Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: 9+HOy83WOs0gxuPRd2a+/JbDzsBTBbpb2rWc4NnWhZA=
Subject key identifier: BC:33:85:55:C4:DA:27:91:D1:2E:28:9A:95:15:3E:4A:5E:1E:E6:D2
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019E2BB9DFB0F24F6DB9F3EA583D4412D8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 13:01:02 +0000
Manifest this update: Fri 15 May 2026 13:01:02 +0000
Manifest next update: Sat 16 May 2026 13:01:02 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: uTMIAl/vloBv0IX0bVtAN1gmsoCDM6PRflTqNEKCY/Q=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:b9:df:b0:f2:4f:6d:b9:f3:ea:58:3d:44:12:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: May 15 13:01:02 2026 GMT
Not After : May 16 13:01:02 2026 GMT
Subject: CN=bc338555c4da2791d12e289a95153e4a5e1ee6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:d0:b4:14:fa:ea:b2:69:b4:b9:0d:56:86:
0d:cd:47:ca:09:27:7f:9c:19:0e:a0:92:2f:a2:7b:
7d:03:61:b2:70:99:61:56:27:02:02:53:cd:42:60:
78:4e:f5:22:c9:9a:86:7e:a2:13:e1:0b:fc:f6:00:
b9:30:82:f9:38:43:f6:6a:0b:37:06:0b:92:a6:ce:
ea:49:e5:b0:a0:45:77:e2:d9:e5:b4:ba:29:23:7c:
9c:62:e7:03:b0:4d:6a:d7:84:53:dc:4f:91:2f:07:
5e:d1:59:83:68:fa:d7:d4:b0:9a:45:c5:d2:60:c0:
3a:b9:31:18:a7:fd:35:6d:5d:ba:bc:62:6c:45:6c:
56:d4:12:af:03:f9:39:38:9a:67:1f:a5:75:af:a8:
7e:2f:76:b2:58:31:22:d8:11:ab:78:b9:73:80:ad:
d5:60:50:b4:bc:c2:88:9b:0a:10:08:b1:2d:79:fe:
88:8f:ff:7a:a3:3d:8e:13:b1:48:dc:81:73:39:8d:
07:8e:e8:b7:ee:da:65:46:93:79:f3:0e:40:97:c9:
38:a4:b5:3e:a1:d2:08:ff:cb:5c:4c:23:ca:0c:df:
80:39:94:5a:25:c7:06:05:3b:1c:85:4a:9d:54:6c:
12:16:eb:98:26:3d:fd:ee:bb:18:95:82:c9:12:a1:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:85:55:C4:DA:27:91:D1:2E:28:9A:95:15:3E:4A:5E:1E:E6:D2
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:82:9f:95:3b:82:bb:07:65:3d:cc:b4:59:3d:41:fe:7f:ce:
64:09:8e:79:19:ce:d3:b6:23:18:96:4f:9c:04:64:70:44:41:
c1:45:db:b6:08:8d:06:2c:6c:e4:ff:88:a8:d5:3d:3d:09:df:
38:e7:20:fc:89:e1:d2:c0:d3:67:c2:93:8d:60:e4:13:cd:6b:
12:9f:d1:73:da:31:8d:be:67:c2:9f:f8:2f:60:7b:a3:58:81:
15:4d:92:7e:8e:65:28:f5:41:78:23:7d:e8:7b:1c:5d:82:56:
c8:47:0c:13:38:e0:37:15:2c:65:37:33:7f:5c:94:88:60:fd:
68:ba:86:ff:b2:c9:dc:82:b9:37:6a:86:08:9a:55:07:ba:2e:
fb:2d:f5:55:c6:13:af:6a:e3:f0:20:a9:f8:3a:44:e0:1c:e0:
a4:6f:b1:ba:de:7e:ce:b0:f3:53:73:de:7f:55:02:ae:1b:e4:
08:14:bb:6d:79:4c:e8:98:19:67:57:8f:bf:fe:82:a7:8d:a6:
07:b0:ce:09:15:95:b2:cc:52:10:a8:17:6c:58:0a:c0:e8:9d:
8c:4c:ea:02:16:ec:84:89:ce:f9:60:fc:b5:e2:93:f4:81:a8:
6e:e5:3c:d0:2d:1c:ec:19:0a:3c:c0:98:65:45:b5:dc:58:f2:
80:86:88:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rud+w8k9tufPqWD1EEtjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjYwNTE1MTMwMTAyWhcNMjYwNTE2MTMwMTAyWjAzMTEwLwYDVQQD
EyhiYzMzODU1NWM0ZGEyNzkxZDEyZTI4OWE5NTE1M2U0YTVlMWVlNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+XQtBT66rJptLkNVoYNzUfKCSd/
nBkOoJIvont9A2GycJlhVicCAlPNQmB4TvUiyZqGfqIT4Qv89gC5MIL5OEP2ags3
BguSps7qSeWwoEV34tnltLopI3ycYucDsE1q14RT3E+RLwde0VmDaPrX1LCaRcXS
YMA6uTEYp/01bV26vGJsRWxW1BKvA/k5OJpnH6V1r6h+L3ayWDEi2BGreLlzgK3V
YFC0vMKImwoQCLEtef6Ij/96oz2OE7FI3IFzOY0Hjui37tplRpN58w5Al8k4pLU+
odII/8tcTCPKDN+AOZRaJccGBTschUqdVGwSFuuYJj397rsYlYLJEqHxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwzhVXE2ieR0S4ompUVPkpeHubSMB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYKflTuC
uwdlPcy0WT1B/n/OZAmOeRnO07YjGJZPnARkcERBwUXbtgiNBixs5P+IqNU9PQnf
OOcg/Inh0sDTZ8KTjWDkE81rEp/Rc9oxjb5nwp/4L2B7o1iBFU2Sfo5lKPVBeCN9
6HscXYJWyEcMEzjgNxUsZTczf1yUiGD9aLqG/7LJ3IK5N2qGCJpVB7ou+y31VcYT
r2rj8CCp+DpE4BzgpG+xut5+zrDzU3Pef1UCrhvkCBS7bXlM6JgZZ1ePv/6Cp42m
B7DOCRWVssxSEKgXbFgKwOidjEzqAhbshInO+WD8teKT9IGobuU80C0c7BkKPMCY
ZUW13FjygIaIHQ==
-----END CERTIFICATE-----
Generated at Fri May 15 15:19:14 2026 by rpki-client