Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: SqYrBsQrmzyp/avXKKTE0EJCWAlP5rjfXAq/V15nkKo=
Subject key identifier: 97:20:D6:C9:5D:1C:05:4B:FE:07:B6:AA:47:24:2F:0F:A7:6B:49:D0
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019E303BA49EE9348604EF400064B7689D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 1375
Signing time: Sat 16 May 2026 10:01:15 +0000
Manifest this update: Sat 16 May 2026 10:01:15 +0000
Manifest next update: Sun 17 May 2026 10:01:15 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: ++bfeK3zgfCFvNR2OQl9/KN7Oa9Indzfp7XV/YKJvzU=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:a4:9e:e9:34:86:04:ef:40:00:64:b7:68:9d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: May 16 10:01:15 2026 GMT
Not After : May 17 10:01:15 2026 GMT
Subject: CN=9720d6c95d1c054bfe07b6aa47242f0fa76b49d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:b5:05:78:a7:51:4d:8b:39:bf:a7:24:ad:
1e:3f:89:25:40:ee:f3:63:73:9c:89:83:c5:b7:54:
ed:4e:ff:eb:82:f3:dd:99:d4:c4:13:13:90:75:66:
dc:85:42:13:f4:63:0e:26:a7:d0:72:4f:1f:e3:32:
06:2b:97:e8:73:92:f2:3b:00:ce:e9:73:ca:a5:ab:
c0:88:29:81:e6:d2:7d:96:b3:1c:92:84:b4:fa:70:
b6:26:94:fc:72:37:28:d7:66:32:47:87:57:92:a0:
e7:5d:50:87:fa:0e:51:2c:ef:fe:c7:75:44:d5:e9:
73:b9:79:40:97:71:fc:f0:f6:d2:6b:58:8d:70:ec:
51:69:d8:3a:2a:f3:c3:f6:2a:47:85:64:1d:88:f5:
f5:5a:66:d5:5c:81:93:2e:09:2c:0e:57:24:c3:77:
ac:7f:7e:d2:7a:2e:cb:f3:cf:44:e1:32:f8:2e:8e:
b4:12:1d:83:69:dc:c5:57:9a:22:20:7e:ba:04:fb:
32:27:ed:c5:34:2a:e2:e2:41:59:cb:30:05:66:b0:
e8:16:05:f5:58:b1:7d:f4:b2:fd:5d:6a:fa:a2:06:
74:26:e2:47:ad:9f:ec:6a:7b:e1:63:c7:36:12:5d:
c4:e6:e6:14:a3:66:e9:29:22:26:99:e0:97:eb:ef:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:20:D6:C9:5D:1C:05:4B:FE:07:B6:AA:47:24:2F:0F:A7:6B:49:D0
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:10:af:68:3d:70:41:4f:1a:68:fc:67:60:51:d2:7b:55:
82:43:c1:b9:72:2b:8e:4f:0a:32:e6:f5:05:db:52:dc:aa:b8:
8b:8c:d1:7d:e6:15:80:f3:d7:9e:4e:3b:30:2a:15:3a:e1:99:
df:f5:ee:c0:81:cd:50:68:84:90:53:86:fa:d9:32:0f:d4:20:
87:04:d0:ef:ed:46:3f:c8:87:f7:68:bb:58:14:c7:12:fb:1d:
92:77:f1:7c:55:45:2b:8d:fe:65:a1:ec:06:43:f8:4e:05:18:
94:b1:4d:05:26:2b:7e:3c:e0:f9:d7:ee:3d:5d:b2:61:c3:b6:
9b:14:5f:83:6a:87:d2:56:70:e2:b2:0f:23:9f:2a:9f:8d:49:
87:55:ff:fe:04:22:63:73:ed:aa:75:5e:02:9a:6e:9d:ac:f9:
be:21:9c:10:16:2b:2a:80:06:3e:55:a9:a8:7b:a9:d0:8e:ff:
c5:07:a2:e5:1b:cf:b8:c2:0d:44:b2:8f:2b:18:80:9e:a9:e8:
f8:21:ac:93:f3:a4:f1:3a:dc:cc:f7:67:b1:08:84:2e:20:80:
4a:d1:51:35:12:4d:4e:61:ef:7c:ef:15:2a:ea:89:ed:da:1d:
4c:a7:c9:50:cd:d6:41:43:3e:34:96:01:68:a7:3c:22:b2:85:
94:8d:c9:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO6Se6TSGBO9AAGS3aJ2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5
MDExZWQwHhcNMjYwNTE2MTAwMTE1WhcNMjYwNTE3MTAwMTE1WjAzMTEwLwYDVQQD
Eyg5NzIwZDZjOTVkMWMwNTRiZmUwN2I2YWE0NzI0MmYwZmE3NmI0OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwri1BXinUU2LOb+nJK0eP4klQO7z
Y3OciYPFt1TtTv/rgvPdmdTEExOQdWbchUIT9GMOJqfQck8f4zIGK5foc5LyOwDO
6XPKpavAiCmB5tJ9lrMckoS0+nC2JpT8cjco12YyR4dXkqDnXVCH+g5RLO/+x3VE
1elzuXlAl3H88PbSa1iNcOxRadg6KvPD9ipHhWQdiPX1WmbVXIGTLgksDlckw3es
f37Sei7L889E4TL4Lo60Eh2DadzFV5oiIH66BPsyJ+3FNCri4kFZyzAFZrDoFgX1
WLF99LL9XWr6ogZ0JuJHrZ/sanvhY8c2El3E5uYUo2bpKSImmeCX6+/XpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcg1sldHAVL/ge2qkckLw+na0nQMB8GA1UdIwQY
MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct
Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2
LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYAQr2g9
cEFPGmj8Z2BR0ntVgkPBuXIrjk8KMub1BdtS3Kq4i4zRfeYVgPPXnk47MCoVOuGZ
3/XuwIHNUGiEkFOG+tkyD9QghwTQ7+1GP8iH92i7WBTHEvsdknfxfFVFK43+ZaHs
BkP4TgUYlLFNBSYrfjzg+dfuPV2yYcO2mxRfg2qH0lZw4rIPI58qn41Jh1X//gQi
Y3PtqnVeAppunaz5viGcEBYrKoAGPlWpqHup0I7/xQei5RvPuMINRLKPKxiAnqno
+CGsk/Ok8TrczPdnsQiELiCAStFRNRJNTmHvfO8VKuqJ7dodTKfJUM3WQUM+NJYB
aKc8IrKFlI3JQQ==
-----END CERTIFICATE-----
Generated at Sat May 16 19:30:45 2026 by rpki-client