Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File: y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier: 7/uNaxP1KiWa5YppZkwDc0t+NM+HUdP8t7kGQcFY+KU=
Subject key identifier: 7D:58:B1:C1:1E:FB:43:15:8D:C3:7B:78:93:BA:D9:1E:37:BD:9B:D2
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 019EEE904B9DC2039209CF38E58D4E323961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number: 1972
Signing time: Mon 22 Jun 2026 09:01:34 +0000
Manifest this update: Mon 22 Jun 2026 09:01:34 +0000
Manifest next update: Tue 23 Jun 2026 09:01:34 +0000
Files and hashes: 1: gTn5FRcz1WjHbFIUzmESIJRxMLs.roa (hash: 3+4+41QBJiY0s+CghRUoKRon+yDRu0Zt5Sbg75kXtZc=)
2: sxT3f0dvZnHHcSZ34lCIOZ9GuVw.roa (hash: pBbjOXEXTBhzJuJASEYw2dI37yzvRUATFTwvTf15Ndw=)
3: vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa (hash: sq7lKfoyNzXqh8ifJ6Y3jNbECu87UDlvl3/h5jz4zpo=)
4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: SRV0ZnoLn/Ve1DQKB9zgEkwcy3TXDEUu2fuED5VrdeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:90:4b:9d:c2:03:92:09:cf:38:e5:8d:4e:32:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jun 22 09:01:34 2026 GMT
Not After : Jun 23 09:01:34 2026 GMT
Subject: CN=7d58b1c11efb43158dc37b7893bad91e37bd9bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:46:ef:3f:5c:0c:43:d5:12:89:95:bf:cf:
b0:cd:57:11:2a:cf:86:46:cf:36:7c:68:ce:ce:23:
53:ce:ae:16:a5:1d:59:52:35:22:83:dc:72:b0:d7:
ac:eb:47:f9:94:a6:05:78:dc:00:e3:4b:7e:06:23:
ad:91:00:77:93:d2:73:82:2e:83:3e:bd:7d:e9:3f:
5a:57:e2:1b:28:a5:b2:10:63:e2:29:43:e5:c3:e3:
84:7a:5e:c8:92:9d:8d:19:d0:d1:6e:63:3d:54:c9:
1b:80:40:66:81:29:3b:a6:53:10:c5:78:d4:29:4b:
5f:09:49:7e:49:aa:4b:a5:64:54:2c:79:92:20:8a:
6f:86:d0:a8:0a:81:ee:b5:42:df:0d:c6:29:21:73:
a2:49:72:04:e0:06:b8:0d:09:04:56:92:90:42:2d:
1a:83:4c:0c:67:da:9f:4f:9d:7b:11:8d:7c:d8:35:
ea:3c:eb:1e:d1:10:04:57:f7:c7:90:35:df:23:11:
c6:6d:7c:b1:0f:9d:67:de:4e:7d:12:60:db:b6:49:
f7:dd:71:09:f7:aa:a1:b6:54:24:1a:ae:69:0c:ca:
77:2a:33:cc:b2:4d:26:f7:b7:5b:5b:a4:f4:74:1c:
37:cd:bc:e3:65:c2:6e:d7:6c:18:d9:53:60:29:f2:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:B1:C1:1E:FB:43:15:8D:C3:7B:78:93:BA:D9:1E:37:BD:9B:D2
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:21:c3:40:2d:ca:35:37:9f:32:fd:cf:46:e7:09:c0:ba:1b:
1c:26:fd:62:47:41:84:f8:49:bb:30:29:f6:75:5a:e3:81:03:
8a:3a:e0:ab:64:87:cb:8c:5a:0a:92:d7:f7:5a:e3:e8:54:b3:
3a:7c:2f:6a:75:ae:a0:ea:df:13:41:d7:ad:2e:a6:36:a6:e7:
ca:a9:48:8d:1f:51:d8:74:51:2f:bd:65:f9:41:ad:86:2e:2d:
01:b1:85:90:26:bb:05:7f:2c:e6:a8:3d:55:80:e6:1d:02:92:
b7:6e:65:ef:ff:48:8e:72:25:42:25:02:4f:93:fb:30:4f:08:
1c:01:87:1f:fd:ff:b9:ed:21:16:82:94:4e:2f:85:95:5d:c9:
34:ed:85:06:7a:36:2a:08:1a:da:14:ac:1a:80:05:34:27:b0:
b6:33:b2:2c:bd:7f:9c:65:ff:2d:dd:d6:4d:a1:76:e5:9d:04:
87:93:49:35:81:a7:48:44:7c:30:d6:92:97:8d:34:6d:db:2c:
74:5b:a0:88:dd:95:bd:ec:c6:2a:0c:4c:66:cd:36:f4:a3:c6:
14:e6:cb:71:9a:fb:7f:5a:0c:fa:22:68:a5:8e:d6:fb:99:e3:
bf:56:1c:ea:b2:32:da:39:3a:9b:9b:00:16:3c:72:0b:2e:8b:
50:13:71:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ukEudwgOSCc845Y1OMjlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky
MzA3ZTIwHhcNMjYwNjIyMDkwMTM0WhcNMjYwNjIzMDkwMTM0WjAzMTEwLwYDVQQD
Eyg3ZDU4YjFjMTFlZmI0MzE1OGRjMzdiNzg5M2JhZDkxZTM3YmQ5YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mBG7z9cDEPVEomVv8+wzVcRKs+G
Rs82fGjOziNTzq4WpR1ZUjUig9xysNes60f5lKYFeNwA40t+BiOtkQB3k9Jzgi6D
Pr196T9aV+IbKKWyEGPiKUPlw+OEel7Ikp2NGdDRbmM9VMkbgEBmgSk7plMQxXjU
KUtfCUl+SapLpWRULHmSIIpvhtCoCoHutULfDcYpIXOiSXIE4Aa4DQkEVpKQQi0a
g0wMZ9qfT517EY182DXqPOse0RAEV/fHkDXfIxHGbXyxD51n3k59EmDbtkn33XEJ
96qhtlQkGq5pDMp3KjPMsk0m97dbW6T0dBw3zbzjZcJu12wY2VNgKfJq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1YscEe+0MVjcN7eJO62R43vZvSMB8GA1UdIwQY
MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt
YmUzMjUyYWM0OTgwLzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw
LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiHDQC3K
NTefMv3PRucJwLobHCb9YkdBhPhJuzAp9nVa44EDijrgq2SHy4xaCpLX91rj6FSz
OnwvanWuoOrfE0HXrS6mNqbnyqlIjR9R2HRRL71l+UGthi4tAbGFkCa7BX8s5qg9
VYDmHQKSt25l7/9IjnIlQiUCT5P7ME8IHAGHH/3/ue0hFoKUTi+FlV3JNO2FBno2
Kgga2hSsGoAFNCewtjOyLL1/nGX/Ld3WTaF25Z0Eh5NJNYGnSER8MNaSl400bdss
dFugiN2VvezGKgxMZs029KPGFObLcZr7f1oM+iJopY7W+5njv1Yc6rIy2jk6m5sA
FjxyCy6LUBNxrw==
-----END CERTIFICATE-----
Generated at Mon Jun 22 15:07:21 2026 by rpki-client