Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: CnpAQcfvP0vDQ9IK8DzNIkNbnfzHvss29QpmJMWCzds=
Subject key identifier: CF:1E:EF:6F:A3:EB:3A:5D:63:35:69:AA:EF:96:7D:63:82:68:AF:FA
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 019EB7A0AC20645B85EE9956A5A7248E2495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1976
Signing time: Thu 11 Jun 2026 17:00:20 +0000
Manifest this update: Thu 11 Jun 2026 17:00:20 +0000
Manifest next update: Fri 12 Jun 2026 17:00:20 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: j6Hhygzhbwnq1ZX6Asld66rCAfNUDviwnXjP6qdtECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:ac:20:64:5b:85:ee:99:56:a5:a7:24:8e:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jun 11 17:00:20 2026 GMT
Not After : Jun 12 17:00:20 2026 GMT
Subject: CN=cf1eef6fa3eb3a5d633569aaef967d638268affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:5f:11:dc:19:ad:46:15:1e:1b:ec:5d:10:
e2:d6:e3:44:59:14:65:63:c9:ea:43:3c:2e:e4:d8:
2b:17:da:83:71:c3:fd:3d:fe:da:78:e7:7c:62:b8:
d7:07:36:32:55:49:ea:4e:e1:6b:80:01:16:1c:74:
75:20:ea:c6:43:85:65:74:0f:2a:96:bb:a4:47:8b:
b7:dd:19:26:50:d5:82:3a:ad:f8:3d:0c:3f:fd:9c:
7b:27:c8:08:4f:bb:14:e1:26:c8:c6:90:83:5e:44:
9f:75:ff:fb:15:ee:17:e3:2a:62:c1:40:96:79:ed:
1a:6a:f0:49:cb:a0:09:e3:ef:f2:81:aa:2b:f9:60:
98:40:d9:d9:6b:6b:34:02:e8:ec:2f:64:9f:f5:d4:
f4:74:c6:72:37:48:54:5e:50:f3:f2:6c:6f:5d:0c:
95:3f:ea:d6:f0:8d:d9:6e:cc:90:1f:21:b0:ac:fe:
1e:78:57:49:ff:86:25:26:8c:64:2e:f3:75:eb:ce:
ee:59:20:af:8d:18:73:4b:7d:d1:6f:72:e4:ef:b3:
b9:70:6f:e4:11:c6:d1:ce:c6:e5:5e:f3:3b:a3:f0:
0e:b5:98:a9:90:43:8f:ba:0a:11:16:29:1b:a1:b8:
2f:08:44:2a:25:74:b8:08:b8:27:6f:f1:df:bf:99:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:EF:6F:A3:EB:3A:5D:63:35:69:AA:EF:96:7D:63:82:68:AF:FA
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6b:dc:9a:57:a7:cd:3d:76:bf:2b:1c:45:ef:a7:b8:b0:9e:
7d:dd:24:8a:e4:e7:d3:61:1d:55:c9:12:4a:20:d2:63:f5:18:
c1:43:0b:00:4d:4e:2e:54:24:95:03:bd:27:f1:28:46:eb:fa:
a1:1e:a8:10:26:46:f6:7f:16:ce:02:e3:19:a2:7d:aa:12:d8:
a5:8d:33:78:bd:d1:ac:e7:0a:8a:17:2f:23:80:8f:e1:3e:30:
24:1b:b7:58:6d:ab:e1:4b:bc:b2:43:a1:e4:70:02:b3:dd:9b:
5d:75:ae:af:b1:4f:31:dc:c3:ce:ac:b2:91:40:3f:7a:72:03:
dd:34:b2:cd:8f:69:da:e8:4d:ce:03:0d:fb:9d:b4:5f:4e:0a:
46:fb:a5:a1:8b:19:de:b2:e1:9b:9e:26:f8:0a:05:e9:b2:6e:
59:2c:3f:ca:19:fc:35:5e:b4:79:43:6a:5a:87:77:5b:cc:89:
76:56:84:32:03:69:6f:8b:bc:a5:97:7f:c2:99:d5:5e:7e:ef:
5b:23:6b:3d:07:4f:29:22:cb:cf:13:d5:7d:0c:c4:01:49:2e:
15:4e:e4:ca:a0:70:b4:6c:13:07:0f:41:e6:1b:3c:be:2f:31:
6c:e3:4a:95:41:66:3f:7a:e3:fa:1c:23:a5:42:8e:00:d6:79:
d0:02:b5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oKwgZFuF7plWpackjiSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjYwNjExMTcwMDIwWhcNMjYwNjEyMTcwMDIwWjAzMTEwLwYDVQQD
EyhjZjFlZWY2ZmEzZWIzYTVkNjMzNTY5YWFlZjk2N2Q2MzgyNjhhZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOhfEdwZrUYVHhvsXRDi1uNEWRRl
Y8nqQzwu5NgrF9qDccP9Pf7aeOd8YrjXBzYyVUnqTuFrgAEWHHR1IOrGQ4VldA8q
lrukR4u33RkmUNWCOq34PQw//Zx7J8gIT7sU4SbIxpCDXkSfdf/7Fe4X4ypiwUCW
ee0aavBJy6AJ4+/ygaor+WCYQNnZa2s0AujsL2Sf9dT0dMZyN0hUXlDz8mxvXQyV
P+rW8I3ZbsyQHyGwrP4eeFdJ/4YlJoxkLvN1687uWSCvjRhzS33Rb3Lk77O5cG/k
EcbRzsblXvM7o/AOtZipkEOPugoRFikbobgvCEQqJXS4CLgnb/Hfv5k4eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8e72+j6zpdYzVpqu+WfWOCaK/6MB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2vcmlen
zT12vyscRe+nuLCefd0kiuTn02EdVckSSiDSY/UYwUMLAE1OLlQklQO9J/EoRuv6
oR6oECZG9n8WzgLjGaJ9qhLYpY0zeL3RrOcKihcvI4CP4T4wJBu3WG2r4Uu8skOh
5HACs92bXXWur7FPMdzDzqyykUA/enID3TSyzY9p2uhNzgMN+520X04KRvuloYsZ
3rLhm54m+AoF6bJuWSw/yhn8NV60eUNqWod3W8yJdlaEMgNpb4u8pZd/wpnVXn7v
WyNrPQdPKSLLzxPVfQzEAUkuFU7kyqBwtGwTBw9B5hs8vi8xbONKlUFmP3rj+hwj
pUKOANZ50AK1LQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:05 2026 by rpki-client