Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: Nst9WBZAbAZWFV+FQAyITH3zHhqlusV6ONHE51WdWjk=
Subject key identifier: 48:6E:14:8A:15:A8:F6:AE:B7:12:9B:28:CF:14:54:E5:9E:25:8A:F8
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019E3298021D1409F04A7DFFD8ABB0A02E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0F54
Signing time: Sat 16 May 2026 21:01:23 +0000
Manifest this update: Sat 16 May 2026 21:01:23 +0000
Manifest next update: Sun 17 May 2026 21:01:23 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: QLTIjJVGaS910mqeIImUqTWw+bqSDojQUuwp28JJZwg=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:02:1d:14:09:f0:4a:7d:ff:d8:ab:b0:a0:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: May 16 21:01:23 2026 GMT
Not After : May 17 21:01:23 2026 GMT
Subject: CN=486e148a15a8f6aeb7129b28cf1454e59e258af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:5f:5e:02:6e:c1:fa:64:49:5a:5b:8b:0b:
7d:99:3c:d6:07:52:a6:1c:9a:75:28:44:f8:f7:58:
5e:2e:28:18:b1:38:a7:9a:2f:6f:bf:0c:d2:2d:6a:
20:35:95:dd:ce:18:10:0b:db:b1:48:8c:cd:37:be:
9e:80:08:7d:ad:de:6e:6d:7c:3b:9e:4e:87:6a:db:
09:c2:b9:cd:bb:a8:f4:c1:4c:8d:0b:b4:c4:12:53:
f9:cf:24:b5:39:d9:ba:34:a5:3f:a0:7a:83:b9:f9:
80:00:a5:34:c1:b9:4d:f3:23:f2:63:39:6f:d8:f1:
99:06:0d:7a:7f:6a:a9:2f:04:bf:3e:e3:d2:39:fe:
45:26:2a:29:ca:0c:e7:64:29:a9:8d:69:2b:c6:e8:
a1:ff:71:14:c2:4c:fa:a8:65:f7:cd:80:ad:2f:04:
38:f5:ce:af:1f:d8:d5:ab:9b:d9:7c:1b:6a:8c:1c:
42:16:a0:d6:52:2b:04:97:1f:f2:c8:58:f2:18:d9:
e7:04:90:e2:c7:ff:66:78:8d:84:54:d7:23:d0:bb:
7f:f5:97:d8:e1:91:0d:4a:73:80:ba:3a:2b:a6:58:
8a:1c:08:86:f9:b0:56:6f:cc:fa:9d:14:62:91:56:
5d:e2:b4:fb:22:24:6f:a1:77:de:09:8f:b9:df:47:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6E:14:8A:15:A8:F6:AE:B7:12:9B:28:CF:14:54:E5:9E:25:8A:F8
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:20:f5:cc:e3:fa:9c:3f:38:f7:9f:d2:cf:46:98:54:67:
9e:61:58:ff:89:27:43:db:65:e6:3d:c8:c3:70:6c:9e:4f:43:
ac:5e:fd:e8:47:60:b5:2c:e3:22:ab:fc:75:0e:5e:35:e7:75:
15:4e:b3:ba:ec:dc:d7:c2:01:73:e6:c9:a8:56:c9:d2:4f:ab:
7c:d2:f6:aa:8b:10:c7:43:31:ab:a6:50:32:bb:a5:8c:8f:c7:
92:72:3f:33:c7:34:64:79:a8:46:51:b3:0e:4f:f7:70:00:c5:
a4:18:d2:50:b8:3f:6a:7c:f3:ee:7c:aa:c0:10:e4:3f:54:e9:
17:e1:d7:28:f7:61:25:e4:04:13:79:44:ad:f3:39:01:e1:fb:
40:fd:ee:e4:d2:cc:fc:3b:b8:a0:52:6a:84:36:c9:66:0c:97:
c2:a3:85:b4:5a:63:a2:68:43:1c:1b:87:79:47:57:34:1f:92:
42:dd:84:d1:27:3e:93:ca:f5:83:9c:70:cc:cf:4b:fa:ac:f8:
52:42:57:4b:56:f7:af:2f:61:21:14:97:ba:39:7e:10:7d:9a:
b3:8b:5f:15:87:89:33:18:db:82:42:1a:d7:ba:60:eb:d0:35:
d1:95:fb:76:be:cb:2a:55:73:f9:0c:88:0e:a0:0a:4a:ba:a6:
3e:df:37:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ymAIdFAnwSn3/2KuwoC5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi
ZTYzZWIwHhcNMjYwNTE2MjEwMTIzWhcNMjYwNTE3MjEwMTIzWjAzMTEwLwYDVQQD
Eyg0ODZlMTQ4YTE1YThmNmFlYjcxMjliMjhjZjE0NTRlNTllMjU4YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+pfXgJuwfpkSVpbiwt9mTzWB1Km
HJp1KET491heLigYsTinmi9vvwzSLWogNZXdzhgQC9uxSIzNN76egAh9rd5ubXw7
nk6HatsJwrnNu6j0wUyNC7TEElP5zyS1Odm6NKU/oHqDufmAAKU0wblN8yPyYzlv
2PGZBg16f2qpLwS/PuPSOf5FJiopygznZCmpjWkrxuih/3EUwkz6qGX3zYCtLwQ4
9c6vH9jVq5vZfBtqjBxCFqDWUisElx/yyFjyGNnnBJDix/9meI2EVNcj0Lt/9ZfY
4ZENSnOAujorpliKHAiG+bBWb8z6nRRikVZd4rT7IiRvoXfeCY+530f4UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhuFIoVqPautxKbKM8UVOWeJYr4MB8GA1UdIwQY
MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt
MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4
LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH8g9czj
+pw/OPef0s9GmFRnnmFY/4knQ9tl5j3Iw3Bsnk9DrF796EdgtSzjIqv8dQ5eNed1
FU6zuuzc18IBc+bJqFbJ0k+rfNL2qosQx0Mxq6ZQMruljI/HknI/M8c0ZHmoRlGz
Dk/3cADFpBjSULg/anzz7nyqwBDkP1TpF+HXKPdhJeQEE3lErfM5AeH7QP3u5NLM
/Du4oFJqhDbJZgyXwqOFtFpjomhDHBuHeUdXNB+SQt2E0Sc+k8r1g5xwzM9L+qz4
UkJXS1b3ry9hIRSXujl+EH2as4tfFYeJMxjbgkIa17pg69A10ZX7dr7LKlVz+QyI
DqAKSrqmPt83HA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:29:29 2026 by rpki-client