Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: CUB3Ue4S1Ks1/GubACfHy2FfHlvxQMTjMxwg+QTtIXA=
Subject key identifier: E8:4A:79:F3:D7:9E:EA:1E:DD:66:78:36:6E:6A:E9:42:0A:6F:90:64
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019E2881BB34719D9ABFE13C174DED9D13AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 1140
Signing time: Thu 14 May 2026 22:00:51 +0000
Manifest this update: Thu 14 May 2026 22:00:51 +0000
Manifest next update: Fri 15 May 2026 22:00:51 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: +yZIfrs87p5w+rGcOSZmJ+fFfyf0lFZXczi6vcRKkY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:bb:34:71:9d:9a:bf:e1:3c:17:4d:ed:9d:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: May 14 22:00:51 2026 GMT
Not After : May 15 22:00:51 2026 GMT
Subject: CN=e84a79f3d79eea1edd6678366e6ae9420a6f9064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:63:2a:3a:d2:e1:b9:50:49:1b:8e:b5:04:
4e:d4:49:52:f6:15:2b:a8:b7:2b:4d:7b:f9:4d:55:
0b:cd:8c:54:ff:22:54:69:ca:58:06:63:3b:15:4a:
a1:32:30:41:e5:fd:fe:2d:5b:86:69:e2:4d:eb:89:
b3:91:b6:44:bd:30:88:1a:89:14:c6:17:25:cd:b9:
da:3e:2b:fc:4f:c6:ae:27:5f:ff:ea:b2:ed:9f:89:
d7:86:7a:52:dc:f0:bd:65:76:91:dd:75:69:3e:16:
9d:87:4b:63:cf:04:d4:7e:4b:8c:7c:4b:36:f2:98:
01:71:e7:17:25:50:64:2f:07:c6:1f:fc:bb:eb:ce:
90:59:1c:cc:7d:6c:b1:57:27:e0:cb:97:ca:22:b1:
a3:10:ea:fd:0e:fa:f9:b6:0a:8a:c9:5d:e3:c4:9e:
42:82:a6:5a:10:22:68:81:ef:72:dd:1b:10:b6:65:
7a:ac:48:10:75:a7:1e:79:89:5a:f7:47:bd:e3:8d:
60:b5:88:b3:cf:41:64:70:f0:fa:d1:46:c0:b0:af:
67:b1:45:52:4a:68:19:bd:ed:14:e7:7e:2b:9e:3d:
3c:74:ed:55:cd:9b:6b:c7:85:3b:af:3e:a6:4d:b9:
c6:ec:ac:52:fb:27:aa:5d:d6:6c:24:32:02:fc:de:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:79:F3:D7:9E:EA:1E:DD:66:78:36:6E:6A:E9:42:0A:6F:90:64
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e5:20:ca:e5:4f:69:ae:07:64:0a:0c:f5:e3:af:3b:62:ab:
e9:10:41:3c:82:7f:1b:8c:e1:64:03:47:b2:d3:01:ae:80:a2:
12:81:b6:37:93:5f:a8:b7:ec:44:2b:b4:94:98:c4:79:70:d2:
b3:56:2d:d8:f9:d9:05:57:a6:cd:eb:99:63:ac:6e:94:81:3c:
8a:18:47:d1:a6:04:76:87:37:15:88:ed:6e:aa:e8:cd:ed:53:
be:2c:ec:58:13:ee:3c:42:12:a3:63:82:b7:02:2f:a7:00:7d:
93:49:c8:30:e2:0b:a1:a6:bb:48:17:63:58:e1:1c:da:dd:7e:
56:62:60:ce:e8:7b:4a:e5:8e:ba:14:14:c0:cf:ac:8d:d2:65:
09:08:1e:9a:02:f5:a2:20:74:95:08:dd:5a:3f:6f:35:06:de:
e2:3f:9d:19:65:55:0c:74:8a:87:44:f8:6e:0f:21:f1:c8:dd:
d2:0f:41:a0:31:81:1f:e4:aa:22:d0:b7:a7:f8:1c:5d:c4:2b:
16:6d:48:2e:1b:46:a8:00:dd:ab:74:49:19:98:a5:32:71:7d:
2f:a6:3a:cf:2f:5a:a0:f6:be:fa:a3:23:4d:c1:bc:88:fb:c0:
5b:9d:f4:84:28:a5:87:29:ab:ba:14:ee:8a:1d:b5:83:c7:03:
67:51:07:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogbs0cZ2av+E8F03tnROuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjYwNTE0MjIwMDUxWhcNMjYwNTE1MjIwMDUxWjAzMTEwLwYDVQQD
EyhlODRhNzlmM2Q3OWVlYTFlZGQ2Njc4MzY2ZTZhZTk0MjBhNmY5MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHtjKjrS4blQSRuOtQRO1ElS9hUr
qLcrTXv5TVULzYxU/yJUacpYBmM7FUqhMjBB5f3+LVuGaeJN64mzkbZEvTCIGokU
xhclzbnaPiv8T8auJ1//6rLtn4nXhnpS3PC9ZXaR3XVpPhadh0tjzwTUfkuMfEs2
8pgBcecXJVBkLwfGH/y7686QWRzMfWyxVyfgy5fKIrGjEOr9Dvr5tgqKyV3jxJ5C
gqZaECJoge9y3RsQtmV6rEgQdaceeYla90e9441gtYizz0FkcPD60UbAsK9nsUVS
SmgZve0U534rnj08dO1VzZtrx4U7rz6mTbnG7KxS+yeqXdZsJDIC/N46wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhKefPXnuoe3WZ4Nm5q6UIKb5BkMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+UgyuVP
aa4HZAoM9eOvO2Kr6RBBPIJ/G4zhZANHstMBroCiEoG2N5NfqLfsRCu0lJjEeXDS
s1Yt2PnZBVemzeuZY6xulIE8ihhH0aYEdoc3FYjtbqroze1TvizsWBPuPEISo2OC
twIvpwB9k0nIMOILoaa7SBdjWOEc2t1+VmJgzuh7SuWOuhQUwM+sjdJlCQgemgL1
oiB0lQjdWj9vNQbe4j+dGWVVDHSKh0T4bg8h8cjd0g9BoDGBH+SqItC3p/gcXcQr
Fm1ILhtGqADdq3RJGZilMnF9L6Y6zy9aoPa++qMjTcG8iPvAW530hCilhymruhTu
ih21g8cDZ1EH8A==
-----END CERTIFICATE-----
Generated at Fri May 15 07:03:39 2026 by rpki-client