Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: gaaIGKttpV0KJWAP/aBPH2fQlx/Bs5HXH7VowuZxTd8=
Subject key identifier: 9F:75:CD:74:9C:12:F9:26:15:F5:BB:AE:16:49:F7:10:F8:5D:DC:8C
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019E4F584CA1B0B2DE57ECFFD61A72C0FF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0CB3
Signing time: Fri 22 May 2026 11:00:47 +0000
Manifest this update: Fri 22 May 2026 11:00:47 +0000
Manifest next update: Sat 23 May 2026 11:00:47 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: 5kHBGagXyjhFVS+L8eCeQMZvqmSg2yfrAyYKHjz4HFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:4c:a1:b0:b2:de:57:ec:ff:d6:1a:72:c0:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: May 22 11:00:47 2026 GMT
Not After : May 23 11:00:47 2026 GMT
Subject: CN=9f75cd749c12f92615f5bbae1649f710f85ddc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:10:39:d2:e4:57:09:b1:a3:9c:cc:2c:7b:
1d:5e:19:da:70:4b:16:aa:99:26:39:42:39:ba:36:
df:b3:fd:ae:5a:eb:13:b8:87:80:8d:0c:3f:16:51:
b6:8d:0a:85:ea:34:7b:b5:74:82:b2:bb:60:72:da:
c2:7f:bc:a3:c9:16:e5:0f:85:32:6f:3a:01:b2:de:
1a:48:b3:d7:e2:3b:ee:d7:48:95:d6:5b:77:66:d9:
a6:11:18:18:30:75:10:c6:1e:73:07:3a:c3:24:f7:
f0:73:77:1a:c6:bc:20:33:df:51:48:9a:18:9d:a0:
a9:94:70:fa:ce:c1:6f:53:c1:5c:b1:03:fc:6d:22:
fb:14:62:3a:0f:59:07:c4:3a:ea:c9:a6:dc:0a:64:
cb:93:07:06:56:9c:41:5d:61:63:84:11:6a:87:c8:
e2:ed:f7:c4:07:e4:78:bc:ac:9b:6a:4d:2b:52:7e:
74:13:d8:8e:b4:fd:8a:87:e2:04:cc:7f:53:b9:7c:
cc:c9:35:ac:b2:4a:3d:ac:45:06:63:bb:80:4a:9c:
63:19:34:43:2a:45:07:b1:4c:82:a2:bd:46:ad:74:
37:ab:a2:18:1b:2c:50:6d:db:5d:fd:4d:f1:08:f5:
7b:c4:13:1e:85:e0:00:b3:3f:ae:2f:8f:b9:9b:8b:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:CD:74:9C:12:F9:26:15:F5:BB:AE:16:49:F7:10:F8:5D:DC:8C
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f1:90:42:71:83:b3:48:ec:21:9c:cc:bf:db:de:b7:bb:a9:
e2:bd:40:df:61:6d:66:ac:f3:46:94:34:f5:b9:a4:8f:9b:23:
1a:85:9f:4e:a3:55:d2:7a:c6:07:f8:f5:bc:64:a5:67:89:12:
35:27:24:7c:28:da:33:62:b7:81:b1:6a:a9:db:f5:2d:2f:66:
d4:a4:a4:a5:75:e5:14:c7:9e:6f:18:82:8c:a8:82:02:21:7e:
a8:cc:33:29:af:96:fc:d1:fe:82:bb:d3:d8:b1:6d:7a:f6:32:
f9:a3:9c:a4:26:c3:57:1e:56:2a:91:a4:26:a5:ce:d1:86:cc:
d1:ea:fd:c2:5e:86:72:20:5d:a9:81:2c:a5:47:41:a0:66:02:
7f:10:3f:36:c9:9c:7e:83:ce:84:78:e0:24:ec:5b:7d:5d:f8:
b6:c9:3f:48:f6:54:b8:37:a1:aa:fd:9b:55:fa:11:00:b3:6b:
9b:af:6e:c2:1b:68:ce:8d:ab:a7:22:f3:9a:bd:e3:49:41:69:
90:bf:e7:10:fa:26:c2:eb:d3:9a:48:32:af:11:68:67:d9:00:
7a:22:7c:ba:91:5b:d1:67:13:3d:85:f6:8b:c2:82:cd:f7:ed:
46:0c:e0:45:94:df:fe:05:91:45:e1:20:e3:39:f1:2d:be:31:
9f:de:6f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PWEyhsLLeV+z/1hpywP9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4
OTA1YmUwHhcNMjYwNTIyMTEwMDQ3WhcNMjYwNTIzMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg5Zjc1Y2Q3NDljMTJmOTI2MTVmNWJiYWUxNjQ5ZjcxMGY4NWRkYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF0QOdLkVwmxo5zMLHsdXhnacEsW
qpkmOUI5ujbfs/2uWusTuIeAjQw/FlG2jQqF6jR7tXSCsrtgctrCf7yjyRblD4Uy
bzoBst4aSLPX4jvu10iV1lt3ZtmmERgYMHUQxh5zBzrDJPfwc3caxrwgM99RSJoY
naCplHD6zsFvU8FcsQP8bSL7FGI6D1kHxDrqyabcCmTLkwcGVpxBXWFjhBFqh8ji
7ffEB+R4vKybak0rUn50E9iOtP2Kh+IEzH9TuXzMyTWssko9rEUGY7uASpxjGTRD
KkUHsUyCor1GrXQ3q6IYGyxQbdtd/U3xCPV7xBMeheAAsz+uL4+5m4vbMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ91zXScEvkmFfW7rhZJ9xD4XdyMMB8GA1UdIwQY
MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt
ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0
LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/GQQnGD
s0jsIZzMv9vet7up4r1A32FtZqzzRpQ09bmkj5sjGoWfTqNV0nrGB/j1vGSlZ4kS
NSckfCjaM2K3gbFqqdv1LS9m1KSkpXXlFMeebxiCjKiCAiF+qMwzKa+W/NH+grvT
2LFtevYy+aOcpCbDVx5WKpGkJqXO0YbM0er9wl6GciBdqYEspUdBoGYCfxA/Nsmc
foPOhHjgJOxbfV34tsk/SPZUuDehqv2bVfoRALNrm69uwhtozo2rpyLzmr3jSUFp
kL/nEPomwuvTmkgyrxFoZ9kAeiJ8upFb0WcTPYX2i8KCzfftRgzgRZTf/gWRReEg
4znxLb4xn95v0Q==
-----END CERTIFICATE-----
Generated at Fri May 22 15:09:51 2026 by rpki-client