Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: j2S3tX41Vpx8lzyGC8v4lmePbePSmxyLmrN0K/XiQ0A=
Subject key identifier: 26:49:AE:19:64:41:F6:22:BF:E4:B6:56:D9:4E:48:52:37:10:14:8C
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019FA97523511A49B529DDFD80A3E34A8A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0A50
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: jzaCtu+kVdIpFuxv4+oSMJLD0HEYW9aJO32Dq7qjwh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:23:51:1a:49:b5:29:dd:fd:80:a3:e3:4a:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=2649ae196441f622bfe4b656d94e48523710148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:70:12:1c:23:f7:1c:24:7b:2c:26:6a:d0:
c1:21:dd:92:14:c6:24:fb:35:ae:cf:88:7e:93:f3:
83:b3:fe:a9:4d:b7:13:2b:a1:a9:33:79:01:94:3e:
12:4f:40:96:02:eb:b6:0e:f1:d1:e4:24:2b:7f:a6:
06:00:68:a4:80:5b:be:a9:2e:8b:36:3e:e4:a9:91:
a4:3e:f6:27:e1:e2:ad:fe:80:64:e1:69:1e:57:73:
6c:a4:0e:11:1f:6a:ef:7e:25:2b:e6:fe:35:3a:ad:
a5:4e:41:1c:0d:6e:a5:74:5e:52:64:90:31:3c:91:
ec:ec:b2:01:39:8a:1c:cb:2f:af:57:47:7e:dd:9d:
5c:cc:77:ff:c9:01:62:da:ac:62:3c:f5:a1:28:24:
e6:e9:24:1b:d9:2f:6b:7d:87:b4:82:59:82:60:23:
8b:2f:90:91:71:cc:05:41:61:22:8b:7e:d0:ca:67:
63:fc:5b:26:59:da:48:53:a9:c1:bd:89:4a:e3:38:
f9:c1:b0:e9:b1:12:a3:83:d3:34:a7:32:0e:cd:0e:
31:7f:d0:1f:00:9a:2d:49:9f:bf:7f:71:3d:e1:e5:
80:24:cd:ea:64:74:81:77:85:a2:47:12:b2:53:40:
c8:2d:e3:08:6e:c2:95:60:08:9e:c0:17:34:55:59:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:AE:19:64:41:F6:22:BF:E4:B6:56:D9:4E:48:52:37:10:14:8C
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1c:2f:1e:fe:de:a9:75:03:e7:b9:af:4b:3c:2d:21:24:c7:
43:eb:9e:b6:2c:0e:be:e1:a4:da:63:a9:dd:0c:2d:ab:59:52:
64:9c:26:30:17:5b:b0:00:f4:dd:db:67:17:91:b0:a2:46:ad:
cc:21:30:11:1f:55:0e:63:37:b7:ec:0e:98:2a:5d:e3:e9:ec:
44:90:eb:1c:5e:38:ad:9a:14:a1:31:33:fa:50:69:bb:5a:f7:
7f:fe:b3:01:36:bd:7a:53:e2:4f:91:0d:fc:1a:f0:ea:af:d9:
83:58:b7:97:9b:bf:bd:02:b2:fc:ee:16:e9:c4:b4:60:1e:de:
28:10:8f:37:6d:80:fb:33:4b:fe:80:15:ca:c4:88:a8:0a:33:
35:7b:61:51:84:aa:87:6c:4c:1b:a5:95:44:6d:17:e7:94:dd:
4a:4c:82:8a:58:a6:64:68:41:64:55:5d:e2:b3:ea:57:d8:97:
45:00:66:78:49:6c:95:55:63:11:d9:9a:b6:51:63:fc:75:bb:
76:d9:0a:64:05:b9:23:73:20:49:39:da:d4:05:ae:98:22:62:
35:9a:c9:90:e8:59:28:bc:5b:8d:a7:1a:9a:a1:36:96:b9:86:
50:9e:cb:34:4e:a5:be:de:34:fe:2b:4c:58:65:fa:20:d7:dc:
b5:75:f3:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdSNRGkm1Kd39gKPjSooKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy
OGIwMTgwHhcNMjYwNzI4MTYwMDUzWhcNMjYwNzI5MTYwMDUzWjAzMTEwLwYDVQQD
EygyNjQ5YWUxOTY0NDFmNjIyYmZlNGI2NTZkOTRlNDg1MjM3MTAxNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllVwEhwj9xwkeywmatDBId2SFMYk
+zWuz4h+k/ODs/6pTbcTK6GpM3kBlD4ST0CWAuu2DvHR5CQrf6YGAGikgFu+qS6L
Nj7kqZGkPvYn4eKt/oBk4WkeV3NspA4RH2rvfiUr5v41Oq2lTkEcDW6ldF5SZJAx
PJHs7LIBOYocyy+vV0d+3Z1czHf/yQFi2qxiPPWhKCTm6SQb2S9rfYe0glmCYCOL
L5CRccwFQWEii37Qymdj/FsmWdpIU6nBvYlK4zj5wbDpsRKjg9M0pzIOzQ4xf9Af
AJotSZ+/f3E94eWAJM3qZHSBd4WiRxKyU0DILeMIbsKVYAiewBc0VVlGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZJrhlkQfYiv+S2VtlOSFI3EBSMMB8GA1UdIwQY
MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt
MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi
LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBwvHv7e
qXUD57mvSzwtISTHQ+uetiwOvuGk2mOp3Qwtq1lSZJwmMBdbsAD03dtnF5Gwokat
zCEwER9VDmM3t+wOmCpd4+nsRJDrHF44rZoUoTEz+lBpu1r3f/6zATa9elPiT5EN
/Brw6q/Zg1i3l5u/vQKy/O4W6cS0YB7eKBCPN22A+zNL/oAVysSIqAozNXthUYSq
h2xMG6WVRG0X55TdSkyCilimZGhBZFVd4rPqV9iXRQBmeElslVVjEdmatlFj/HW7
dtkKZAW5I3MgSTna1AWumCJiNZrJkOhZKLxbjacamqE2lrmGUJ7LNE6lvt40/itM
WGX6INfctXXzpw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:47 2026 by rpki-client