Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: kL1GkgBAflOEsp7/+rjoKjJp/0YQSCoDfk/gzzC8ClI=
Subject key identifier: 8F:89:6C:C9:DB:57:57:7B:7F:E8:07:0E:85:CE:74:16:6E:74:A0:0C
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019FF86CAD1C11DD7D552AC2A0B31DC54456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0A4D
Signing time: Thu 13 Aug 2026 00:01:39 +0000
Manifest this update: Thu 13 Aug 2026 00:01:39 +0000
Manifest next update: Fri 14 Aug 2026 00:01:39 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: MCC3+Cij6PDCEizaglrceH+TbR0r6eM3M1PBJ8F/0KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:ad:1c:11:dd:7d:55:2a:c2:a0:b3:1d:c5:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Aug 13 00:01:39 2026 GMT
Not After : Aug 14 00:01:39 2026 GMT
Subject: CN=8f896cc9db57577b7fe8070e85ce74166e74a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:6f:4b:8e:b8:e0:f3:e9:0c:75:4f:b4:2b:
c2:06:e4:52:77:f3:c7:28:25:ff:0e:c2:90:2a:0a:
ed:48:7b:a6:b2:1b:bf:b1:91:24:74:c7:a5:7a:52:
63:f9:c7:62:13:d4:fa:08:8f:b4:a7:55:92:f8:af:
73:2a:c1:73:44:c6:6b:da:a1:a8:3f:94:f5:92:b6:
77:bb:7b:e6:66:96:60:26:66:9d:5e:1d:31:f2:1c:
85:b2:c4:f9:e5:96:c6:1e:e2:8b:6a:01:97:23:3a:
b9:69:45:77:90:fc:fa:ef:63:eb:d1:33:7c:23:eb:
db:f5:27:6a:e1:00:04:72:f2:35:40:7b:06:99:c6:
fd:21:92:81:ad:ab:6f:6e:e3:9c:50:e8:7f:e6:ff:
6e:f3:14:48:9c:f3:45:fd:95:9a:4d:c9:05:ad:53:
e2:a0:60:22:22:12:39:ce:12:0c:4f:d5:3a:ae:1c:
a0:ab:33:b3:a8:86:43:59:65:18:76:e5:88:3d:a2:
c1:5c:b2:12:b5:ce:26:66:5a:34:22:08:de:eb:be:
ad:57:48:78:02:04:5b:7b:bb:bc:60:4d:bf:7a:ea:
b4:f9:de:98:97:ee:fd:7b:6f:be:dd:95:b1:4b:e8:
76:13:61:68:d7:a9:44:fa:b3:0d:a2:6a:38:e6:37:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:6C:C9:DB:57:57:7B:7F:E8:07:0E:85:CE:74:16:6E:74:A0:0C
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6c:ff:ee:98:1e:8f:15:f7:b2:bb:a5:a4:9a:19:22:e4:6a:
85:fa:db:9e:46:40:9e:8d:61:81:26:37:dd:de:6e:ed:5d:6c:
cb:44:02:93:e8:72:7d:48:86:d6:d1:64:98:5e:95:35:8b:96:
47:21:34:ab:c3:8c:1e:df:6d:15:ab:0f:92:2d:fc:7d:f6:88:
04:6f:3b:47:74:65:2e:55:ff:2d:7e:80:1a:3f:1d:89:f0:4b:
61:e9:8a:84:bf:99:ff:91:b7:ce:1e:ce:04:e9:c9:99:fb:0e:
59:c6:78:07:77:ad:d2:2e:df:25:8c:d9:ec:02:05:cc:05:d5:
7c:74:01:30:a3:38:c2:f1:27:ed:13:2f:df:40:57:48:ac:36:
bf:b6:56:60:31:86:10:c3:cb:68:f5:73:80:f4:bb:c2:2f:16:
5b:0c:63:7e:91:5c:40:54:c2:fd:15:4e:ba:2c:9a:35:da:7b:
b2:cd:0e:58:59:9b:83:b1:99:7f:1a:d5:ba:a9:23:ea:58:a2:
96:9d:aa:c0:26:e1:bb:d7:8d:f0:b4:3f:a3:bd:03:c0:62:29:
a4:29:ac:d3:c0:3a:e7:4f:ca:8c:4a:70:af:41:bc:43:cd:d9:
c3:72:9e:0d:5a:97:a0:da:0d:58:39:d4:5f:a4:4e:be:8f:76:
17:b7:33:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4bK0cEd19VSrCoLMdxURWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm
YTE4MjkwHhcNMjYwODEzMDAwMTM5WhcNMjYwODE0MDAwMTM5WjAzMTEwLwYDVQQD
Eyg4Zjg5NmNjOWRiNTc1NzdiN2ZlODA3MGU4NWNlNzQxNjZlNzRhMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFvS4644PPpDHVPtCvCBuRSd/PH
KCX/DsKQKgrtSHumshu/sZEkdMelelJj+cdiE9T6CI+0p1WS+K9zKsFzRMZr2qGo
P5T1krZ3u3vmZpZgJmadXh0x8hyFssT55ZbGHuKLagGXIzq5aUV3kPz672Pr0TN8
I+vb9Sdq4QAEcvI1QHsGmcb9IZKBratvbuOcUOh/5v9u8xRInPNF/ZWaTckFrVPi
oGAiIhI5zhIMT9U6rhygqzOzqIZDWWUYduWIPaLBXLIStc4mZlo0Igje676tV0h4
AgRbe7u8YE2/euq0+d6Yl+79e2++3ZWxS+h2E2Fo16lE+rMNomo45jfvJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+JbMnbV1d7f+gHDoXOdBZudKAMMB8GA1UdIwQY
MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt
MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw
LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmz/7pge
jxX3srulpJoZIuRqhfrbnkZAno1hgSY33d5u7V1sy0QCk+hyfUiG1tFkmF6VNYuW
RyE0q8OMHt9tFasPki38ffaIBG87R3RlLlX/LX6AGj8difBLYemKhL+Z/5G3zh7O
BOnJmfsOWcZ4B3et0i7fJYzZ7AIFzAXVfHQBMKM4wvEn7RMv30BXSKw2v7ZWYDGG
EMPLaPVzgPS7wi8WWwxjfpFcQFTC/RVOuiyaNdp7ss0OWFmbg7GZfxrVuqkj6lii
lp2qwCbhu9eN8LQ/o70DwGIppCms08A650/KjEpwr0G8Q83Zw3KeDVqXoNoNWDnU
X6ROvo92F7czOw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:12:42 2026 by rpki-client