Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: Bw1PAlAMAp3AxF4MKodNKArhrKEZCnH0t8e57VAJVU8=
Subject key identifier: 36:BA:87:5A:B3:64:64:FB:B6:8C:C8:E5:24:03:11:24:7F:82:15:4C
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019EB544C0EBB3F4AB692580865A42763775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 111A
Signing time: Thu 11 Jun 2026 06:00:42 +0000
Manifest this update: Thu 11 Jun 2026 06:00:42 +0000
Manifest next update: Fri 12 Jun 2026 06:00:42 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: HNapVAJ46suScu5Bep1K1CtCHLKQVNO/bhFxQCF2VYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:44:c0:eb:b3:f4:ab:69:25:80:86:5a:42:76:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jun 11 06:00:42 2026 GMT
Not After : Jun 12 06:00:42 2026 GMT
Subject: CN=36ba875ab36464fbb68cc8e5240311247f82154c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:43:33:49:0f:41:8f:f6:31:60:6a:40:8c:
43:3a:93:00:4f:0c:19:72:35:04:58:7c:f8:fa:7a:
80:af:02:9f:aa:61:ea:7a:da:f9:ce:b5:ac:1d:b2:
ce:8f:f3:ab:cd:78:dd:19:67:cb:22:1f:77:6d:7d:
90:5d:66:41:04:aa:89:bf:87:f0:63:2f:cb:57:6a:
bb:21:84:17:39:80:01:3d:6b:0d:b4:78:f4:3c:52:
63:65:02:12:87:d3:61:39:2a:c4:35:0c:74:4f:e6:
52:e8:f8:8e:b8:6e:35:3f:02:44:68:2e:3a:4d:e8:
29:a4:2d:b7:5a:b4:1d:8f:f5:2b:61:b4:9b:7b:e4:
fc:07:80:83:21:4a:0f:1c:52:64:34:ee:62:f9:3a:
09:36:c5:77:9b:81:2b:4a:38:87:85:a8:e8:50:55:
c9:31:28:1c:b5:9f:c9:95:dc:1c:76:9d:bf:b4:75:
97:be:eb:d9:6d:13:4a:b4:7a:78:29:a6:fa:0b:23:
cf:2a:e5:f7:fb:5d:0f:78:c1:5d:d3:fd:05:b0:ad:
91:aa:d1:99:64:90:55:be:a5:b3:90:3a:3d:21:5d:
21:c1:ca:30:1f:92:f4:1e:26:aa:cf:20:e9:28:b3:
ca:44:dc:89:6a:8a:77:80:a1:90:c7:1a:a2:cd:d9:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:87:5A:B3:64:64:FB:B6:8C:C8:E5:24:03:11:24:7F:82:15:4C
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:4e:6c:df:23:b1:12:e7:4d:68:4c:c2:06:da:f0:ec:45:
df:5c:c7:7a:6c:4d:52:a0:b5:9a:96:00:5c:51:75:f3:2c:7f:
05:50:96:21:f8:65:dc:d3:e9:56:8d:b7:6c:a2:f3:a4:dc:9b:
90:22:0b:38:5a:d9:86:32:3c:8a:cb:94:ef:d5:99:ec:54:15:
fe:7f:5c:a7:8d:bf:0c:a8:9a:ee:58:7b:d4:1d:60:70:9a:c5:
a0:25:40:6c:ee:73:61:34:83:3c:b6:b2:d0:a2:f3:69:2f:a8:
c1:3a:da:b7:af:e8:2b:eb:5f:91:a7:4f:4a:7a:dd:7d:7f:28:
b9:2b:0d:8f:26:38:ec:b2:a1:23:ee:86:05:f9:1d:65:aa:72:
74:0e:3d:cd:52:11:56:f1:7f:64:4d:63:9f:96:9c:96:92:be:
1c:c7:c4:a3:fe:65:6f:46:dd:64:36:44:48:18:00:38:52:f7:
f2:c8:03:ea:41:f7:3d:47:69:5d:6d:cb:54:bf:ce:b0:7b:5e:
08:d8:d9:a4:db:99:08:97:00:9f:b2:25:57:38:9b:4a:af:44:
fa:24:f8:ff:2e:48:94:7e:3d:6b:e9:a9:d6:89:e2:80:92:7d:
7a:cc:8d:cb:4d:2f:e7:3c:fc:70:63:93:cf:a6:ae:59:85:c2:
c1:91:56:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61RMDrs/SraSWAhlpCdjd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjYwNjExMDYwMDQyWhcNMjYwNjEyMDYwMDQyWjAzMTEwLwYDVQQD
EygzNmJhODc1YWIzNjQ2NGZiYjY4Y2M4ZTUyNDAzMTEyNDdmODIxNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudDM0kPQY/2MWBqQIxDOpMATwwZ
cjUEWHz4+nqArwKfqmHqetr5zrWsHbLOj/OrzXjdGWfLIh93bX2QXWZBBKqJv4fw
Yy/LV2q7IYQXOYABPWsNtHj0PFJjZQISh9NhOSrENQx0T+ZS6PiOuG41PwJEaC46
TegppC23WrQdj/UrYbSbe+T8B4CDIUoPHFJkNO5i+ToJNsV3m4ErSjiHhajoUFXJ
MSgctZ/Jldwcdp2/tHWXvuvZbRNKtHp4Kab6CyPPKuX3+10PeMFd0/0FsK2RqtGZ
ZJBVvqWzkDo9IV0hwcowH5L0HiaqzyDpKLPKRNyJaop3gKGQxxqizdl/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa6h1qzZGT7tozI5SQDESR/ghVMMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZpObN8j
sRLnTWhMwgba8OxF31zHemxNUqC1mpYAXFF18yx/BVCWIfhl3NPpVo23bKLzpNyb
kCILOFrZhjI8isuU79WZ7FQV/n9cp42/DKia7lh71B1gcJrFoCVAbO5zYTSDPLay
0KLzaS+owTrat6/oK+tfkadPSnrdfX8ouSsNjyY47LKhI+6GBfkdZapydA49zVIR
VvF/ZE1jn5aclpK+HMfEo/5lb0bdZDZESBgAOFL38sgD6kH3PUdpXW3LVL/OsHte
CNjZpNuZCJcAn7IlVzibSq9E+iT4/y5IlH49a+mp1onigJJ9esyNy00v5zz8cGOT
z6auWYXCwZFWSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 13:31:11 2026 by rpki-client