Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: I50+q5AQlfbzOTxBiTzbQgq8SWhc+2aveamquffqxFU=
Subject key identifier: 5C:5B:D1:F1:F2:69:07:16:62:4D:83:BB:1E:02:17:C1:B9:28:31:55
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019D37F71EF0648789DFD81E2868307BCAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 113D
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: rtXPYeAoBAyZHquAWsdorQ5QNJgcOUq9VhDuwmDcbMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:f0:64:87:89:df:d8:1e:28:68:30:7b:ca:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=5c5bd1f1f2690716624d83bb1e0217c1b9283155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:7a:8e:6f:73:48:8f:14:dd:5f:4d:5e:2f:
08:1e:62:f7:d8:03:5c:05:dd:f3:7a:72:a3:4f:d5:
38:fb:5b:01:21:f5:37:b6:71:f4:79:50:a2:56:cf:
69:16:c9:12:fc:85:26:cd:5b:3a:c6:10:bf:a3:59:
15:68:14:7e:16:a6:b9:c7:e4:32:8d:66:68:42:ce:
a7:7a:01:83:7a:2b:9c:4f:54:f8:b7:07:a4:1f:18:
b5:d4:15:10:46:61:4c:33:9a:c2:a7:8f:15:d0:7e:
f1:6a:99:1b:37:da:41:e7:70:1e:1e:64:e0:12:75:
fc:73:88:82:36:86:ed:bd:7c:d1:31:d3:81:ee:c0:
54:02:67:29:b6:45:03:a8:31:8b:83:c6:32:fe:ef:
de:77:0a:34:fc:c2:79:0f:2a:32:7f:a2:d7:9d:70:
e0:7b:4d:4a:b0:9c:77:f8:20:fc:3d:ab:3c:ed:86:
ed:2e:54:fe:8f:43:2c:f2:21:a8:82:a6:65:a3:af:
aa:d3:0d:de:2b:ec:e8:7c:f3:e0:41:a0:61:1e:0f:
dc:ce:67:25:0b:ee:29:42:90:71:dd:7d:06:4b:7b:
ae:11:ea:b0:60:a6:f5:c4:44:f0:66:eb:4c:a2:50:
02:00:b9:6d:0b:08:c8:20:92:e5:8e:b0:5e:05:4e:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:D1:F1:F2:69:07:16:62:4D:83:BB:1E:02:17:C1:B9:28:31:55
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:a7:6f:6b:e7:50:24:dd:f8:6d:17:c1:72:13:1f:a5:70:
70:e7:d3:71:31:27:bc:02:e7:fb:4d:84:f4:96:e4:df:94:28:
98:f5:23:5c:59:55:d0:78:eb:48:20:9b:3a:3d:c0:0d:4d:a2:
42:35:2f:ca:33:ed:38:37:fb:a0:65:79:31:20:e6:eb:bd:b5:
93:97:88:5b:cb:b5:8a:9d:a7:d9:cd:62:a5:62:63:85:8a:ea:
3b:ef:01:fc:17:81:2c:f7:19:e6:e0:1d:15:21:31:61:6e:b3:
e1:1e:08:a6:2a:ff:f8:5c:f5:24:99:d8:98:67:ed:0b:49:4c:
11:fb:e7:47:97:ee:b4:ee:fe:c9:b8:9a:27:1e:17:7c:c4:e7:
df:c6:84:ec:a1:22:e4:b7:76:cc:c4:ec:b9:a9:ac:25:59:b1:
fb:2a:77:d0:f2:82:5a:be:02:2b:7e:11:67:46:52:ca:54:51:
90:76:78:2f:7e:93:25:25:35:e5:72:d3:44:e6:7d:85:0e:70:
7e:e5:32:ca:b3:77:e6:07:af:aa:a2:6b:81:a5:90:09:8c:b8:
86:bd:7a:48:84:11:ef:79:c9:c7:42:f9:bd:80:17:b4:44:2b:
6d:5f:20:3d:85:9a:3d:4b:15:9b:f4:69:55:d8:8b:37:aa:05:
66:10:f9:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039x7wZIeJ39geKGgwe8qjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm
OTJhNTkwHhcNMjYwMzI5MDUwMDM1WhcNMjYwMzMwMDUwMDM1WjAzMTEwLwYDVQQD
Eyg1YzViZDFmMWYyNjkwNzE2NjI0ZDgzYmIxZTAyMTdjMWI5MjgzMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS96jm9zSI8U3V9NXi8IHmL32ANc
Bd3zenKjT9U4+1sBIfU3tnH0eVCiVs9pFskS/IUmzVs6xhC/o1kVaBR+Fqa5x+Qy
jWZoQs6negGDeiucT1T4twekHxi11BUQRmFMM5rCp48V0H7xapkbN9pB53AeHmTg
EnX8c4iCNobtvXzRMdOB7sBUAmcptkUDqDGLg8Yy/u/edwo0/MJ5Dyoyf6LXnXDg
e01KsJx3+CD8Pas87YbtLlT+j0Ms8iGogqZlo6+q0w3eK+zofPPgQaBhHg/czmcl
C+4pQpBx3X0GS3uuEeqwYKb1xETwZutMolACALltCwjIIJLljrBeBU683QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxb0fHyaQcWYk2Dux4CF8G5KDFVMB8GA1UdIwQY
MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt
YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz
LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsanb2vn
UCTd+G0XwXITH6VwcOfTcTEnvALn+02E9Jbk35QomPUjXFlV0HjrSCCbOj3ADU2i
QjUvyjPtODf7oGV5MSDm6721k5eIW8u1ip2n2c1ipWJjhYrqO+8B/BeBLPcZ5uAd
FSExYW6z4R4Ipir/+Fz1JJnYmGftC0lMEfvnR5futO7+ybiaJx4XfMTn38aE7KEi
5Ld2zMTsuamsJVmx+yp30PKCWr4CK34RZ0ZSylRRkHZ4L36TJSU15XLTROZ9hQ5w
fuUyyrN35gevqqJrgaWQCYy4hr16SIQR73nJx0L5vYAXtEQrbV8gPYWaPUsVm/Rp
VdiLN6oFZhD5gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:49 2026 by rpki-client