Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
File: YxFTku9nj6VQgFY4E_pbH4c58cY.mft (raw, json)
Hash identifier: skmhtV7cIt3gC3MauEbK5PkQzauWLkqW0QzdjLqqD1s=
Subject key identifier: 87:4E:6A:50:AF:81:DB:74:C7:3E:4E:81:EC:E4:3F:E5:B2:4D:20:48
Authority key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Certificate issuer: /CN=63115392ef678fa55080563813fa5b1f8739f1c6
Certificate serial: 019FA0E05EF5E18903C4A3254E95044275EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:26 +0000
Manifest this update: Mon 27 Jul 2026 00:01:26 +0000
Manifest next update: Tue 28 Jul 2026 00:01:26 +0000
Files and hashes: 1: 6as5WEbBHVftxoYno52EYXpZJiI.roa (hash: v8PZ1y8/898BpzA4Z9n4//Ktbh68yLyotavSi4xBa6U=)
2: YxFTku9nj6VQgFY4E_pbH4c58cY.crl (hash: Igten+oGvv5ZkVfyN28IfSjixUStAXk2yVFLZEylwVA=)
3: ar0Ts0ryzvDGOQY7d4ho9EY6si0.roa (hash: gqTbGzgaeb4B0LTSvn8godbTwE4G30IwqmkEqQ/zzHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:5e:f5:e1:89:03:c4:a3:25:4e:95:04:42:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Validity
Not Before: Jul 27 00:01:26 2026 GMT
Not After : Jul 28 00:01:26 2026 GMT
Subject: CN=874e6a50af81db74c73e4e81ece43fe5b24d2048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:7b:d1:3e:cd:78:fa:84:14:2f:c1:1a:fc:
4c:8e:89:05:e8:46:be:8b:15:2c:0a:f5:38:8f:d5:
f3:62:73:a3:a7:43:ed:35:a5:ed:cd:0b:a4:03:be:
59:d1:68:43:6a:98:46:57:43:23:7a:e5:10:9b:e8:
95:d8:40:be:e0:26:77:0e:d0:69:cc:9a:25:00:9f:
65:2f:07:d6:e5:34:a0:ea:72:d9:3d:1c:f1:13:b5:
07:be:13:ad:98:26:e3:e4:a4:a8:ff:24:e5:21:ad:
3e:19:db:1e:af:8a:9e:88:36:6e:c6:f6:61:49:40:
6e:bd:6c:83:c5:df:15:bb:3f:cc:f7:1a:21:e9:0c:
53:b1:82:f9:00:3d:3b:dd:f1:30:54:4b:cf:09:07:
76:58:eb:f0:3c:8e:01:be:08:7e:df:fc:3a:90:7c:
ca:e6:c0:8e:cc:1c:aa:06:71:6e:eb:fc:c3:84:d5:
bd:bc:84:7f:1d:d6:3d:48:31:62:f5:d4:16:79:f0:
ff:30:7f:8d:f7:8c:f7:90:ce:5a:b3:e5:66:32:7b:
2e:1f:6e:73:0d:c5:77:c5:e9:f9:d3:b9:3b:2c:60:
64:b0:fa:1c:1a:a1:15:33:70:09:14:06:f1:68:f2:
01:0c:93:c3:d2:13:ee:cf:dd:a8:45:fb:06:54:a4:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4E:6A:50:AF:81:DB:74:C7:3E:4E:81:EC:E4:3F:E5:B2:4D:20:48
X509v3 Authority Key Identifier:
keyid:63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b8:7e:5d:bc:17:c2:c3:20:92:0b:db:9a:8c:d8:ea:82:9d:
26:63:eb:32:b3:c1:62:93:24:8c:f4:5a:88:ed:7e:16:2a:d8:
97:69:3c:2c:79:6a:29:0b:01:45:a8:14:fa:1d:c5:8a:b4:f6:
64:51:24:f3:8a:50:58:eb:0f:d4:23:e5:67:c3:b5:90:46:a1:
77:b0:c8:71:c8:4f:6e:43:41:a4:6a:c2:f7:93:65:da:d3:b5:
91:1b:d9:35:81:86:e3:00:98:88:ca:68:55:1f:78:b1:cb:23:
ce:2c:76:c3:0a:9f:7f:ce:60:16:2a:07:d4:1d:e7:39:58:b8:
0c:11:2a:03:61:3a:00:f6:09:1d:c5:53:da:76:59:05:a4:bc:
43:d8:f9:41:30:32:5d:cb:f8:75:33:f1:7f:c0:22:ce:27:b7:
72:fa:61:e8:18:f1:e9:35:d2:f7:fc:cc:bd:da:38:fc:07:1d:
ab:b1:f0:a4:2c:32:52:fa:7a:32:93:cf:52:2d:80:77:b4:74:
01:08:67:78:4d:64:80:b0:ac:68:78:21:41:8e:21:01:92:25:
8a:23:36:ba:eb:30:6f:fc:fd:c9:c5:c2:53:e4:ed:7d:29:45:
33:eb:0f:3c:6b:46:2f:58:6a:61:72:89:50:a2:46:3c:4c:ad:
db:f3:3a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4F714YkDxKMlTpUEQnXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTE1MzkyZWY2NzhmYTU1MDgwNTYzODEzZmE1YjFmODcz
OWYxYzYwHhcNMjYwNzI3MDAwMTI2WhcNMjYwNzI4MDAwMTI2WjAzMTEwLwYDVQQD
Eyg4NzRlNmE1MGFmODFkYjc0YzczZTRlODFlY2U0M2ZlNWIyNGQyMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqR70T7NePqEFC/BGvxMjokF6Ea+
ixUsCvU4j9XzYnOjp0PtNaXtzQukA75Z0WhDaphGV0MjeuUQm+iV2EC+4CZ3DtBp
zJolAJ9lLwfW5TSg6nLZPRzxE7UHvhOtmCbj5KSo/yTlIa0+Gdser4qeiDZuxvZh
SUBuvWyDxd8Vuz/M9xoh6QxTsYL5AD073fEwVEvPCQd2WOvwPI4Bvgh+3/w6kHzK
5sCOzByqBnFu6/zDhNW9vIR/HdY9SDFi9dQWefD/MH+N94z3kM5as+VmMnsuH25z
DcV3xen507k7LGBksPocGqEVM3AJFAbxaPIBDJPD0hPuz92oRfsGVKQbFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdOalCvgdt0xz5OgezkP+WyTSBIMB8GA1UdIwQY
MBaAFGMRU5LvZ4+lUIBWOBP6Wx+HOfHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhGVGt1OW5qNlZRZ0ZZNEVfcGJINGM1OGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NmFlMWQtZWVkYS00Y2YyLWIwOTMt
MjRjNTNiNDNhN2QzLzEvWXhGVGt1OW5qNlZRZ0ZZNEVfcGJINGM1OGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81NmFlMWQtZWVkYS00Y2YyLWIwOTMtMjRjNTNiNDNhN2Qz
LzEvWXhGVGt1OW5qNlZRZ0ZZNEVfcGJINGM1OGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrh+XbwX
wsMgkgvbmozY6oKdJmPrMrPBYpMkjPRaiO1+FirYl2k8LHlqKQsBRagU+h3FirT2
ZFEk84pQWOsP1CPlZ8O1kEahd7DIcchPbkNBpGrC95Nl2tO1kRvZNYGG4wCYiMpo
VR94scsjzix2wwqff85gFioH1B3nOVi4DBEqA2E6APYJHcVT2nZZBaS8Q9j5QTAy
Xcv4dTPxf8Aizie3cvph6Bjx6TXS9/zMvdo4/Acdq7HwpCwyUvp6MpPPUi2Ad7R0
AQhneE1kgLCsaHghQY4hAZIliiM2uuswb/z9ycXCU+TtfSlFM+sPPGtGL1hqYXKJ
UKJGPEyt2/M6WQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:03 2026 by rpki-client