
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: 9c0gqoJS/juHHCYo6C5DeMoGbhQ4WesiUkhxggJFHU8=
Subject key identifier: 96:FC:78:83:3D:4C:80:11:09:D2:FB:A0:66:0E:11:56:E8:D3:F1:3A
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019E33AA6E49EF4DB80C9DC81138318136FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1431
Signing time: Sun 17 May 2026 02:01:07 +0000
Manifest this update: Sun 17 May 2026 02:01:07 +0000
Manifest next update: Mon 18 May 2026 02:01:07 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: e2bbxa/BYYCtN/b7rhyEafS3yXSHIQ/XuImoJ3S9Tyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:aa:6e:49:ef:4d:b8:0c:9d:c8:11:38:31:81:36:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: May 17 02:01:07 2026 GMT
Not After : May 18 02:01:07 2026 GMT
Subject: CN=96fc78833d4c801109d2fba0660e1156e8d3f13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:2c:c3:b3:af:b5:27:4f:b4:32:9f:fb:80:
3f:c0:ff:92:4e:3a:55:ef:2e:44:1c:8c:84:6e:70:
47:93:94:db:bc:81:bc:03:22:51:05:d9:4b:7e:89:
f6:e5:d0:08:8b:d2:b9:ef:4d:3b:2c:20:41:c8:a5:
f0:b7:b0:2d:fd:ec:23:19:be:bd:c4:97:27:7a:d2:
61:f3:b9:f2:51:55:57:20:41:81:ff:6b:97:e0:fb:
28:ab:9b:cd:07:44:9a:c3:5f:48:a9:ee:8e:1a:d8:
bb:70:d0:aa:a4:95:b3:4f:c4:83:3e:42:9f:34:9f:
0a:2b:42:c7:d2:0a:11:e2:25:e2:68:5b:7e:41:c5:
4b:14:8d:01:97:5a:42:5c:8a:97:c9:a9:9d:72:b1:
11:37:dc:85:41:1e:97:6c:ef:ff:79:90:5e:ba:50:
fc:5a:63:25:f7:a7:6c:20:6a:2c:2a:27:51:4d:88:
63:11:7d:1f:fb:c2:b7:2b:55:83:b7:ad:53:83:a2:
80:7e:65:22:ac:75:be:c9:b8:ef:c7:fd:68:75:42:
94:e2:08:04:43:3d:01:c6:5b:b2:a4:8a:2f:29:ed:
e2:21:e6:fe:03:37:a0:64:c5:00:6f:24:2d:94:7a:
7d:d6:aa:71:bb:86:e2:79:b7:6e:2e:8d:74:5d:31:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:78:83:3D:4C:80:11:09:D2:FB:A0:66:0E:11:56:E8:D3:F1:3A
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a4:4c:a6:5d:bf:d0:cc:73:bb:24:35:fe:05:d4:81:c6:da:
f2:5e:ec:24:85:de:aa:ef:f9:8e:08:1a:b5:72:22:65:05:46:
bf:5e:6a:37:79:88:ac:c7:ab:d3:6d:eb:3c:b3:f0:ee:64:50:
5b:e0:58:76:e3:5d:bc:33:81:01:60:d3:fe:76:05:7a:4c:d3:
fc:66:f1:70:e9:dd:8f:36:df:ae:44:9a:d1:2e:0c:77:13:7d:
7e:12:65:ea:d3:f1:f6:35:07:c5:4d:de:4e:ba:73:8d:dc:0f:
8c:de:59:8d:01:87:44:08:43:ca:59:d3:a8:ec:18:fa:6c:35:
42:a4:77:49:40:b5:cd:6c:8f:3a:62:b6:bf:40:15:06:4e:95:
85:62:e9:ac:eb:c8:f3:9f:09:01:31:08:8f:a7:0b:06:82:eb:
27:69:fe:cf:3e:0e:e2:6f:ec:5e:bb:d9:83:c4:5e:95:49:74:
a4:20:c1:5c:b5:6a:a3:a4:ae:c9:7f:16:39:30:1d:a4:4c:8e:
c8:b9:ff:9a:2c:35:2b:c2:80:37:70:b5:0a:e4:cd:58:2e:bc:
40:5a:6c:27:c5:74:a2:32:c5:3e:3d:17:5f:84:fe:d3:a1:fe:
65:e0:fd:53:df:62:b5:31:9f:eb:54:fc:de:ae:36:4e:c0:22:
24:db:d8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4zqm5J7024DJ3IETgxgTb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx
NDE0NDcwHhcNMjYwNTE3MDIwMTA3WhcNMjYwNTE4MDIwMTA3WjAzMTEwLwYDVQQD
Eyg5NmZjNzg4MzNkNGM4MDExMDlkMmZiYTA2NjBlMTE1NmU4ZDNmMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxksw7OvtSdPtDKf+4A/wP+STjpV
7y5EHIyEbnBHk5TbvIG8AyJRBdlLfon25dAIi9K57007LCBByKXwt7At/ewjGb69
xJcnetJh87nyUVVXIEGB/2uX4Psoq5vNB0Saw19Iqe6OGti7cNCqpJWzT8SDPkKf
NJ8KK0LH0goR4iXiaFt+QcVLFI0Bl1pCXIqXyamdcrERN9yFQR6XbO//eZBeulD8
WmMl96dsIGosKidRTYhjEX0f+8K3K1WDt61Tg6KAfmUirHW+ybjvx/1odUKU4ggE
Qz0BxluypIovKe3iIeb+AzegZMUAbyQtlHp91qpxu4biebduLo10XTG7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb8eIM9TIARCdL7oGYOEVbo0/E6MB8GA1UdIwQY
MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct
NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2
LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKRMpl2/
0MxzuyQ1/gXUgcba8l7sJIXequ/5jggatXIiZQVGv15qN3mIrMer023rPLPw7mRQ
W+BYduNdvDOBAWDT/nYFekzT/GbxcOndjzbfrkSa0S4MdxN9fhJl6tPx9jUHxU3e
TrpzjdwPjN5ZjQGHRAhDylnTqOwY+mw1QqR3SUC1zWyPOmK2v0AVBk6VhWLprOvI
858JATEIj6cLBoLrJ2n+zz4O4m/sXrvZg8RelUl0pCDBXLVqo6SuyX8WOTAdpEyO
yLn/miw1K8KAN3C1CuTNWC68QFpsJ8V0ojLFPj0XX4T+06H+ZeD9U99itTGf61T8
3q42TsAiJNvYNg==
-----END CERTIFICATE-----
Generated at Sun May 17 05:12:48 2026 by rpki-client