Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: WuptNU38aZYLiFcCgH9Mh1u9lg81j1P3iL5nbZGv0g8=
Subject key identifier: DD:92:E2:DD:A0:AD:1E:87:2C:DB:57:D1:D8:34:92:E2:01:25:D5:C3
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019DEEC9BDF2B3C7D0CE91D7889D96C76F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 18F9
Signing time: Sun 03 May 2026 17:01:31 +0000
Manifest this update: Sun 03 May 2026 17:01:31 +0000
Manifest next update: Mon 04 May 2026 17:01:31 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: 2fZNssBulONX5o1sL5XyVV5AYor2F1K4VQVCrZbSQRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:c9:bd:f2:b3:c7:d0:ce:91:d7:88:9d:96:c7:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: May 3 17:01:31 2026 GMT
Not After : May 4 17:01:31 2026 GMT
Subject: CN=dd92e2dda0ad1e872cdb57d1d83492e20125d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:12:ca:69:db:ce:df:61:a0:2c:39:a2:49:
c7:37:85:2d:cf:34:28:4e:15:01:87:bf:82:9f:7c:
1a:b2:32:52:17:d5:54:1c:7a:6a:e0:5e:fb:81:41:
19:df:66:88:7b:87:bf:e5:45:bb:a5:11:99:0a:0b:
69:8b:80:f0:5c:64:70:11:32:81:d2:f0:99:af:06:
b3:18:27:9a:32:04:c3:51:1d:20:da:45:e6:1f:86:
4c:b7:82:27:e5:d9:53:70:52:e1:c6:ab:81:2a:98:
59:59:ac:1f:15:e5:ef:2f:d7:e3:67:7e:89:68:24:
8d:1b:0d:1b:3f:ae:86:63:e8:4e:99:e0:e5:18:13:
dc:e9:69:2d:94:3a:0f:48:48:95:d0:e1:22:ff:4e:
4a:c1:c2:4a:d7:7c:9b:16:51:ff:d3:32:b6:9b:07:
38:36:59:b1:77:cb:cb:d0:e3:4e:c0:8d:fc:d6:c0:
94:c8:b0:f4:47:68:28:22:91:c8:3b:97:bb:7f:45:
74:5a:0f:d4:98:67:89:c6:45:d4:1e:6c:34:b1:14:
14:73:81:ea:c2:c7:13:ac:30:b4:82:fa:07:54:29:
a6:53:8c:e9:11:45:8c:74:c4:f9:7d:fc:2c:d2:dd:
74:9b:76:27:fd:13:8f:8c:7b:84:99:a1:6e:a1:4f:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:E2:DD:A0:AD:1E:87:2C:DB:57:D1:D8:34:92:E2:01:25:D5:C3
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:20:da:64:59:19:84:37:ea:f2:25:d8:df:2a:50:fe:cf:
e7:a2:d5:c1:b6:99:5d:67:d2:32:b4:57:bd:63:e3:20:19:bb:
22:ce:d0:1b:be:5a:8d:04:d1:c3:51:4d:71:e4:a8:af:e4:3f:
09:5d:01:f7:6e:b5:0f:65:f5:d7:0a:46:ff:6d:16:89:33:86:
a9:40:ad:55:6f:ad:e0:e2:e1:eb:00:24:7e:01:98:e1:79:fc:
c3:57:a7:76:37:e3:92:f2:41:18:f7:4d:8f:e3:fb:c9:6d:cb:
ae:f3:8d:9d:d8:09:44:6d:2e:99:3f:f1:39:18:27:52:59:a7:
9f:e8:eb:70:89:1f:ae:8e:1f:65:4b:61:69:ce:de:bb:92:83:
46:ea:d7:2b:c0:6f:eb:2a:23:39:2c:29:2a:a7:ba:b3:73:78:
c4:a8:55:73:60:6b:ce:7d:fa:bd:77:74:41:69:a2:3c:f4:a4:
97:98:df:8e:16:d5:3e:17:e3:39:84:64:ae:61:3b:ec:85:7c:
1d:8b:f7:ab:30:92:50:82:93:13:44:50:ca:2c:2d:75:33:b9:
36:cc:6c:c2:b4:23:dc:a7:ba:7d:0e:11:d6:0b:29:49:53:5c:
c2:a1:f6:19:ff:1f:dc:c9:2d:fc:d1:a3:a6:f7:1b:7c:16:4a:
ed:f5:ce:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3uyb3ys8fQzpHXiJ2Wx28oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjYwNTAzMTcwMTMxWhcNMjYwNTA0MTcwMTMxWjAzMTEwLwYDVQQD
EyhkZDkyZTJkZGEwYWQxZTg3MmNkYjU3ZDFkODM0OTJlMjAxMjVkNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VcSymnbzt9hoCw5oknHN4UtzzQo
ThUBh7+Cn3wasjJSF9VUHHpq4F77gUEZ32aIe4e/5UW7pRGZCgtpi4DwXGRwETKB
0vCZrwazGCeaMgTDUR0g2kXmH4ZMt4In5dlTcFLhxquBKphZWawfFeXvL9fjZ36J
aCSNGw0bP66GY+hOmeDlGBPc6WktlDoPSEiV0OEi/05KwcJK13ybFlH/0zK2mwc4
Nlmxd8vL0ONOwI381sCUyLD0R2goIpHIO5e7f0V0Wg/UmGeJxkXUHmw0sRQUc4Hq
wscTrDC0gvoHVCmmU4zpEUWMdMT5ffws0t10m3Yn/ROPjHuEmaFuoU/cFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2S4t2grR6HLNtX0dg0kuIBJdXDMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnMg2mRZ
GYQ36vIl2N8qUP7P56LVwbaZXWfSMrRXvWPjIBm7Is7QG75ajQTRw1FNceSor+Q/
CV0B9261D2X11wpG/20WiTOGqUCtVW+t4OLh6wAkfgGY4Xn8w1endjfjkvJBGPdN
j+P7yW3LrvONndgJRG0umT/xORgnUlmnn+jrcIkfro4fZUthac7eu5KDRurXK8Bv
6yojOSwpKqe6s3N4xKhVc2Brzn36vXd0QWmiPPSkl5jfjhbVPhfjOYRkrmE77IV8
HYv3qzCSUIKTE0RQyiwtdTO5NsxswrQj3Ke6fQ4R1gspSVNcwqH2Gf8f3Mkt/NGj
pvcbfBZK7fXO6g==
-----END CERTIFICATE-----
Generated at Sun May 3 21:23:42 2026 by rpki-client