
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: TP7gtkaxnSzwertjc7iTPa6dvd9ylu8c7/LvdV3YBRc=
Subject key identifier: B3:A6:D7:C7:0D:F4:C4:CF:ED:A9:B1:A1:25:75:D2:7D:5E:14:AF:DC
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019FA3AA199788DB6EA2935EC90309FC99CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 13:01:01 +0000
Manifest this update: Mon 27 Jul 2026 13:01:01 +0000
Manifest next update: Tue 28 Jul 2026 13:01:01 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: JTYAoqnsSaLcPTn9g0qE6ZbcojdjZ8FhrFOvTpG58V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:19:97:88:db:6e:a2:93:5e:c9:03:09:fc:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jul 27 13:01:01 2026 GMT
Not After : Jul 28 13:01:01 2026 GMT
Subject: CN=b3a6d7c70df4c4cfeda9b1a12575d27d5e14afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:e9:af:66:a3:16:84:ee:c5:95:fb:b2:d0:
36:2c:02:8b:c9:91:71:51:38:76:83:f3:c7:38:fd:
41:0b:0d:c0:c7:18:cb:23:47:0e:f7:bd:8b:20:24:
b2:7a:49:10:de:e9:ca:5e:0a:61:eb:a9:b3:3d:12:
cb:78:a9:d2:f3:f7:8e:4f:d9:7c:80:ab:5f:4a:86:
47:64:06:a4:f7:61:b9:01:f1:24:4c:ae:5b:d1:85:
80:91:ff:b8:82:fc:61:06:1e:25:99:26:78:e5:b3:
68:c2:e3:c4:3a:4b:39:48:c6:d8:fb:f6:31:f8:00:
8d:35:70:3f:f6:6f:b0:9e:c5:3c:e7:41:b0:20:d5:
bd:ed:f1:f1:9a:88:84:02:51:7a:14:7a:03:7c:de:
df:05:1b:fd:38:59:86:b8:9e:d5:30:32:09:0b:17:
ed:43:65:7d:51:89:12:33:d0:d2:44:0b:b6:7a:00:
56:ed:aa:77:a9:e8:1e:a3:56:8f:f0:dd:6f:09:9f:
39:52:68:54:6b:24:c9:28:7a:a9:a7:e8:9b:e0:e2:
05:43:5a:e0:30:14:8b:70:7d:49:88:6d:d6:98:87:
46:6f:c4:9b:08:78:c2:7e:14:50:02:6e:49:c1:17:
36:7c:80:d6:c6:02:ba:85:60:72:9f:94:85:7e:5b:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:D7:C7:0D:F4:C4:CF:ED:A9:B1:A1:25:75:D2:7D:5E:14:AF:DC
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:09:ac:05:31:8e:a7:39:65:47:99:d0:87:be:b4:eb:08:
a3:91:42:a5:53:b1:a2:06:51:cf:41:34:aa:7b:86:38:de:87:
e4:21:9e:a9:d9:0e:84:7e:63:b4:14:a5:48:d0:58:7d:2a:b5:
0a:fd:f0:0d:93:dd:df:9b:91:ee:3c:b8:a4:b8:77:9c:b6:06:
a0:02:e6:cc:01:0a:b1:07:d4:69:12:40:20:d6:70:41:e7:3f:
0e:2f:96:62:06:89:0b:4b:de:8e:dc:e3:43:96:58:7e:b1:21:
2c:79:85:23:43:de:f4:65:1a:ba:73:c3:3f:d6:04:1f:13:e2:
0c:5b:11:2b:ae:83:37:e6:ee:85:8f:92:ed:d2:25:a2:fb:bc:
3a:a2:fb:2a:f2:bc:02:00:6d:eb:79:f3:09:6a:70:46:b8:19:
bb:87:52:12:d3:d0:f9:62:9c:ca:9d:5f:66:b4:8d:7b:a6:32:
f4:d6:20:9b:06:f8:6e:40:f5:24:65:49:8e:72:5d:6b:67:eb:
53:0e:de:dd:b3:d1:b9:f8:4c:4e:79:5c:e2:28:f1:89:56:11:
08:06:8e:01:bf:c3:e8:a9:a3:3a:09:a9:cf:b0:36:1c:6b:f1:
46:ff:1a:97:b0:e5:a5:52:bd:6b:4c:fd:21:df:38:67:c4:2a:
96:17:80:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqhmXiNtuopNeyQMJ/JnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3
YjI2YjEwHhcNMjYwNzI3MTMwMTAxWhcNMjYwNzI4MTMwMTAxWjAzMTEwLwYDVQQD
EyhiM2E2ZDdjNzBkZjRjNGNmZWRhOWIxYTEyNTc1ZDI3ZDVlMTRhZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLpr2ajFoTuxZX7stA2LAKLyZFx
UTh2g/PHOP1BCw3AxxjLI0cO972LICSyekkQ3unKXgph66mzPRLLeKnS8/eOT9l8
gKtfSoZHZAak92G5AfEkTK5b0YWAkf+4gvxhBh4lmSZ45bNowuPEOks5SMbY+/Yx
+ACNNXA/9m+wnsU850GwINW97fHxmoiEAlF6FHoDfN7fBRv9OFmGuJ7VMDIJCxft
Q2V9UYkSM9DSRAu2egBW7ap3qegeo1aP8N1vCZ85UmhUayTJKHqpp+ib4OIFQ1rg
MBSLcH1JiG3WmIdGb8SbCHjCfhRQAm5JwRc2fIDWxgK6hWByn5SFflsyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOm18cN9MTP7amxoSV10n1eFK/cMB8GA1UdIwQY
MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt
YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0
LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY0JrAUx
jqc5ZUeZ0Ie+tOsIo5FCpVOxogZRz0E0qnuGON6H5CGeqdkOhH5jtBSlSNBYfSq1
Cv3wDZPd35uR7jy4pLh3nLYGoALmzAEKsQfUaRJAINZwQec/Di+WYgaJC0vejtzj
Q5ZYfrEhLHmFI0Pe9GUaunPDP9YEHxPiDFsRK66DN+buhY+S7dIlovu8OqL7KvK8
AgBt63nzCWpwRrgZu4dSEtPQ+WKcyp1fZrSNe6Yy9NYgmwb4bkD1JGVJjnJda2fr
Uw7e3bPRufhMTnlc4ijxiVYRCAaOAb/D6KmjOgmpz7A2HGvxRv8al7DlpVK9a0z9
Id84Z8QqlheAfA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 20:22:30 2026 by rpki-client