Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
File: YHx8fGSR2ebM-RD6b2na8SgCgC0.mft (raw, json)
Hash identifier: GqsRdJ6XmbS3en+mK2BUGVpbHhkX72hOEu4/f10nvSc=
Subject key identifier: 9C:40:02:83:23:0C:1F:C5:5B:4F:CC:38:8B:36:8D:FB:FB:FF:C9:C0
Authority key identifier: 60:7C:7C:7C:64:91:D9:E6:CC:F9:10:FA:6F:69:DA:F1:28:02:80:2D
Certificate issuer: /CN=607c7c7c6491d9e6ccf910fa6f69daf12802802d
Certificate serial: 019F1152E70A1B0DC5F0A6C929CD385CBE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHx8fGSR2ebM-RD6b2na8SgCgC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
Manifest number: 19
Signing time: Mon 29 Jun 2026 03:01:13 +0000
Manifest this update: Mon 29 Jun 2026 03:01:13 +0000
Manifest next update: Tue 30 Jun 2026 03:01:13 +0000
Files and hashes: 1: YHx8fGSR2ebM-RD6b2na8SgCgC0.crl (hash: 9/p0QKUOz5Q3ipSRjqjxYMqKLR5A/3Y/QGy7Puf97qo=)
2: euwzSj8xOG7EminyKJrU5zxOksk.roa (hash: MbduT34AD8zWgFsmrVTvrR5nk3ZCJDd2QXhzk0/XC6I=)
3: tZcCqS1zMOj4hkjLWNCp2-80-Aw.asa (hash: c8k+A9misqk88gy/W71jKvbdMJwPBjSZWB/cZZnfTLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHx8fGSR2ebM-RD6b2na8SgCgC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:e7:0a:1b:0d:c5:f0:a6:c9:29:cd:38:5c:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c7c7c6491d9e6ccf910fa6f69daf12802802d
Validity
Not Before: Jun 29 03:01:13 2026 GMT
Not After : Jun 30 03:01:13 2026 GMT
Subject: CN=9c400283230c1fc55b4fcc388b368dfbfbffc9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:28:88:2a:89:72:81:36:3a:d4:9c:07:d9:
e1:60:cc:cf:a6:7f:36:81:27:d3:e7:b2:be:f1:5c:
5c:a5:26:4f:10:10:36:fe:76:e9:fe:26:82:59:7d:
c5:88:f8:7b:fc:7f:9b:28:da:c2:00:7f:e8:10:7e:
a4:c5:63:d1:31:bd:08:f3:31:80:02:da:5c:a2:3b:
f3:0c:2e:2e:a5:f7:d8:38:26:a8:f3:c7:34:3f:90:
81:2d:88:bb:9e:52:24:69:83:7f:62:ab:a2:c2:b5:
be:7d:13:66:e8:37:8e:99:c2:44:89:e1:dd:d6:a0:
2e:a3:d1:6e:98:43:c8:72:0a:a5:4d:a4:22:cf:e8:
23:72:aa:e7:b0:8d:85:c7:b8:4b:48:8b:a4:0c:e0:
c4:b3:ea:59:ec:b8:00:6a:a6:88:93:aa:f0:ff:c6:
47:36:a8:53:66:43:63:ca:1c:9e:88:7f:58:f1:be:
1e:ea:fd:23:a7:35:df:0a:99:a0:4d:07:94:2f:92:
d2:c3:28:29:e0:c5:e6:1c:7c:89:be:17:c5:c8:bb:
d2:4b:17:fd:26:d4:96:46:0b:2d:1d:99:0f:ab:3f:
f3:e6:52:d4:d6:6f:92:72:01:da:3e:4c:80:56:e0:
fb:83:fe:33:7c:63:18:13:78:cf:e2:f7:8a:6f:90:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:02:83:23:0C:1F:C5:5B:4F:CC:38:8B:36:8D:FB:FB:FF:C9:C0
X509v3 Authority Key Identifier:
keyid:60:7C:7C:7C:64:91:D9:E6:CC:F9:10:FA:6F:69:DA:F1:28:02:80:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHx8fGSR2ebM-RD6b2na8SgCgC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/YHx8fGSR2ebM-RD6b2na8SgCgC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:69:6b:e5:a9:d1:7a:ef:34:a0:38:b2:72:3b:4d:5b:98:5c:
51:b2:df:7a:2b:ae:2f:01:14:c7:a9:90:2b:89:5a:53:4e:fe:
55:7c:85:ae:37:34:df:ce:0f:40:ad:5e:28:f0:93:19:98:2d:
f9:35:4c:f9:34:0c:d8:08:21:62:b9:48:c4:83:e5:49:f1:10:
83:b9:b3:f1:ea:eb:5f:55:01:de:44:16:25:c3:4c:ed:7e:3c:
e0:54:c3:e5:16:b9:96:b1:87:86:4b:20:7e:1f:7e:78:bf:c2:
7b:a5:87:06:a6:1b:92:9f:e1:35:e8:47:85:e7:3e:27:29:0d:
e6:8e:96:f6:74:46:f2:ab:28:fb:6d:5d:91:81:24:56:cd:9f:
a8:96:26:74:4e:d7:e5:5d:ac:7c:bc:32:26:8f:11:79:2d:6d:
0d:a5:80:c9:fd:d0:64:75:ae:01:d0:d6:c9:d2:38:0f:f1:f6:
1b:31:b1:bd:5e:57:d2:ef:da:5d:3d:44:31:47:fc:d0:b9:8e:
b8:f8:2c:6d:ba:7f:d8:c6:7d:de:69:ed:df:12:25:2b:58:16:
9c:7a:71:fb:b3:71:28:66:4f:aa:fd:e5:9a:6f:2a:67:84:b2:
72:f0:a0:8c:18:f9:77:68:4f:69:e4:ca:f0:e0:d4:a6:c7:f0:
2a:96:c8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUucKGw3F8KbJKc04XL5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2M3YzdjNjQ5MWQ5ZTZjY2Y5MTBmYTZmNjlkYWYxMjgw
MjgwMmQwHhcNMjYwNjI5MDMwMTEzWhcNMjYwNjMwMDMwMTEzWjAzMTEwLwYDVQQD
Eyg5YzQwMDI4MzIzMGMxZmM1NWI0ZmNjMzg4YjM2OGRmYmZiZmZjOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGAoiCqJcoE2OtScB9nhYMzPpn82
gSfT57K+8VxcpSZPEBA2/nbp/iaCWX3FiPh7/H+bKNrCAH/oEH6kxWPRMb0I8zGA
AtpcojvzDC4upffYOCao88c0P5CBLYi7nlIkaYN/YquiwrW+fRNm6DeOmcJEieHd
1qAuo9FumEPIcgqlTaQiz+gjcqrnsI2Fx7hLSIukDODEs+pZ7LgAaqaIk6rw/8ZH
NqhTZkNjyhyeiH9Y8b4e6v0jpzXfCpmgTQeUL5LSwygp4MXmHHyJvhfFyLvSSxf9
JtSWRgstHZkPqz/z5lLU1m+ScgHaPkyAVuD7g/4zfGMYE3jP4veKb5BhIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxAAoMjDB/FW0/MOIs2jfv7/8nAMB8GA1UdIwQY
MBaAFGB8fHxkkdnmzPkQ+m9p2vEoAoAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh4OGZHU1IyZWJNLVJENmIybmE4U2dDZ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kNzlmYmUtNjEzMi00M2JlLWI4YzMt
M2VlYTUxYWRiZDk0LzEvWUh4OGZHU1IyZWJNLVJENmIybmE4U2dDZ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kNzlmYmUtNjEzMi00M2JlLWI4YzMtM2VlYTUxYWRiZDk0
LzEvWUh4OGZHU1IyZWJNLVJENmIybmE4U2dDZ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemlr5anR
eu80oDiycjtNW5hcUbLfeiuuLwEUx6mQK4laU07+VXyFrjc0384PQK1eKPCTGZgt
+TVM+TQM2AghYrlIxIPlSfEQg7mz8errX1UB3kQWJcNM7X484FTD5Ra5lrGHhksg
fh9+eL/Ce6WHBqYbkp/hNehHhec+JykN5o6W9nRG8qso+21dkYEkVs2fqJYmdE7X
5V2sfLwyJo8ReS1tDaWAyf3QZHWuAdDWydI4D/H2GzGxvV5X0u/aXT1EMUf80LmO
uPgsbbp/2MZ93mnt3xIlK1gWnHpx+7NxKGZPqv3lmm8qZ4SycvCgjBj5d2hPaeTK
8ODUpsfwKpbIsQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:35 2026 by rpki-client