Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: j21dYSKdQLO7R5r29ed7d9pVpfLYJYDm7M4ZavFje7w=
Subject key identifier: D7:14:46:9E:46:A8:B1:19:5B:2B:EA:EE:86:E0:52:7A:3A:92:90:56
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019EB80FA8ECA479E96F106124743C721C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0F57
Signing time: Thu 11 Jun 2026 19:01:34 +0000
Manifest this update: Thu 11 Jun 2026 19:01:34 +0000
Manifest next update: Fri 12 Jun 2026 19:01:34 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: AFYtL9SY5A3LAK9E5upfzY6RZgdnYjoKtRAsQRZ10Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:a8:ec:a4:79:e9:6f:10:61:24:74:3c:72:1c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jun 11 19:01:34 2026 GMT
Not After : Jun 12 19:01:34 2026 GMT
Subject: CN=d714469e46a8b1195b2beaee86e0527a3a929056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:b4:ce:b3:c2:9a:ea:e8:08:70:21:8f:56:
a0:f5:28:ab:c8:a9:c4:e6:f2:a9:3d:b1:5f:d2:4b:
6f:e9:de:9e:c8:dd:89:6a:06:69:98:09:0b:7f:bf:
70:22:31:a2:4c:e5:a9:c6:a6:d3:c5:e6:ad:63:7b:
42:fe:96:9a:25:3e:93:25:22:13:17:e9:b9:6b:93:
22:29:f7:ce:19:cd:d0:07:f2:55:e4:3e:c8:16:f1:
30:46:5f:9f:78:1e:0e:dc:34:b2:a7:48:34:48:62:
60:8c:e9:70:b2:04:b4:1f:4d:16:4a:21:a9:8e:ec:
23:40:16:08:e7:44:de:54:c4:7e:39:e2:f1:90:b3:
80:88:83:06:c8:e4:5d:7c:71:aa:bc:08:5d:cb:0a:
97:f9:b0:59:3c:ac:84:97:55:dd:22:47:a4:83:32:
c5:81:14:f8:47:7e:7b:e2:85:ee:ea:e4:0e:fd:84:
17:07:04:00:06:47:a6:e3:8f:57:0c:8d:f5:01:d0:
2a:9a:2c:d2:e4:4e:9d:9d:3e:86:01:c3:f8:47:4b:
48:d8:32:ae:7c:dd:44:11:6a:b7:3b:f8:08:e3:5e:
cd:07:73:68:9f:ca:22:b1:54:d6:df:51:27:4d:c8:
42:b5:55:73:0e:2b:df:a1:3b:84:15:7a:be:b1:89:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:46:9E:46:A8:B1:19:5B:2B:EA:EE:86:E0:52:7A:3A:92:90:56
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:88:aa:a2:68:1a:d3:d8:a9:77:76:ef:f2:56:58:9d:2f:45:
a3:58:08:74:cd:31:ae:19:d8:fb:af:19:35:ec:66:b1:69:5b:
89:81:d9:ae:1d:ad:59:eb:ae:c5:b1:40:74:4b:dd:6f:8a:32:
ec:ba:bb:ed:8b:61:64:b9:c0:1b:ac:c9:e4:c0:86:86:9d:59:
33:ae:02:cf:a7:9b:fd:c5:ec:6a:67:38:17:33:13:f3:5d:e2:
2f:89:d8:09:83:68:2b:a8:de:62:78:a3:f5:04:6f:97:6a:b9:
05:87:ac:4f:09:ba:e1:62:50:16:b3:6a:a7:db:45:88:5b:36:
c8:e4:b5:ae:e5:ea:40:fc:d9:ec:e4:06:01:32:4a:41:50:cf:
bc:9b:82:a7:10:b5:cd:07:99:03:ae:55:b0:03:23:2b:19:cc:
56:32:a0:20:5e:6d:98:91:24:10:41:42:9f:f6:b1:75:0a:2b:
6c:ce:64:0f:18:02:5c:4e:77:f7:ec:03:50:72:fb:ac:16:60:
2a:24:95:c4:27:3c:85:83:6f:48:85:a8:02:bc:88:da:0c:e5:
f2:9e:b1:a7:f6:58:ed:7f:aa:a3:ed:7c:8b:fb:7f:24:31:8d:
32:c7:ba:7f:c4:51:00:74:3d:4c:1f:26:2a:79:8a:94:f8:8c:
93:a7:ce:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64D6jspHnpbxBhJHQ8chxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1
MWM2ZWUwHhcNMjYwNjExMTkwMTM0WhcNMjYwNjEyMTkwMTM0WjAzMTEwLwYDVQQD
EyhkNzE0NDY5ZTQ2YThiMTE5NWIyYmVhZWU4NmUwNTI3YTNhOTI5MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm720zrPCmuroCHAhj1ag9SiryKnE
5vKpPbFf0ktv6d6eyN2JagZpmAkLf79wIjGiTOWpxqbTxeatY3tC/paaJT6TJSIT
F+m5a5MiKffOGc3QB/JV5D7IFvEwRl+feB4O3DSyp0g0SGJgjOlwsgS0H00WSiGp
juwjQBYI50TeVMR+OeLxkLOAiIMGyORdfHGqvAhdywqX+bBZPKyEl1XdIkekgzLF
gRT4R3574oXu6uQO/YQXBwQABkem449XDI31AdAqmizS5E6dnT6GAcP4R0tI2DKu
fN1EEWq3O/gI417NB3Non8oisVTW31EnTchCtVVzDivfoTuEFXq+sYlzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcURp5GqLEZWyvq7obgUno6kpBWMB8GA1UdIwQY
MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt
NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1
LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYiqomga
09ipd3bv8lZYnS9Fo1gIdM0xrhnY+68ZNexmsWlbiYHZrh2tWeuuxbFAdEvdb4oy
7Lq77YthZLnAG6zJ5MCGhp1ZM64Cz6eb/cXsamc4FzMT813iL4nYCYNoK6jeYnij
9QRvl2q5BYesTwm64WJQFrNqp9tFiFs2yOS1ruXqQPzZ7OQGATJKQVDPvJuCpxC1
zQeZA65VsAMjKxnMVjKgIF5tmJEkEEFCn/axdQorbM5kDxgCXE539+wDUHL7rBZg
KiSVxCc8hYNvSIWoAryI2gzl8p6xp/ZY7X+qo+18i/t/JDGNMse6f8RRAHQ9TB8m
KnmKlPiMk6fOZA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:24:08 2026 by rpki-client