Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: w4IwANn948viCA+SIVmjznk9fT8slaFapscc27e5nsI=
Subject key identifier: A5:45:5E:88:35:E9:3C:37:DB:A8:9A:BD:61:1B:3D:FF:61:31:21:54
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019EB921A892A16FCF6F4DE0B172EF264B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1882
Signing time: Fri 12 Jun 2026 00:00:51 +0000
Manifest this update: Fri 12 Jun 2026 00:00:51 +0000
Manifest next update: Sat 13 Jun 2026 00:00:51 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: EnxGtXXbd9OEi68VxXIzBmA83oMckQO06RyjEEbVIRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:a8:92:a1:6f:cf:6f:4d:e0:b1:72:ef:26:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jun 12 00:00:51 2026 GMT
Not After : Jun 13 00:00:51 2026 GMT
Subject: CN=a5455e8835e93c37dba89abd611b3dff61312154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:fb:42:40:88:ce:cc:93:0e:60:72:86:58:
7d:df:83:4f:5d:ec:2f:48:f5:55:59:67:74:8d:25:
c1:df:f4:d0:73:11:69:a0:b8:76:9f:be:84:21:ee:
bc:f7:48:60:6c:d5:d2:20:9f:66:55:ea:2f:9a:4c:
07:7e:43:65:f2:db:66:0e:4a:7b:c6:75:10:f8:52:
3a:49:ae:1e:ed:83:1d:bd:65:e3:48:da:b3:80:fc:
66:80:21:91:cd:86:d1:ce:9d:eb:0b:38:1e:8e:9e:
65:ce:ca:f9:fb:d8:8b:71:d8:e4:63:ae:df:25:12:
0a:10:ce:6a:1d:e0:8a:09:ca:57:ba:cf:35:22:0c:
9a:48:30:9e:89:a2:4e:72:73:0a:0d:27:29:93:81:
ea:b5:87:7f:17:06:b2:7c:80:9a:58:70:e9:f4:3f:
13:e6:95:d8:c5:07:0f:cf:b5:e4:e4:f7:7f:2a:21:
06:5c:e3:7c:bf:80:d7:04:d3:d5:d0:62:d4:3b:e2:
ac:6a:9e:0f:c1:d4:79:71:a5:55:e9:13:63:3a:c6:
56:ec:76:79:e8:71:82:39:b3:6c:e6:f1:29:ca:cc:
8a:33:67:01:45:ba:61:a1:99:4a:0c:76:4d:c6:7b:
ff:85:95:7a:c4:68:ce:08:da:2e:70:ed:7e:46:02:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:5E:88:35:E9:3C:37:DB:A8:9A:BD:61:1B:3D:FF:61:31:21:54
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:75:0c:68:83:e8:01:8e:21:b1:62:2e:06:59:c6:b1:aa:
3e:60:47:11:7e:60:8f:8d:53:87:7f:5f:e3:d3:a7:8e:29:7f:
a3:a2:f9:48:ba:3f:6f:ae:88:48:be:95:7a:53:aa:6e:81:ae:
e5:30:b6:10:16:10:c8:18:ba:ea:fa:41:2a:ec:43:59:ec:92:
f5:90:0b:04:cf:db:f2:82:6d:9b:40:62:64:e4:35:82:6b:cd:
bc:f7:21:ee:6a:6e:7f:e7:3b:4f:19:fd:36:89:9a:97:b6:6e:
d8:a0:8e:6c:2d:9e:cd:99:8e:9b:43:71:de:de:b6:76:d9:bb:
50:24:6f:fa:f3:90:b5:c0:f2:59:b5:e6:6b:86:31:7b:2c:15:
db:3e:61:f3:53:34:51:37:39:13:11:cc:89:60:af:b0:18:5f:
43:d2:d0:c3:42:da:a5:ec:94:5b:b9:d1:65:79:0e:3e:46:94:
41:6c:9d:00:0c:08:45:ce:b1:d2:31:0f:a0:a5:4a:06:3b:03:
e7:b2:46:21:ce:21:0b:34:f3:fb:39:82:12:64:6b:85:55:ea:
7a:80:19:27:29:2b:a9:87:b1:72:96:4b:2f:d5:88:ca:53:d8:
f8:0b:78:61:9a:c4:59:c5:4a:35:bc:ee:fc:b4:16:2b:60:6b:
85:72:b1:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IaiSoW/Pb03gsXLvJksjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjYwNjEyMDAwMDUxWhcNMjYwNjEzMDAwMDUxWjAzMTEwLwYDVQQD
EyhhNTQ1NWU4ODM1ZTkzYzM3ZGJhODlhYmQ2MTFiM2RmZjYxMzEyMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jn7QkCIzsyTDmByhlh934NPXewv
SPVVWWd0jSXB3/TQcxFpoLh2n76EIe6890hgbNXSIJ9mVeovmkwHfkNl8ttmDkp7
xnUQ+FI6Sa4e7YMdvWXjSNqzgPxmgCGRzYbRzp3rCzgejp5lzsr5+9iLcdjkY67f
JRIKEM5qHeCKCcpXus81IgyaSDCeiaJOcnMKDScpk4HqtYd/FwayfICaWHDp9D8T
5pXYxQcPz7Xk5Pd/KiEGXON8v4DXBNPV0GLUO+Ksap4PwdR5caVV6RNjOsZW7HZ5
6HGCObNs5vEpysyKM2cBRbphoZlKDHZNxnv/hZV6xGjOCNoucO1+RgK3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVFXog16Tw326iavWEbPf9hMSFUMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyB1DGiD
6AGOIbFiLgZZxrGqPmBHEX5gj41Th39f49Onjil/o6L5SLo/b66ISL6VelOqboGu
5TC2EBYQyBi66vpBKuxDWeyS9ZALBM/b8oJtm0BiZOQ1gmvNvPch7mpuf+c7Txn9
Nomal7Zu2KCObC2ezZmOm0Nx3t62dtm7UCRv+vOQtcDyWbXma4YxeywV2z5h81M0
UTc5ExHMiWCvsBhfQ9LQw0LapeyUW7nRZXkOPkaUQWydAAwIRc6x0jEPoKVKBjsD
57JGIc4hCzTz+zmCEmRrhVXqeoAZJykrqYexcpZLL9WIylPY+At4YZrEWcVKNbzu
/LQWK2BrhXKxHA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:43:13 2026 by rpki-client