
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: Easja/RHczpuDSrTvop/vmNC69ZnZIe3OwjkAWd3L6Q=
Subject key identifier: 4A:AA:96:C8:F0:AC:3D:E0:90:0F:06:B3:42:20:22:1D:FF:9F:8E:DE
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019E401C6DC8BFDF25BF9D6456D4DF1A2B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 038D
Signing time: Tue 19 May 2026 12:01:05 +0000
Manifest this update: Tue 19 May 2026 12:01:05 +0000
Manifest next update: Wed 20 May 2026 12:01:05 +0000
Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: PNhTb4AwebrqMY3xHReWS9+8s1XGmKywNy4Vb5XLwbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:1c:6d:c8:bf:df:25:bf:9d:64:56:d4:df:1a:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: May 19 12:01:05 2026 GMT
Not After : May 20 12:01:05 2026 GMT
Subject: CN=4aaa96c8f0ac3de0900f06b34220221dff9f8ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:c9:f3:8c:da:c1:a7:e4:85:cb:85:80:42:
5b:fb:40:89:b3:3b:da:b9:52:c5:cb:d2:79:3c:95:
d7:14:b0:ff:ec:f4:23:ee:04:d7:04:f7:52:e1:11:
12:5a:98:74:e8:0d:af:b8:57:67:e6:ff:77:0c:d2:
7a:49:83:02:d6:2f:63:cd:10:e2:dc:df:29:6d:e6:
9f:03:2c:19:4f:50:48:da:07:6d:5c:43:b3:73:60:
77:01:02:de:b9:73:ed:bc:b0:fc:5f:03:eb:6f:83:
d3:a2:49:e8:fb:33:ab:77:f0:c8:f2:65:79:e0:7b:
bf:f6:f5:ed:4d:e9:c5:a9:5d:f8:41:f8:3e:8c:41:
de:3b:ec:8a:30:16:d1:6f:bb:08:58:7b:89:8f:19:
ac:b6:af:bc:5b:b2:c7:a1:c7:ad:fd:22:3e:bb:5e:
ca:00:70:9d:ca:30:68:7c:48:74:08:e6:be:c3:6c:
3e:00:25:65:76:e4:e2:c7:e4:31:6c:7f:0c:aa:26:
7b:08:d1:4a:95:80:ef:a4:b3:e2:f5:6c:58:46:e8:
0a:40:f9:f1:57:a0:7e:99:a3:fb:07:a0:79:4e:4d:
58:ba:89:f1:65:bd:78:2d:34:cd:1e:b3:a4:7a:6b:
f7:17:46:15:60:59:2d:a0:dc:6e:7f:1f:2e:c9:79:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AA:96:C8:F0:AC:3D:E0:90:0F:06:B3:42:20:22:1D:FF:9F:8E:DE
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bd:27:e3:d8:b9:c4:5a:db:9f:d0:13:68:2e:26:06:29:54:
a0:6d:75:dc:3d:1b:91:55:35:0a:1a:cc:d1:93:9e:37:e1:15:
ad:bf:98:6f:9a:12:dc:6c:da:c5:7c:4d:c3:80:98:28:08:45:
60:94:df:aa:c4:17:a2:95:0b:87:02:3c:ee:75:07:69:a7:3b:
9d:6d:e4:ad:3a:a0:03:56:6d:66:80:0b:8f:e8:42:3d:26:f7:
1e:60:ee:72:68:a5:f4:4e:31:b4:e1:a6:a0:e8:ad:6b:ce:25:
69:44:3b:39:58:d4:df:df:0f:57:92:5c:19:65:12:65:df:95:
ec:91:c7:9c:77:8d:63:2a:a7:4e:e8:7b:4e:9e:94:f8:d2:a8:
1a:b2:b1:c9:ab:e0:ab:63:88:4d:42:23:f6:4e:0e:6b:0a:82:
7b:b3:d4:8f:9f:a4:8d:b2:d3:2f:6d:88:6b:c9:99:36:80:1f:
fc:d6:46:ad:9b:b4:34:9e:0c:75:87:8d:63:94:1e:cf:d0:83:
61:4d:13:cc:52:06:03:f1:40:ae:2b:35:fe:6c:31:f8:5f:25:
43:be:a1:98:10:4b:71:0f:63:cd:8f:fe:81:64:80:2c:e9:db:
f5:1a:e8:3c:96:ce:e2:a3:c6:e0:87:a4:51:32:d1:e4:ba:08:
ed:55:6b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5AHG3Iv98lv51kVtTfGitTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj
NTM4MWYwHhcNMjYwNTE5MTIwMTA1WhcNMjYwNTIwMTIwMTA1WjAzMTEwLwYDVQQD
Eyg0YWFhOTZjOGYwYWMzZGUwOTAwZjA2YjM0MjIwMjIxZGZmOWY4ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhfJ84zawafkhcuFgEJb+0CJszva
uVLFy9J5PJXXFLD/7PQj7gTXBPdS4RESWph06A2vuFdn5v93DNJ6SYMC1i9jzRDi
3N8pbeafAywZT1BI2gdtXEOzc2B3AQLeuXPtvLD8XwPrb4PTokno+zOrd/DI8mV5
4Hu/9vXtTenFqV34Qfg+jEHeO+yKMBbRb7sIWHuJjxmstq+8W7LHocet/SI+u17K
AHCdyjBofEh0COa+w2w+ACVlduTix+QxbH8MqiZ7CNFKlYDvpLPi9WxYRugKQPnx
V6B+maP7B6B5Tk1YuonxZb14LTTNHrOkemv3F0YVYFktoNxufx8uyXli0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqqlsjwrD3gkA8Gs0IgIh3/n47eMB8GA1UdIwQY
MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb0n49i5
xFrbn9ATaC4mBilUoG113D0bkVU1ChrM0ZOeN+EVrb+Yb5oS3GzaxXxNw4CYKAhF
YJTfqsQXopULhwI87nUHaac7nW3krTqgA1ZtZoALj+hCPSb3HmDucmil9E4xtOGm
oOita84laUQ7OVjU398PV5JcGWUSZd+V7JHHnHeNYyqnTuh7Tp6U+NKoGrKxyavg
q2OITUIj9k4OawqCe7PUj5+kjbLTL22Ia8mZNoAf/NZGrZu0NJ4MdYeNY5Qez9CD
YU0TzFIGA/FAris1/mwx+F8lQ76hmBBLcQ9jzY/+gWSALOnb9RroPJbO4qPG4Iek
UTLR5LoI7VVrvw==
-----END CERTIFICATE-----
Generated at Tue May 19 16:02:41 2026 by rpki-client