Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: 3Y31xU050Ujda4en6CR7cnabntw25fp3jHAyZIoExRA=
Subject key identifier: 1A:4D:D0:73:FD:21:A9:C4:83:F6:A2:2F:D3:B8:04:72:DD:7D:A9:AC
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019F84C42280FED670D05AF393C643DCDD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 13:01:14 +0000
Manifest this update: Tue 21 Jul 2026 13:01:14 +0000
Manifest next update: Wed 22 Jul 2026 13:01:14 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: 5QbqYXLl4/yoYxhV/mvdFZ6taVYAURvjZhzTGaR9A7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:22:80:fe:d6:70:d0:5a:f3:93:c6:43:dc:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Jul 21 13:01:14 2026 GMT
Not After : Jul 22 13:01:14 2026 GMT
Subject: CN=1a4dd073fd21a9c483f6a22fd3b80472dd7da9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:f1:dc:f3:3e:8c:f4:8c:21:8e:3a:cc:4d:
8a:68:eb:09:4d:c6:27:8d:91:cd:df:24:d8:cf:da:
17:aa:51:30:bd:94:f0:db:25:25:5f:84:1d:67:0c:
3e:3b:63:7e:93:15:4e:28:23:51:de:20:88:8e:9a:
dd:47:ec:a4:55:84:c7:35:7b:8f:2b:11:5f:af:3f:
d4:09:66:e9:3b:2a:a5:69:86:26:65:dd:b7:72:a1:
31:61:c8:f0:2f:7d:ce:0e:6e:3f:d7:9f:bc:7e:63:
48:30:56:0f:dc:6c:70:19:22:b0:08:04:19:39:08:
26:95:ee:be:a2:aa:3c:81:4d:84:f9:94:ed:1e:b8:
6a:74:7b:1f:7a:7a:8b:a7:a9:48:32:af:6c:a3:1e:
a6:d8:10:97:95:7b:c1:84:86:c9:74:11:70:dc:2e:
9f:b4:1e:bb:82:98:d3:54:f7:a9:c9:ec:33:58:34:
18:04:44:2c:d5:5a:19:3f:36:1e:13:96:ac:93:6f:
b2:d5:46:41:7a:2b:5c:6a:af:77:62:3e:66:d2:08:
62:fa:97:dd:e1:7c:e4:41:34:7a:ec:f5:f2:fa:68:
ad:18:45:1b:bf:28:ad:89:ef:99:93:97:97:e6:a3:
b4:df:4c:f5:9f:a2:22:bf:62:02:ea:26:b8:90:41:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:D0:73:FD:21:A9:C4:83:F6:A2:2F:D3:B8:04:72:DD:7D:A9:AC
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:ae:fb:ff:58:d0:e9:66:29:9e:3d:6b:14:c6:90:58:fc:
f3:f3:f2:94:64:09:28:fc:de:87:a0:43:94:3e:a4:16:0a:7b:
80:8f:fb:44:70:e2:7d:69:50:05:df:69:7b:7e:f8:bd:3e:ab:
9a:bf:a2:b7:d7:00:76:0b:fb:4a:5b:0d:32:fd:37:e0:29:b1:
29:08:75:c3:0f:2e:bf:9b:4e:b0:0a:e6:8a:c5:b3:cf:a7:1e:
29:8d:1a:6d:de:1e:1c:dc:1a:31:f9:8a:d8:05:ca:68:81:c5:
7c:08:a4:00:f3:ce:7a:00:7f:ae:78:71:24:6e:24:77:00:bc:
78:63:2a:b4:9b:a9:a6:22:f4:f0:ea:ed:69:c2:48:2a:13:96:
09:c5:cb:2b:cc:f7:12:1d:45:e7:00:79:8d:55:5d:3a:c6:34:
74:c0:ac:11:4b:e0:69:4b:b5:71:3a:67:7f:12:54:99:6a:74:
7e:75:c5:1f:4d:b7:71:6d:7e:f9:3a:86:e1:39:0f:e1:b5:49:
71:74:8a:3b:9d:bc:14:c7:8d:24:fe:bc:56:ca:ae:ee:96:65:
e0:26:cf:a0:b8:98:38:4c:55:dd:12:42:25:a4:ae:b0:11:2a:
1c:3b:17:68:98:8c:46:16:8b:04:b1:db:1e:79:b0:eb:00:74:
72:84:83:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExCKA/tZw0Frzk8ZD3N0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTk0ODRjYTcwOGFiNzcxZWIxZGI5MGJhZmM4YTExNGMy
YzNkNzkwHhcNMjYwNzIxMTMwMTE0WhcNMjYwNzIyMTMwMTE0WjAzMTEwLwYDVQQD
EygxYTRkZDA3M2ZkMjFhOWM0ODNmNmEyMmZkM2I4MDQ3MmRkN2RhOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDx3PM+jPSMIY46zE2KaOsJTcYn
jZHN3yTYz9oXqlEwvZTw2yUlX4QdZww+O2N+kxVOKCNR3iCIjprdR+ykVYTHNXuP
KxFfrz/UCWbpOyqlaYYmZd23cqExYcjwL33ODm4/15+8fmNIMFYP3GxwGSKwCAQZ
OQgmle6+oqo8gU2E+ZTtHrhqdHsfenqLp6lIMq9sox6m2BCXlXvBhIbJdBFw3C6f
tB67gpjTVPepyewzWDQYBEQs1VoZPzYeE5ask2+y1UZBeitcaq93Yj5m0ghi+pfd
4XzkQTR67PXy+mitGEUbvyitie+Zk5eX5qO030z1n6Iiv2IC6ia4kEH3zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpN0HP9IanEg/aiL9O4BHLdfamsMB8GA1UdIwQY
MBaAFMmpSEynCKt3HrHbkLr8ihFMLD15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAt
ZDA1MTdkYjI2ZGFkLzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAtZDA1MTdkYjI2ZGFk
LzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpSu+/9Y
0OlmKZ49axTGkFj88/PylGQJKPzeh6BDlD6kFgp7gI/7RHDifWlQBd9pe374vT6r
mr+it9cAdgv7SlsNMv034CmxKQh1ww8uv5tOsArmisWzz6ceKY0abd4eHNwaMfmK
2AXKaIHFfAikAPPOegB/rnhxJG4kdwC8eGMqtJuppiL08OrtacJIKhOWCcXLK8z3
Eh1F5wB5jVVdOsY0dMCsEUvgaUu1cTpnfxJUmWp0fnXFH023cW1++TqG4TkP4bVJ
cXSKO528FMeNJP68Vsqu7pZl4CbPoLiYOExV3RJCJaSusBEqHDsXaJiMRhaLBLHb
Hnmw6wB0coSDMg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:52 2026 by rpki-client