Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: xlb5jRq4DVHBI9/b2M1KX/O1nZ0qFCQF8K5f+MkmjH0=
Subject key identifier: 97:3F:4D:68:AE:74:87:8E:DF:1A:B7:F5:73:9C:AC:87:30:B4:F0:F0
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019E2994383E3BC0FAF1A13E78AD3FC892A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 011E
Signing time: Fri 15 May 2026 03:00:39 +0000
Manifest this update: Fri 15 May 2026 03:00:39 +0000
Manifest next update: Sat 16 May 2026 03:00:39 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: 5zPI9z6PBCQFofof7qB7sJAaQLTPutFvX2FQveQIHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:38:3e:3b:c0:fa:f1:a1:3e:78:ad:3f:c8:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: May 15 03:00:39 2026 GMT
Not After : May 16 03:00:39 2026 GMT
Subject: CN=973f4d68ae74878edf1ab7f5739cac8730b4f0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:c8:fa:0f:47:d6:07:0a:cb:da:bb:62:97:
10:b3:cb:d1:3b:1e:d5:59:ba:81:ac:86:ba:8a:8c:
5e:ed:81:62:69:18:c7:7e:28:db:b6:56:5a:1c:09:
92:81:61:5a:5d:50:34:4e:72:3f:b1:78:16:44:1b:
21:90:7f:be:3c:bf:ed:57:b2:87:b6:7f:2f:b0:40:
1d:32:ba:19:5e:e2:b2:b9:26:b8:ca:99:2e:e6:3d:
5f:de:84:08:55:df:1a:8f:87:e2:77:63:d6:25:eb:
2e:2c:01:1e:53:1a:d2:9a:2d:57:54:6e:3d:9a:bb:
cd:e2:72:b9:e8:ff:15:d3:ab:f9:d4:c5:9d:29:c1:
8e:5a:aa:b2:7c:52:a6:77:31:02:d3:0b:8f:bc:82:
cf:df:45:0e:4b:f3:23:d4:73:38:70:73:95:b5:7e:
83:30:47:2a:1b:88:8e:7d:b7:7c:72:95:28:a7:a7:
cd:5b:3f:86:6b:12:5b:92:57:ae:bd:ea:5c:dd:48:
66:7b:c1:be:b9:fb:23:fc:d9:61:84:ad:1e:16:5b:
8a:77:a0:3b:95:e0:10:52:db:29:47:33:c1:33:fb:
39:e5:0a:fb:f8:2e:10:3d:3e:69:14:da:92:e0:03:
0a:69:6d:b2:d6:d2:a6:46:91:b7:20:05:74:78:36:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:4D:68:AE:74:87:8E:DF:1A:B7:F5:73:9C:AC:87:30:B4:F0:F0
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:db:3b:f8:e8:28:5f:80:03:e2:8d:30:f2:0b:e3:34:7d:72:
05:54:9a:da:1a:19:43:f5:d5:26:4f:f3:b9:17:be:76:27:d5:
bf:e1:07:39:49:6a:88:d4:5c:5b:1f:ae:7a:2c:a7:d1:46:4a:
eb:9b:56:37:47:3d:8a:ef:bb:0e:bd:1b:09:20:9b:0b:5b:ca:
22:10:8a:04:92:06:11:14:ee:85:98:03:61:4a:ef:18:61:60:
00:5e:8a:25:66:fa:09:05:3d:b7:70:49:b6:87:b6:f4:82:79:
eb:64:48:b7:3f:9e:73:36:de:29:56:90:66:76:c5:7b:11:15:
dd:d6:7e:1d:ec:59:95:51:e0:b8:de:a4:41:3f:c9:01:e7:e0:
81:4d:97:50:54:0f:89:3d:16:96:f8:95:60:35:1c:b3:ba:71:
6d:77:ba:b3:a4:7e:87:36:51:38:3e:3f:3e:9e:9d:5c:6c:3f:
9b:9d:51:d1:c9:ea:26:5c:52:7c:b7:cb:84:c2:b7:7c:32:87:
ca:ce:98:f7:0d:2e:45:07:f4:ce:44:49:7a:cd:c9:31:5d:1e:
65:34:b9:71:ac:6c:9a:58:f4:d2:be:bc:9f:e5:4c:27:3d:c1:
6e:5c:93:b6:d4:65:19:88:99:e9:3b:a3:21:f7:cf:c6:de:18:
0a:48:6e:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plDg+O8D68aE+eK0/yJKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YmIyYzE0OGVmMGVlMDBmZjVhMjIxYWYxYmM2MWM3ZTE4
YWE0YmMwHhcNMjYwNTE1MDMwMDM5WhcNMjYwNTE2MDMwMDM5WjAzMTEwLwYDVQQD
Eyg5NzNmNGQ2OGFlNzQ4NzhlZGYxYWI3ZjU3MzljYWM4NzMwYjRmMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cDI+g9H1gcKy9q7YpcQs8vROx7V
WbqBrIa6ioxe7YFiaRjHfijbtlZaHAmSgWFaXVA0TnI/sXgWRBshkH++PL/tV7KH
tn8vsEAdMroZXuKyuSa4ypku5j1f3oQIVd8aj4fid2PWJesuLAEeUxrSmi1XVG49
mrvN4nK56P8V06v51MWdKcGOWqqyfFKmdzEC0wuPvILP30UOS/Mj1HM4cHOVtX6D
MEcqG4iOfbd8cpUop6fNWz+GaxJbkleuvepc3Uhme8G+ufsj/NlhhK0eFluKd6A7
leAQUtspRzPBM/s55Qr7+C4QPT5pFNqS4AMKaW2y1tKmRpG3IAV0eDZDXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc/TWiudIeO3xq39XOcrIcwtPDwMB8GA1UdIwQY
MBaAFMm7LBSO8O4A/1oiGvG8YcfhiqS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUt
MmVhNzA5OGZlODg1LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUtMmVhNzA5OGZlODg1
LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ds7+Ogo
X4AD4o0w8gvjNH1yBVSa2hoZQ/XVJk/zuRe+difVv+EHOUlqiNRcWx+ueiyn0UZK
65tWN0c9iu+7Dr0bCSCbC1vKIhCKBJIGERTuhZgDYUrvGGFgAF6KJWb6CQU9t3BJ
toe29IJ562RItz+eczbeKVaQZnbFexEV3dZ+HexZlVHguN6kQT/JAefggU2XUFQP
iT0WlviVYDUcs7pxbXe6s6R+hzZROD4/Pp6dXGw/m51R0cnqJlxSfLfLhMK3fDKH
ys6Y9w0uRQf0zkRJes3JMV0eZTS5caxsmlj00r68n+VMJz3BblyTttRlGYiZ6Tuj
IffPxt4YCkhuLA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:17 2026 by rpki-client