Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: XesS4uWmIkZaIIbCqI2OneidxVvGpGEVnl9tBEvgPvY=
Subject key identifier: 06:E4:97:21:E8:F5:C9:83:60:AC:D6:66:49:ED:D3:54:9E:0C:CD:01
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019F818C1BF7CCC3C068CBD32B48BBB40BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 09A7
Signing time: Mon 20 Jul 2026 22:01:10 +0000
Manifest this update: Mon 20 Jul 2026 22:01:10 +0000
Manifest next update: Tue 21 Jul 2026 22:01:10 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: 87V/Gs5K+0ZY7FlIk7wdF1S3Hl13IUSNQZZ3XL/cHoU=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:8c:1b:f7:cc:c3:c0:68:cb:d3:2b:48:bb:b4:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jul 20 22:01:10 2026 GMT
Not After : Jul 21 22:01:10 2026 GMT
Subject: CN=06e49721e8f5c98360acd66649edd3549e0ccd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:20:d4:93:12:af:ab:2d:52:79:98:ca:45:
2f:4e:56:d2:28:47:4c:47:67:cd:b9:03:fa:21:9a:
0d:21:ee:60:50:a2:2a:ed:e4:37:82:57:8b:4a:1d:
94:f2:42:61:b2:d0:86:2e:96:eb:0d:65:c9:be:1a:
aa:eb:6c:e5:84:26:d8:d8:9b:6d:cd:fd:ea:25:c1:
d1:d1:c6:8e:20:b0:5b:77:7f:81:56:06:34:55:c4:
fb:6d:63:aa:13:43:a8:b2:91:5c:ca:21:30:d6:d5:
b6:c6:ea:2e:58:35:7a:b2:69:fe:58:c6:11:c4:e3:
ea:40:11:4e:9f:7b:8c:6c:1f:bf:f3:46:ae:ef:31:
ab:39:4d:8a:4c:72:f6:ee:83:70:e5:14:e9:f1:a5:
1d:5d:57:50:b5:45:ac:3c:ca:e6:f7:34:17:97:c0:
cc:0b:66:b5:8b:88:26:59:3f:90:c1:fc:75:65:18:
bb:f0:40:86:99:66:68:11:ca:b1:52:fd:53:a2:7f:
b9:fb:45:0c:9b:7d:0e:f6:3a:1f:15:18:1f:c4:4c:
e6:59:61:e8:89:f9:52:f2:7c:2c:84:04:ca:ca:0e:
60:a0:8d:c7:90:f0:cb:05:a8:dd:31:99:d3:eb:94:
a4:cf:e6:af:fc:d8:ee:91:6c:2b:6c:18:a3:86:22:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:97:21:E8:F5:C9:83:60:AC:D6:66:49:ED:D3:54:9E:0C:CD:01
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c2:bc:b2:1b:c0:bc:82:4c:ea:8b:88:40:6f:d9:62:4c:3d:
17:8f:78:00:c0:a6:6b:85:de:05:d5:72:c1:fd:1d:42:02:e6:
00:f2:9c:a3:ed:a4:85:28:41:fb:38:7c:9a:b5:44:61:55:72:
35:f7:ea:80:0b:78:24:3f:ab:c4:76:18:bf:06:a4:b6:c5:f0:
46:dd:23:7d:47:5a:42:97:66:27:51:23:5d:fa:3e:e8:34:bd:
d9:3a:9c:06:e4:f2:a0:f7:41:a9:ca:ac:fc:bd:04:06:dc:30:
d8:3c:81:df:9f:24:5c:99:b3:54:40:23:73:ac:16:ed:f6:c5:
1a:b0:e6:be:f7:52:84:fc:ed:9f:62:56:42:c3:5f:09:77:b2:
e2:63:cd:a7:35:bb:a5:15:d0:3e:74:04:9e:3e:ea:18:a8:84:
39:d9:b7:5f:55:9d:66:ba:ae:73:93:54:83:d4:99:d8:02:5e:
d2:d9:55:02:c1:bb:bc:ef:9e:a6:3f:93:45:3f:60:d0:e4:10:
23:5a:12:ba:ee:74:61:c3:f7:de:53:26:22:9c:b0:4f:d2:94:
b1:f1:50:5f:d1:c9:15:5a:4e:0e:13:98:1c:30:b3:0e:24:e9:
81:8f:26:0a:fb:65:9b:15:d9:fd:c0:ac:0f:85:2b:b4:0f:f5:
d7:47:c1:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+BjBv3zMPAaMvTK0i7tAvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjYwNzIwMjIwMTEwWhcNMjYwNzIxMjIwMTEwWjAzMTEwLwYDVQQD
EygwNmU0OTcyMWU4ZjVjOTgzNjBhY2Q2NjY0OWVkZDM1NDllMGNjZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdsg1JMSr6stUnmYykUvTlbSKEdM
R2fNuQP6IZoNIe5gUKIq7eQ3gleLSh2U8kJhstCGLpbrDWXJvhqq62zlhCbY2Jtt
zf3qJcHR0caOILBbd3+BVgY0VcT7bWOqE0OospFcyiEw1tW2xuouWDV6smn+WMYR
xOPqQBFOn3uMbB+/80au7zGrOU2KTHL27oNw5RTp8aUdXVdQtUWsPMrm9zQXl8DM
C2a1i4gmWT+Qwfx1ZRi78ECGmWZoEcqxUv1Ton+5+0UMm30O9jofFRgfxEzmWWHo
iflS8nwshATKyg5goI3HkPDLBajdMZnT65Skz+av/NjukWwrbBijhiLA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbklyHo9cmDYKzWZknt01SeDM0BMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8K8shvA
vIJM6ouIQG/ZYkw9F494AMCma4XeBdVywf0dQgLmAPKco+2khShB+zh8mrVEYVVy
NffqgAt4JD+rxHYYvwaktsXwRt0jfUdaQpdmJ1EjXfo+6DS92TqcBuTyoPdBqcqs
/L0EBtww2DyB358kXJmzVEAjc6wW7fbFGrDmvvdShPztn2JWQsNfCXey4mPNpzW7
pRXQPnQEnj7qGKiEOdm3X1WdZrquc5NUg9SZ2AJe0tlVAsG7vO+epj+TRT9g0OQQ
I1oSuu50YcP33lMmIpywT9KUsfFQX9HJFVpODhOYHDCzDiTpgY8mCvtlmxXZ/cCs
D4UrtA/110fBJg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:24 2026 by rpki-client