Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
File: YKlx2lflTkw-UwoPekkv3uo4mgg.mft (raw, json)
Hash identifier: 7vykk9n4KwEZXvsf4rzFExrhNe8KdRPrkQ0Y90ypcxM=
Subject key identifier: 2B:F4:CF:1C:76:AB:E6:ED:A3:00:57:3F:BC:FD:59:77:7C:E3:CA:A9
Authority key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Certificate issuer: /CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Certificate serial: 019FFBA520546FE356E7015E8144BF843913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
Manifest number: 77
Signing time: Thu 13 Aug 2026 15:02:10 +0000
Manifest this update: Thu 13 Aug 2026 15:02:10 +0000
Manifest next update: Fri 14 Aug 2026 15:02:10 +0000
Files and hashes: 1: 1mT64JfFKq9j8Kx613urXRMaNJo.roa (hash: Q/tOEoTc3quAKEYckZ1+BaTLL9Gk8uPvjXmM1gSrPTU=)
2: YKlx2lflTkw-UwoPekkv3uo4mgg.crl (hash: kFOE33WrrroYaQz2uUde3qyUfA7r9D4I6U4E6ke69os=)
3: dHFk08gJmB0tFkgpJNYQpeItYJE.roa (hash: T5a0svL8hEV805qPD4BMTFrTEgZKRlATlMErknBPEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a5:20:54:6f:e3:56:e7:01:5e:81:44:bf:84:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Validity
Not Before: Aug 13 15:02:10 2026 GMT
Not After : Aug 14 15:02:10 2026 GMT
Subject: CN=2bf4cf1c76abe6eda300573fbcfd59777ce3caa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:a3:2f:e1:27:55:4a:20:71:15:f6:cc:57:
67:5b:b9:c9:b7:e9:81:8b:51:2b:1d:93:e7:6f:29:
6b:e6:30:ed:f9:cb:a9:56:79:d6:c5:76:7c:42:79:
ee:96:0a:1d:5c:37:fe:f9:9e:57:1d:4e:fd:16:dd:
e6:4e:1d:cf:1b:6a:22:9c:1a:c1:a2:aa:b6:d1:04:
2f:93:01:dc:f2:b5:d1:3c:cf:0f:6f:32:1a:dd:e2:
52:38:ef:66:65:1b:89:84:83:5b:52:d8:f8:17:9c:
d7:ec:67:b7:b6:25:bf:e6:5f:5b:ee:af:d0:67:32:
45:23:65:5c:59:88:27:e3:ca:b8:83:c2:d1:74:df:
cc:63:f4:1a:32:a7:19:a5:ef:ee:de:db:3f:a6:da:
d0:30:80:66:e3:50:60:a9:53:41:b8:50:bc:e1:79:
86:f5:8d:4a:f9:7a:f1:0c:22:fb:22:9a:c1:e1:78:
85:b7:ee:38:f0:de:6c:25:6e:42:cd:3d:73:02:6e:
de:e2:94:fc:02:36:3a:58:e7:c3:0c:c2:51:ed:32:
28:b3:0f:90:bc:0b:e7:79:3d:36:c6:8d:ae:e7:2a:
b8:30:3b:0b:49:c3:57:d6:6b:7d:a4:52:b2:bd:a8:
27:65:c1:fd:d6:24:82:0f:3a:b9:eb:62:da:f1:13:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:CF:1C:76:AB:E6:ED:A3:00:57:3F:BC:FD:59:77:7C:E3:CA:A9
X509v3 Authority Key Identifier:
keyid:60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:8e:05:b6:08:e6:9b:3c:ac:0b:d2:54:9d:94:b4:d9:9a:
e6:a7:49:0a:33:52:2f:a4:a7:1f:a2:ad:74:a6:98:14:ef:b5:
04:c1:57:92:ea:90:6c:10:f0:dc:61:d9:79:67:7b:99:4f:02:
27:ae:cc:0f:de:eb:90:97:0d:d3:cb:cd:01:1d:1a:10:81:69:
09:d7:38:20:77:e6:55:5a:16:58:66:db:89:40:c5:40:0c:67:
da:ed:bc:75:a5:54:8a:c5:a2:7d:7b:3f:fc:e4:44:64:47:bc:
78:f9:e0:e5:bf:d4:8f:2b:66:eb:30:f0:cd:7c:34:89:e4:1c:
cc:23:11:50:fe:be:a6:37:af:1e:85:d4:3f:d0:e6:90:b2:2c:
a5:d5:18:7d:9a:c5:fd:54:56:06:39:e3:3e:1d:98:87:20:62:
54:63:77:91:b3:75:64:71:c7:30:e5:c7:04:4a:7b:1e:70:5e:
2a:11:de:a2:47:86:98:1f:f7:a2:4d:31:e8:62:8e:95:0f:b1:
5e:eb:90:83:37:d5:8f:7b:82:6a:e1:c1:4e:33:13:47:35:2a:
16:7f:d7:3a:38:cc:f9:48:b8:f3:23:63:78:ec:c0:91:cc:f8:
87:2c:aa:19:1d:7f:e8:8d:29:6d:69:e2:99:cc:98:05:d0:13:
d1:f5:09:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/7pSBUb+NW5wFegUS/hDkTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTk3MWRhNTdlNTRlNGMzZTUzMGEwZjdhNDkyZmRlZWEz
ODlhMDgwHhcNMjYwODEzMTUwMjEwWhcNMjYwODE0MTUwMjEwWjAzMTEwLwYDVQQD
EygyYmY0Y2YxYzc2YWJlNmVkYTMwMDU3M2ZiY2ZkNTk3NzdjZTNjYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphajL+EnVUogcRX2zFdnW7nJt+mB
i1ErHZPnbylr5jDt+cupVnnWxXZ8QnnulgodXDf++Z5XHU79Ft3mTh3PG2oinBrB
oqq20QQvkwHc8rXRPM8PbzIa3eJSOO9mZRuJhINbUtj4F5zX7Ge3tiW/5l9b7q/Q
ZzJFI2VcWYgn48q4g8LRdN/MY/QaMqcZpe/u3ts/ptrQMIBm41BgqVNBuFC84XmG
9Y1K+XrxDCL7IprB4XiFt+448N5sJW5CzT1zAm7e4pT8AjY6WOfDDMJR7TIosw+Q
vAvneT02xo2u5yq4MDsLScNX1mt9pFKyvagnZcH91iSCDzq562La8RNl+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv0zxx2q+btowBXP7z9WXd848qpMB8GA1UdIwQY
MBaAFGCpcdpX5U5MPlMKD3pJL97qOJoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtseDJsZmxUa3ctVXdvUGVra3YzdW80bWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvWUtseDJsZmxUa3ctVXdvUGVra3YzdW80bWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvWUtseDJsZmxUa3ctVXdvUGVra3YzdW80bWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7aOBbYI
5ps8rAvSVJ2UtNma5qdJCjNSL6SnH6KtdKaYFO+1BMFXkuqQbBDw3GHZeWd7mU8C
J67MD97rkJcN08vNAR0aEIFpCdc4IHfmVVoWWGbbiUDFQAxn2u28daVUisWifXs/
/OREZEe8ePng5b/Ujytm6zDwzXw0ieQczCMRUP6+pjevHoXUP9DmkLIspdUYfZrF
/VRWBjnjPh2YhyBiVGN3kbN1ZHHHMOXHBEp7HnBeKhHeokeGmB/3ok0x6GKOlQ+x
XuuQgzfVj3uCauHBTjMTRzUqFn/XOjjM+Ui48yNjeOzAkcz4hyyqGR1/6I0pbWni
mcyYBdAT0fUJtg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 00:06:57 2026 by rpki-client