Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: 3EcyS8SSLVaxdezQdeqaYsCL3Xc06C4yK0tWLzhdnio=
Subject key identifier: 0E:DC:A6:FF:27:F1:4D:02:61:A8:1D:55:8E:97:0C:4A:68:3A:08:96
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019F2736C98AD9093BA73AA549EB3D7F78E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 1072
Signing time: Fri 03 Jul 2026 09:02:09 +0000
Manifest this update: Fri 03 Jul 2026 09:02:09 +0000
Manifest next update: Sat 04 Jul 2026 09:02:09 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: BQxEQUEhNrxjCFDf6T6lQoxWMzaI6nCRwc7Egn9QU6E=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:36:c9:8a:d9:09:3b:a7:3a:a5:49:eb:3d:7f:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jul 3 09:02:09 2026 GMT
Not After : Jul 4 09:02:09 2026 GMT
Subject: CN=0edca6ff27f14d0261a81d558e970c4a683a0896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:0c:de:58:1d:ad:d3:11:a0:40:e9:e5:35:
f2:7c:cf:b4:bf:41:76:79:d1:34:11:f5:32:8e:94:
cd:1a:f4:91:f1:25:87:e7:9f:2f:4a:a3:37:69:3b:
3b:bf:fa:27:2d:19:c1:48:59:e9:bc:ec:1e:25:3b:
99:0c:8d:f2:f0:72:12:6a:12:8a:a7:f2:5b:70:47:
65:6d:7c:3c:12:46:28:2a:e8:84:84:06:d3:12:bf:
80:21:3a:2d:db:4d:95:f7:50:4b:a2:e7:52:74:c4:
76:d3:71:75:9b:02:bf:2a:69:c5:6e:23:c9:bd:22:
6d:94:a1:1d:ce:9f:56:6f:5d:46:ea:c7:06:71:33:
c6:94:bf:77:12:b4:6c:6a:dc:75:65:cf:3e:03:9b:
47:93:ed:7c:b3:88:d9:b1:e3:29:71:fb:c9:d1:ed:
ac:51:ca:30:fa:fe:0d:ce:9a:38:ad:21:9d:50:50:
d5:a2:d8:5e:df:db:22:32:dc:9b:dd:9c:ff:b1:33:
a7:39:e0:30:a0:74:dc:95:f6:2a:bf:48:d6:a4:68:
96:68:43:77:fc:83:5e:d9:2e:b9:1d:8b:3a:9b:82:
1a:42:f0:6b:97:e6:92:44:cd:35:3e:92:20:95:01:
b4:03:28:31:ef:fd:10:13:fc:83:29:8e:93:ed:69:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:A6:FF:27:F1:4D:02:61:A8:1D:55:8E:97:0C:4A:68:3A:08:96
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:cd:0c:14:21:d4:40:ca:ac:ed:f7:53:8e:5e:3b:9b:c3:
2c:da:13:ce:19:a0:11:b8:23:74:a9:e0:b9:d2:b5:2f:6c:4e:
35:76:1b:2e:d8:e0:9e:ae:bf:df:c9:1b:a7:b2:72:9f:83:ab:
47:e3:e9:22:ba:76:1a:23:7c:7c:b6:13:62:4f:6c:25:54:f7:
f7:69:fb:c8:1e:8f:b7:f1:7b:46:fd:f7:05:c0:d5:18:f2:85:
bb:06:ca:40:82:74:a2:71:00:ab:b8:e7:05:58:aa:11:b5:1e:
0a:f6:24:d9:29:70:eb:ef:ee:d1:1f:c5:ab:90:a6:0e:38:ee:
9b:6c:2e:20:c5:08:f9:09:85:c5:4c:1e:fd:8c:de:64:dc:bc:
cc:8a:89:71:a4:4a:94:58:3c:23:53:e3:5b:0b:80:ee:79:d7:
fb:37:36:1b:cb:a3:0a:40:ec:f4:48:52:04:da:91:d9:2b:df:
5f:50:1e:00:fd:a3:6e:47:b0:1e:ba:2a:55:ba:b8:bd:67:6f:
62:7f:44:d0:35:34:95:1f:79:24:ad:e3:39:49:0e:26:2e:0d:
54:06:b8:75:15:3a:4e:51:15:ec:ba:18:e9:89:30:6a:65:90:
99:89:02:dd:f8:04:64:f3:27:3b:af:ca:32:4f:ec:74:32:2f:
90:22:8c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8nNsmK2Qk7pzqlSes9f3jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5
ZGE5MTgwHhcNMjYwNzAzMDkwMjA5WhcNMjYwNzA0MDkwMjA5WjAzMTEwLwYDVQQD
EygwZWRjYTZmZjI3ZjE0ZDAyNjFhODFkNTU4ZTk3MGM0YTY4M2EwODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14M3lgdrdMRoEDp5TXyfM+0v0F2
edE0EfUyjpTNGvSR8SWH558vSqM3aTs7v/onLRnBSFnpvOweJTuZDI3y8HISahKK
p/JbcEdlbXw8EkYoKuiEhAbTEr+AITot202V91BLoudSdMR203F1mwK/KmnFbiPJ
vSJtlKEdzp9Wb11G6scGcTPGlL93ErRsatx1Zc8+A5tHk+18s4jZseMpcfvJ0e2s
Ucow+v4Nzpo4rSGdUFDVothe39siMtyb3Zz/sTOnOeAwoHTclfYqv0jWpGiWaEN3
/INe2S65HYs6m4IaQvBrl+aSRM01PpIglQG0Aygx7/0QE/yDKY6T7Wk20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7cpv8n8U0CYagdVY6XDEpoOgiWMB8GA1UdIwQY
MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct
Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4
LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5vNDBQh
1EDKrO33U45eO5vDLNoTzhmgEbgjdKngudK1L2xONXYbLtjgnq6/38kbp7Jyn4Or
R+PpIrp2GiN8fLYTYk9sJVT392n7yB6Pt/F7Rv33BcDVGPKFuwbKQIJ0onEAq7jn
BViqEbUeCvYk2Slw6+/u0R/Fq5CmDjjum2wuIMUI+QmFxUwe/YzeZNy8zIqJcaRK
lFg8I1PjWwuA7nnX+zc2G8ujCkDs9EhSBNqR2SvfX1AeAP2jbkewHroqVbq4vWdv
Yn9E0DU0lR95JK3jOUkOJi4NVAa4dRU6TlEV7LoY6YkwamWQmYkC3fgEZPMnO6/K
Mk/sdDIvkCKMRA==
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:41:48 2026 by rpki-client