Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: kV9kEWNuGQq4X+29jbJICxmILxkb6ls/tuujSy+90xw=
Subject key identifier: 74:17:B6:18:60:EA:3E:94:B9:F2:5F:51:7F:A2:D4:24:7D:1A:D1:B2
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019F1BD6927A642138EE57E0F40ADB9565F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 15FD
Signing time: Wed 01 Jul 2026 04:01:14 +0000
Manifest this update: Wed 01 Jul 2026 04:01:14 +0000
Manifest next update: Thu 02 Jul 2026 04:01:14 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: MXRDXbjxXlcCjBD/6Ts542kNiKO0x0BygeIkn4GDSDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:92:7a:64:21:38:ee:57:e0:f4:0a:db:95:65:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jul 1 04:01:14 2026 GMT
Not After : Jul 2 04:01:14 2026 GMT
Subject: CN=7417b61860ea3e94b9f25f517fa2d4247d1ad1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:f4:a1:56:07:d9:12:47:80:13:ab:89:6a:
58:eb:6f:f8:51:b2:e1:af:7a:70:09:dd:9c:e9:b2:
0e:dd:c7:b2:04:3a:22:19:67:a3:30:a1:91:64:a5:
bd:77:1b:28:29:45:4a:9c:c8:e9:c2:61:a2:04:8d:
73:13:e3:69:f2:36:3c:cb:8a:ef:0c:f9:53:29:ea:
fd:4c:e7:97:51:17:b9:d4:36:69:2f:55:2b:96:4a:
31:ef:2e:ab:30:dc:ff:c3:e4:d1:c6:bf:fd:29:c2:
6e:6d:ef:2d:f5:ec:e0:28:ca:fc:9d:9d:b1:8d:05:
22:4a:3d:ca:2b:aa:25:64:d6:c7:60:d1:3d:0f:50:
72:03:19:f2:7b:4f:24:43:ec:9b:1d:ac:b6:37:fc:
6d:c3:d2:b1:2f:cc:b4:85:bc:e3:49:01:1c:94:1c:
ff:bb:f6:25:02:a3:0d:db:90:8b:cc:6e:c9:31:e4:
b9:a3:4e:df:99:cb:64:e9:5b:e9:4d:c4:9d:9f:c4:
fb:65:92:1d:44:ed:3a:07:13:ff:90:73:14:02:6c:
e9:be:2d:56:34:44:5d:df:79:10:5e:f2:ec:84:8b:
dd:81:07:a4:81:4b:c7:be:15:a3:25:5e:68:68:1b:
e0:7e:10:9e:7e:83:99:ee:6a:01:99:a7:96:57:0b:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:B6:18:60:EA:3E:94:B9:F2:5F:51:7F:A2:D4:24:7D:1A:D1:B2
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:f8:a5:2e:d6:ad:41:97:7c:18:fd:37:bf:45:18:37:b6:
73:7f:0c:f6:a1:d5:f9:16:54:13:b5:b2:51:b2:0c:75:cf:2c:
42:d3:08:4f:b1:ba:3e:bd:1e:71:d1:ad:f8:87:ae:0d:a3:2e:
61:0b:b7:e3:96:02:32:00:6e:ab:4b:5b:fc:5a:39:95:57:4f:
85:32:83:27:24:2a:56:2c:d9:0e:36:88:60:88:bc:3a:18:94:
88:95:4a:1c:71:67:ec:6b:5c:b1:08:37:cd:52:30:71:db:d9:
e8:c1:32:94:19:f6:c3:8a:29:ba:c0:ce:01:f9:0f:30:49:a8:
21:6d:6d:e6:44:ce:30:ab:1b:07:ae:2b:f0:27:e4:9e:95:36:
08:17:cb:5c:96:76:54:76:63:dd:53:a0:c6:08:01:03:93:2c:
d9:b9:e5:16:d7:eb:df:ca:d6:15:52:9b:18:f6:34:5a:79:dc:
92:7a:70:79:d3:3d:96:47:5d:12:5b:8f:ab:f2:3b:9b:ee:91:
80:0c:6e:f5:9d:3c:58:eb:fe:3a:dd:47:53:28:77:ed:3f:20:
7e:5b:a7:74:d9:de:bc:a6:37:ed:49:34:c2:75:38:d1:ac:68:
7c:a0:77:0b:63:a2:75:48:d1:5a:9d:7e:38:b3:79:69:8e:30:
fa:3a:38:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8b1pJ6ZCE47lfg9ArblWX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjYwNzAxMDQwMTE0WhcNMjYwNzAyMDQwMTE0WjAzMTEwLwYDVQQD
Eyg3NDE3YjYxODYwZWEzZTk0YjlmMjVmNTE3ZmEyZDQyNDdkMWFkMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquL0oVYH2RJHgBOriWpY62/4UbLh
r3pwCd2c6bIO3ceyBDoiGWejMKGRZKW9dxsoKUVKnMjpwmGiBI1zE+Np8jY8y4rv
DPlTKer9TOeXURe51DZpL1Urlkox7y6rMNz/w+TRxr/9KcJube8t9ezgKMr8nZ2x
jQUiSj3KK6olZNbHYNE9D1ByAxnye08kQ+ybHay2N/xtw9KxL8y0hbzjSQEclBz/
u/YlAqMN25CLzG7JMeS5o07fmctk6VvpTcSdn8T7ZZIdRO06BxP/kHMUAmzpvi1W
NERd33kQXvLshIvdgQekgUvHvhWjJV5oaBvgfhCefoOZ7moBmaeWVwvijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQXthhg6j6UufJfUX+i1CR9GtGyMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6n4pS7W
rUGXfBj9N79FGDe2c38M9qHV+RZUE7WyUbIMdc8sQtMIT7G6Pr0ecdGt+IeuDaMu
YQu345YCMgBuq0tb/Fo5lVdPhTKDJyQqVizZDjaIYIi8OhiUiJVKHHFn7GtcsQg3
zVIwcdvZ6MEylBn2w4opusDOAfkPMEmoIW1t5kTOMKsbB64r8CfknpU2CBfLXJZ2
VHZj3VOgxggBA5Ms2bnlFtfr38rWFVKbGPY0WnncknpwedM9lkddEluPq/I7m+6R
gAxu9Z08WOv+Ot1HUyh37T8gflundNnevKY37Uk0wnU40axofKB3C2OidUjRWp1+
OLN5aY4w+jo4Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:51 2026 by rpki-client