Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: 5RG7+bACPQP8s2FMyWEEXXAdpJlsMqNvn2SFl8hdZGw=
Subject key identifier: 3F:CF:35:CE:DE:E2:16:F8:E4:10:0A:DD:72:2C:B5:5D:24:0B:C3:65
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019E913832A7C944E1D02CF54AE39A942562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1294
Signing time: Thu 04 Jun 2026 06:00:39 +0000
Manifest this update: Thu 04 Jun 2026 06:00:39 +0000
Manifest next update: Fri 05 Jun 2026 06:00:39 +0000
Files and hashes: 1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: ooH4bSNyzaSRxUCzhavqcRptJ7CaUe08XwjdTPCPkqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:32:a7:c9:44:e1:d0:2c:f5:4a:e3:9a:94:25:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Jun 4 06:00:39 2026 GMT
Not After : Jun 5 06:00:39 2026 GMT
Subject: CN=3fcf35cedee216f8e4100add722cb55d240bc365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:09:31:ad:f2:2b:90:a0:8d:ad:a7:49:62:
42:79:22:25:0c:a0:51:5c:a8:ea:6b:2e:1e:ae:f6:
d8:93:db:64:2a:da:c0:72:39:f3:89:4a:73:52:f2:
1c:bf:d3:13:e0:80:8f:44:b3:18:1b:2a:31:44:1f:
55:ef:64:0a:34:64:a8:73:50:ae:42:b0:3f:4e:bc:
ca:ab:0d:43:11:b6:70:10:42:82:7c:5c:e1:2c:db:
a9:8d:c8:ff:e4:5e:82:2d:a3:53:c3:a4:6e:15:b0:
95:9c:07:d4:76:69:ae:f9:e5:7c:b5:3a:16:a9:8f:
a1:20:40:81:39:04:68:42:fc:24:cc:1c:5c:60:49:
b1:68:db:65:2e:ff:0c:c7:be:95:67:25:6b:09:b3:
1c:2b:57:fd:2f:f8:86:cd:55:03:74:e7:75:5b:3e:
7b:ee:01:c3:97:3d:44:a0:27:c8:c7:03:ca:d4:ac:
02:0d:b1:75:97:bd:2e:a1:c5:5c:90:c0:b4:b6:1d:
f6:19:03:c9:69:05:f5:2b:2b:7e:ee:63:97:4a:38:
47:82:b5:d2:2a:79:7f:2c:35:7a:77:6e:03:7e:e7:
3e:b3:bf:45:4c:74:63:37:59:67:fb:b2:b6:c3:69:
0a:00:7b:54:84:17:5f:96:b4:3c:20:7f:0b:95:9e:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:35:CE:DE:E2:16:F8:E4:10:0A:DD:72:2C:B5:5D:24:0B:C3:65
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:84:b1:0c:f9:06:2c:fd:8b:ce:bc:11:d2:b4:fa:ae:0c:
d9:b9:bc:06:2e:ae:e1:d9:47:4a:86:09:02:a0:88:ee:f2:45:
56:46:e7:99:24:11:a2:52:06:cd:79:aa:89:ce:ea:e5:50:b1:
01:4e:44:c2:02:ee:e2:66:04:11:18:35:56:b1:6c:3c:bc:88:
7c:a0:28:06:52:07:4e:9f:53:92:e8:dd:1c:22:70:43:8b:30:
28:2a:42:37:81:19:1d:8a:99:d6:f3:08:fc:2f:25:d7:d8:ba:
f8:c9:ec:91:15:29:d1:ac:22:08:87:8f:bd:f5:af:bd:26:1f:
80:e3:a1:58:a2:eb:ea:59:22:c7:09:b2:e5:e2:ff:97:57:7f:
89:66:f7:15:a4:05:cf:4a:85:65:6f:ef:b5:fc:f5:96:81:51:
36:3c:77:aa:e9:a0:68:de:93:32:32:f2:dd:ba:2a:ef:a0:e1:
51:c9:64:03:cd:81:55:e3:3b:b7:0e:e9:b5:d1:78:9e:74:b1:
a5:3e:0c:69:b1:ca:74:09:ee:93:06:16:b1:83:72:36:38:2f:
a4:f7:fb:be:c6:d6:e5:2e:a5:59:82:47:63:ca:ce:c7:6a:0b:
c8:d7:42:b3:7d:ea:59:65:7b:7a:e8:6a:37:8a:58:1d:49:e2:
63:63:35:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RODKnyUTh0Cz1SuOalCViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjYwNjA0MDYwMDM5WhcNMjYwNjA1MDYwMDM5WjAzMTEwLwYDVQQD
EygzZmNmMzVjZWRlZTIxNmY4ZTQxMDBhZGQ3MjJjYjU1ZDI0MGJjMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iMJMa3yK5Cgja2nSWJCeSIlDKBR
XKjqay4ervbYk9tkKtrAcjnziUpzUvIcv9MT4ICPRLMYGyoxRB9V72QKNGSoc1Cu
QrA/TrzKqw1DEbZwEEKCfFzhLNupjcj/5F6CLaNTw6RuFbCVnAfUdmmu+eV8tToW
qY+hIECBOQRoQvwkzBxcYEmxaNtlLv8Mx76VZyVrCbMcK1f9L/iGzVUDdOd1Wz57
7gHDlz1EoCfIxwPK1KwCDbF1l70uocVckMC0th32GQPJaQX1Kyt+7mOXSjhHgrXS
Knl/LDV6d24Dfuc+s79FTHRjN1ln+7K2w2kKAHtUhBdflrQ8IH8LlZ4RAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/PNc7e4hb45BAK3XIstV0kC8NlMB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgCEsQz5
Biz9i868EdK0+q4M2bm8Bi6u4dlHSoYJAqCI7vJFVkbnmSQRolIGzXmqic7q5VCx
AU5EwgLu4mYEERg1VrFsPLyIfKAoBlIHTp9TkujdHCJwQ4swKCpCN4EZHYqZ1vMI
/C8l19i6+MnskRUp0awiCIePvfWvvSYfgOOhWKLr6lkixwmy5eL/l1d/iWb3FaQF
z0qFZW/vtfz1loFRNjx3qumgaN6TMjLy3boq76DhUclkA82BVeM7tw7ptdF4nnSx
pT4MabHKdAnukwYWsYNyNjgvpPf7vsbW5S6lWYJHY8rOx2oLyNdCs33qWWV7euhq
N4pYHUniY2M1eg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:20:13 2026 by rpki-client