6LqmGA6rsUJaNHvgXhhygfXkfq02FIUzIh4ffdCVg1IT/o
NaI2VYoIt570o6USGlylxbZ9puSNo1abtEkwWUh3JL3tdy1SevQh7LccLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzk4jHIffMhmkFt8S4ip1gC/FY+MB8GA1UdIwQY
MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt
YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3
LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAnqfg5x
6Cs2YVgPGBd6IshfcyeFm9oSRnNrUmqP7esVtNTCpcgAxrJsPB0XLCNZRB0dSip2
5Udk5lhHzNhezdnyNu5rrJUUmifpP9V9UWmaWwGoCnmJxcWvY3UOhIGwodAoafX5
DIp5y5Xhpir10b+mLNFhwma5kJSg3RRV0qGreKrCFvNlHdXF7nadpNWPGjUgoOlG
DmgSSJXayotpahWJV1+NtQooQkMACtMe2uEpL9stAp/1lELEbS4NOD7JpjEIb8sS
7wsDrLsAJDrVyieW+bXu5gK0nl1P7ZjZ7f6CLE+gxYjqUZBsM6FLC69+fLHJ7rPS
amXMF/pXbe7Bvg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:36 2026 by rpki-client