Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: +9N5cDoMXHSubd7Flj+CfQqEcrzyw5JgvBF1jOTEOec=
Subject key identifier: D3:B6:E2:29:8E:C2:4D:F8:11:13:A2:B6:B5:84:61:D6:0B:78:76:08
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 01A0058281BBD90CE3EABEF41C595B648527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 15C3
Signing time: Sat 15 Aug 2026 13:00:33 +0000
Manifest this update: Sat 15 Aug 2026 13:00:33 +0000
Manifest next update: Sun 16 Aug 2026 13:00:33 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: JVvCSDu8rrifYpO5MIC8vy1zrds.roa (hash: okxALFImBayqCq+MjZ+88HtUfnizSp2j3P1VuBRZTtY=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: NgwNSXrcpQd3vjAKiA3yHSmSWO9GKLguobcJ8ZWxLR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:82:81:bb:d9:0c:e3:ea:be:f4:1c:59:5b:64:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Aug 15 13:00:33 2026 GMT
Not After : Aug 16 13:00:33 2026 GMT
Subject: CN=d3b6e2298ec24df81113a2b6b58461d60b787608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:ac:ad:8b:06:fe:d2:44:bc:78:3d:85:4e:
c9:5b:84:c5:00:3d:7f:ba:5c:b7:c8:17:c7:e1:a1:
e3:c1:7e:1b:1e:32:d7:80:4e:7a:76:0b:fb:5d:79:
3c:9c:70:7d:3b:8c:31:62:2b:d7:da:cc:6b:2e:f8:
9e:ba:46:67:76:39:f6:0f:27:87:47:10:42:0f:09:
c7:46:67:4a:23:65:0d:a7:80:2a:8c:81:5d:c6:87:
c4:ff:79:f9:67:68:8d:49:d6:29:02:f0:5c:04:ed:
99:1a:87:cc:4f:e1:0f:80:9a:75:32:2e:af:38:96:
4e:c4:93:f1:0c:13:c4:54:a7:9e:2e:86:60:18:ba:
68:31:86:7d:8c:ca:8e:4c:ea:90:4e:93:18:4e:15:
b9:fc:1c:04:89:00:3d:32:11:f2:1b:6d:ff:1d:97:
20:ef:cf:c0:d7:5d:6d:29:82:ff:a7:c6:c5:a1:9f:
fa:30:ca:f0:04:f3:fa:6b:1c:cc:93:55:03:a9:d8:
f6:8a:19:54:db:77:cd:26:5a:97:ab:9e:27:bc:36:
0b:c1:58:c9:09:db:de:44:ce:36:88:36:d5:4c:d1:
b5:1a:ce:88:ca:9a:d4:56:f0:5a:d5:d3:92:8c:88:
43:f7:6d:3f:df:00:5a:f7:58:ef:67:36:0f:b8:6b:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:E2:29:8E:C2:4D:F8:11:13:A2:B6:B5:84:61:D6:0B:78:76:08
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e9:4f:73:90:b9:26:d6:7d:03:08:1c:b8:07:c4:b8:ee:ae:
34:af:f8:b4:b4:05:4b:00:2e:9d:b8:08:dc:ac:b5:6b:b2:be:
80:3c:5f:a7:28:f7:d1:af:fd:31:e0:59:93:86:0e:5d:ef:36:
7c:42:6c:47:ce:d1:c2:53:33:68:b7:9c:bb:22:c9:17:a4:61:
9f:51:58:b7:50:4d:11:87:88:ae:55:f5:34:69:d1:b2:1e:13:
6d:5b:ce:4d:d4:90:3b:69:b2:7b:12:d0:55:19:85:58:bd:e0:
13:2c:7a:00:2b:9d:c8:eb:52:73:8b:59:fd:95:b1:1a:3a:ea:
d4:cd:a5:3e:49:f1:d8:bd:19:a2:fb:71:fc:ba:18:78:24:93:
d3:91:bb:69:99:b6:1f:5c:46:24:2c:d2:55:8d:ed:a2:96:c1:
ad:3f:8f:56:4b:0a:22:eb:4e:07:f2:f7:eb:32:f9:51:6c:4b:
47:8c:06:ec:d6:0b:1d:f7:cd:16:eb:6f:44:d1:23:b1:ec:a1:
6d:ee:a3:1f:46:5d:60:1a:8a:37:48:66:6b:38:8a:e4:79:fe:
0c:c6:5e:9b:29:98:3d:fb:c1:89:dc:91:26:11:61:38:0e:c7:
fc:b4:83:9e:42:de:4c:65:85:bb:26:33:0b:6d:3b:67:42:e6:
d3:1b:68:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAFgoG72Qzj6r70HFlbZIUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjYwODE1MTMwMDMzWhcNMjYwODE2MTMwMDMzWjAzMTEwLwYDVQQD
EyhkM2I2ZTIyOThlYzI0ZGY4MTExM2EyYjZiNTg0NjFkNjBiNzg3NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LCsrYsG/tJEvHg9hU7JW4TFAD1/
uly3yBfH4aHjwX4bHjLXgE56dgv7XXk8nHB9O4wxYivX2sxrLvieukZndjn2DyeH
RxBCDwnHRmdKI2UNp4AqjIFdxofE/3n5Z2iNSdYpAvBcBO2ZGofMT+EPgJp1Mi6v
OJZOxJPxDBPEVKeeLoZgGLpoMYZ9jMqOTOqQTpMYThW5/BwEiQA9MhHyG23/HZcg
78/A111tKYL/p8bFoZ/6MMrwBPP6axzMk1UDqdj2ihlU23fNJlqXq54nvDYLwVjJ
CdveRM42iDbVTNG1Gs6IyprUVvBa1dOSjIhD920/3wBa91jvZzYPuGuk6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO24imOwk34EROitrWEYdYLeHYIMB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzelPc5C5
JtZ9AwgcuAfEuO6uNK/4tLQFSwAunbgI3Ky1a7K+gDxfpyj30a/9MeBZk4YOXe82
fEJsR87RwlMzaLecuyLJF6Rhn1FYt1BNEYeIrlX1NGnRsh4TbVvOTdSQO2myexLQ
VRmFWL3gEyx6ACudyOtSc4tZ/ZWxGjrq1M2lPknx2L0Zovtx/LoYeCST05G7aZm2
H1xGJCzSVY3topbBrT+PVksKIutOB/L36zL5UWxLR4wG7NYLHffNFutvRNEjseyh
be6jH0ZdYBqKN0hmaziK5Hn+DMZemymYPfvBidyRJhFhOA7H/LSDnkLeTGWFuyYz
C207Z0Lm0xtorw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 17:50:16 2026 by rpki-client