Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: 7w80Wvo8k0+5d24nFFvd+K5UOH2JZvUX9EPQT8/RjuA=
Subject key identifier: 34:E0:D9:D5:F9:F1:73:92:85:67:B8:30:6A:00:59:1A:90:00:39:56
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019E5FDE8980F38522BF08ABDA0269E8A2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 14F4
Signing time: Mon 25 May 2026 16:01:20 +0000
Manifest this update: Mon 25 May 2026 16:01:20 +0000
Manifest next update: Tue 26 May 2026 16:01:20 +0000
Files and hashes: 1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: mOKeftyR6232fcR5lPP205WOb9zKvtWPjjXs+7pSaqQ=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 14:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:de:89:80:f3:85:22:bf:08:ab:da:02:69:e8:a2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: May 25 16:01:20 2026 GMT
Not After : May 26 16:01:20 2026 GMT
Subject: CN=34e0d9d5f9f173928567b8306a00591a90003956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:8d:98:36:de:d9:0f:ec:8d:ef:13:bb:65:
d2:2e:f1:eb:77:f8:c1:a7:b1:4f:db:e8:ee:96:fa:
5f:ed:3d:e6:c7:fe:31:5e:70:5e:fa:80:45:a6:dd:
6e:c9:e1:65:1c:fd:11:c0:76:5a:5c:c4:7c:b2:64:
89:f5:ff:6c:5b:23:30:65:93:a1:1a:de:9b:87:5b:
df:b6:c7:e2:60:83:ac:03:46:3a:14:9d:95:fa:d0:
05:b8:25:91:59:5a:57:3a:9d:54:ba:f3:d4:8c:aa:
23:9b:5b:90:e9:cc:6e:dc:89:1d:60:48:ef:75:d0:
ca:59:01:5e:ff:49:68:eb:31:c1:af:be:db:26:d0:
e7:60:61:e9:dd:62:b9:48:34:34:e2:e8:85:47:e1:
ca:c3:aa:87:7e:e0:b5:7b:c0:9d:48:67:0c:70:36:
1e:06:b7:1d:ef:6a:a8:c5:79:28:41:75:54:b7:f6:
1f:70:8e:79:01:53:c9:98:ee:6e:e7:58:5b:91:97:
4b:16:90:fa:50:6a:f9:07:f2:f0:db:ee:4d:7a:a1:
ef:10:3c:05:46:73:38:bd:8a:1e:80:ca:0e:8b:4b:
fd:4a:b1:37:75:54:69:62:17:3b:64:45:1e:84:13:
17:ec:a6:83:aa:1d:ff:ac:36:7a:3b:c8:60:f5:6c:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:D9:D5:F9:F1:73:92:85:67:B8:30:6A:00:59:1A:90:00:39:56
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d2:3e:0a:23:74:4e:e1:9a:48:24:36:9b:7c:13:44:d4:9f:
67:ba:f5:63:61:df:bd:b5:51:af:c7:7f:ef:ed:03:2c:0b:49:
8c:55:cf:e3:e8:15:dd:75:8f:86:4d:dd:a8:45:ff:42:cf:78:
9b:a0:98:ca:51:55:8e:e2:92:b8:6b:d6:06:18:18:8d:b3:0b:
4e:83:67:69:f9:8a:44:2b:a7:62:c9:f4:ea:d7:b7:33:d0:1c:
56:22:db:87:b6:31:62:c4:bb:a5:da:8f:23:81:b3:73:f6:95:
40:a6:e0:7a:86:69:98:32:33:52:1d:ce:38:9c:4d:ee:cb:a2:
19:d4:00:2a:f6:e5:40:4e:51:89:c7:37:3a:53:d3:a8:c6:1b:
72:e3:9a:18:78:73:c3:71:9e:70:2a:b4:ca:03:32:e9:b5:56:
9e:b7:00:43:65:67:9f:c2:cf:27:3b:b8:31:85:9a:2e:4f:02:
0c:ab:24:3f:34:c4:26:af:37:d5:88:ba:27:25:89:f1:c3:42:
d0:88:6a:1a:1e:15:70:1b:47:b3:63:ae:b5:da:67:44:3e:17:
03:b9:9c:f2:56:ba:13:09:76:18:fa:2d:50:77:4c:4f:65:dc:
61:af:a7:44:4a:a8:fc:19:c8:2b:6b:23:ed:53:60:25:db:e6:
3b:02:c3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5f3omA84Uivwir2gJp6KLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx
ZDc2NzQwHhcNMjYwNTI1MTYwMTIwWhcNMjYwNTI2MTYwMTIwWjAzMTEwLwYDVQQD
EygzNGUwZDlkNWY5ZjE3MzkyODU2N2I4MzA2YTAwNTkxYTkwMDAzOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7WNmDbe2Q/sje8Tu2XSLvHrd/jB
p7FP2+julvpf7T3mx/4xXnBe+oBFpt1uyeFlHP0RwHZaXMR8smSJ9f9sWyMwZZOh
Gt6bh1vftsfiYIOsA0Y6FJ2V+tAFuCWRWVpXOp1UuvPUjKojm1uQ6cxu3IkdYEjv
ddDKWQFe/0lo6zHBr77bJtDnYGHp3WK5SDQ04uiFR+HKw6qHfuC1e8CdSGcMcDYe
Brcd72qoxXkoQXVUt/YfcI55AVPJmO5u51hbkZdLFpD6UGr5B/Lw2+5NeqHvEDwF
RnM4vYoegMoOi0v9SrE3dVRpYhc7ZEUehBMX7KaDqh3/rDZ6O8hg9WwGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTg2dX58XOShWe4MGoAWRqQADlWMB8GA1UdIwQY
MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt
ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj
LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9I+CiN0
TuGaSCQ2m3wTRNSfZ7r1Y2HfvbVRr8d/7+0DLAtJjFXP4+gV3XWPhk3dqEX/Qs94
m6CYylFVjuKSuGvWBhgYjbMLToNnafmKRCunYsn06te3M9AcViLbh7YxYsS7pdqP
I4Gzc/aVQKbgeoZpmDIzUh3OOJxN7suiGdQAKvblQE5Ricc3OlPTqMYbcuOaGHhz
w3GecCq0ygMy6bVWnrcAQ2Vnn8LPJzu4MYWaLk8CDKskPzTEJq831Yi6JyWJ8cNC
0IhqGh4VcBtHs2OutdpnRD4XA7mc8la6Ewl2GPotUHdMT2XcYa+nREqo/BnIK2sj
7VNgJdvmOwLDoQ==
-----END CERTIFICATE-----
Generated at Mon May 25 20:59:09 2026 by rpki-client