Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: l86f1gp4T+485ekMDQdyI5PuWl9/OgR/WWb/RcOHUko=
Subject key identifier: 7E:E9:46:29:08:4F:52:77:04:C3:35:DF:48:6D:57:C7:15:B9:04:3D
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01A0024A86C1A4381B5B30CDE8BAFEF84532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 12EC
Signing time: Fri 14 Aug 2026 22:00:33 +0000
Manifest this update: Fri 14 Aug 2026 22:00:33 +0000
Manifest next update: Sat 15 Aug 2026 22:00:33 +0000
Files and hashes: 1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: 92gH46MbXbqxZ8Ru3sZ+ZU3mD4JBsAxHCg8fnEk4D2U=)
3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:86:c1:a4:38:1b:5b:30:cd:e8:ba:fe:f8:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Aug 14 22:00:33 2026 GMT
Not After : Aug 15 22:00:33 2026 GMT
Subject: CN=7ee94629084f527704c335df486d57c715b9043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:51:61:42:16:b5:b7:dd:a3:59:b4:9c:2c:
95:d1:03:dc:7b:fb:35:43:9a:52:c7:13:63:bd:e1:
c9:be:4c:f4:6b:3b:f3:6f:94:c7:2a:f5:6f:97:8a:
5c:d5:7a:b5:b1:c6:61:ca:f7:f4:70:c2:77:89:f2:
66:cc:c4:4a:03:23:fd:f5:1c:c5:ed:8e:07:70:58:
12:94:96:a0:3a:da:c2:31:11:ba:ae:c5:30:b6:56:
9c:72:bf:0f:48:71:5c:d8:4b:84:a9:ab:92:69:08:
95:3f:44:c4:29:f3:3d:33:22:52:77:dd:51:82:c8:
33:2e:74:58:7e:cf:3a:0c:b6:a4:7a:8a:c8:e0:e8:
1a:17:b1:32:d1:b9:b8:23:5a:f7:2b:bf:0d:3b:d9:
9e:f6:7f:8c:8e:92:7a:e2:98:fd:f2:b0:e2:90:4d:
ea:03:04:75:04:f1:13:ee:0c:48:96:c9:fa:f5:ed:
fa:79:7e:86:8f:05:60:6b:2b:92:0b:8b:c6:42:a4:
2a:e5:39:c0:5f:c9:ad:94:08:77:49:f9:4d:24:86:
63:85:b3:31:d2:1a:c1:f2:69:a9:ff:6b:cf:ae:42:
b6:4a:96:79:ad:da:25:46:c7:4a:ff:a5:bb:b2:40:
ad:f7:54:a7:da:6c:07:49:86:55:ca:a1:3a:b5:78:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:46:29:08:4F:52:77:04:C3:35:DF:48:6D:57:C7:15:B9:04:3D
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9d:f0:59:f0:3b:0b:f3:47:d6:99:31:55:57:c7:9f:06:ea:
5b:9b:ce:4a:c1:83:bf:5d:88:4a:47:56:88:19:c7:1e:a9:c3:
3d:ba:33:fd:e6:55:95:96:8e:b2:c0:0d:f8:3c:3a:45:4e:91:
e9:bb:ff:7c:70:af:54:9e:11:eb:a9:f8:4d:21:56:32:6f:ce:
fe:f1:7e:d7:4c:31:15:37:27:43:e7:14:79:5f:dc:cd:51:b3:
7c:a2:93:be:11:9f:4e:38:bf:c6:34:70:d6:14:df:11:a7:b2:
f6:d3:b7:63:73:35:d3:ef:db:09:9d:32:01:02:92:98:f3:76:
c9:ed:0f:41:5e:ac:98:e9:a4:29:46:80:0f:19:88:7f:de:ad:
a2:42:34:e1:a9:66:0a:14:df:24:f9:15:01:17:64:40:1c:22:
3c:99:a3:fc:ff:07:cf:86:c8:28:bf:c5:ed:0a:28:8b:98:79:
29:a2:7a:87:a0:da:64:3b:22:55:ba:af:2e:d7:3c:1a:d0:b2:
92:02:61:da:97:4e:0a:bc:65:c3:dc:76:d8:5f:bb:32:66:57:
45:23:50:21:31:83:74:af:b3:b1:51:6e:90:52:59:20:16:5a:
b8:c4:87:5b:b7:df:45:f9:a5:80:b2:4d:03:5d:03:67:cf:cf:
4f:98:f5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSobBpDgbWzDN6Lr++EUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjYwODE0MjIwMDMzWhcNMjYwODE1MjIwMDMzWjAzMTEwLwYDVQQD
Eyg3ZWU5NDYyOTA4NGY1Mjc3MDRjMzM1ZGY0ODZkNTdjNzE1YjkwNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDtRYUIWtbfdo1m0nCyV0QPce/s1
Q5pSxxNjveHJvkz0azvzb5THKvVvl4pc1Xq1scZhyvf0cMJ3ifJmzMRKAyP99RzF
7Y4HcFgSlJagOtrCMRG6rsUwtlaccr8PSHFc2EuEqauSaQiVP0TEKfM9MyJSd91R
gsgzLnRYfs86DLakeorI4OgaF7Ey0bm4I1r3K78NO9me9n+MjpJ64pj98rDikE3q
AwR1BPET7gxIlsn69e36eX6GjwVgayuSC4vGQqQq5TnAX8mtlAh3SflNJIZjhbMx
0hrB8mmp/2vPrkK2SpZ5rdolRsdK/6W7skCt91Sn2mwHSYZVyqE6tXjWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7pRikIT1J3BMM130htV8cVuQQ9MB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ3wWfA7
C/NH1pkxVVfHnwbqW5vOSsGDv12ISkdWiBnHHqnDPboz/eZVlZaOssAN+Dw6RU6R
6bv/fHCvVJ4R66n4TSFWMm/O/vF+10wxFTcnQ+cUeV/czVGzfKKTvhGfTji/xjRw
1hTfEaey9tO3Y3M10+/bCZ0yAQKSmPN2ye0PQV6smOmkKUaADxmIf96tokI04alm
ChTfJPkVARdkQBwiPJmj/P8Hz4bIKL/F7Qooi5h5KaJ6h6DaZDsiVbqvLtc8GtCy
kgJh2pdOCrxlw9x22F+7MmZXRSNQITGDdK+zsVFukFJZIBZauMSHW7ffRfmlgLJN
A10DZ8/PT5j1Mg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:37 2026 by rpki-client