Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: xM2AylD2RgAoDxzB4+4BgpmwbUYe0ZLLhlJUKat82CE=
Subject key identifier: 6C:E9:B5:CC:22:A2:72:9B:00:11:93:06:C3:00:4E:81:A4:BA:7C:F1
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019E9AE002A5A02914EB1C5AB921AB78B3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 02FC
Signing time: Sat 06 Jun 2026 03:00:32 +0000
Manifest this update: Sat 06 Jun 2026 03:00:32 +0000
Manifest next update: Sun 07 Jun 2026 03:00:32 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: wsNoXJDoF27gqeWS4KmAGnyPF21oOeAmXhdYRoiuwGc=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:e0:02:a5:a0:29:14:eb:1c:5a:b9:21:ab:78:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Jun 6 03:00:32 2026 GMT
Not After : Jun 7 03:00:32 2026 GMT
Subject: CN=6ce9b5cc22a2729b00119306c3004e81a4ba7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fc:1c:ca:4b:5c:35:23:49:63:f0:eb:fc:7f:
00:18:92:f4:e1:ba:9b:39:e3:69:3f:4c:19:f2:ce:
cb:08:34:f8:9b:dc:88:f8:97:47:87:92:21:58:77:
4c:4e:55:df:06:6d:45:f8:e1:3b:2e:4c:36:00:a4:
c6:d0:de:ae:e5:a7:fe:4b:0b:b5:d2:88:35:46:39:
20:7e:07:d5:db:4b:d6:3f:e9:c1:f1:65:04:c2:60:
53:41:91:e5:66:ba:37:40:b6:b0:9c:54:0b:b9:cb:
69:14:e3:64:f9:7f:b3:58:27:4f:8d:b9:22:03:6e:
a0:99:8e:1a:97:c4:e3:4e:18:c7:55:24:67:01:34:
2a:a2:67:2c:bf:45:a6:50:44:d0:e8:24:a5:b1:3b:
16:4f:fd:a9:aa:1b:0c:21:47:91:e7:24:ae:92:ea:
a0:e2:b9:0d:d3:c9:b1:4e:77:ed:8a:a9:db:ee:4f:
15:83:2b:4e:01:eb:b5:9c:b6:ba:ef:85:68:4f:9b:
fe:98:47:63:f2:fb:86:ae:43:c4:3c:ba:83:fb:4a:
d0:90:31:f7:8b:5b:42:2b:e8:09:92:b6:05:92:67:
bf:cc:31:51:44:8c:cf:32:03:c9:41:00:36:51:e2:
29:31:7d:8f:84:6b:b0:e0:4d:3b:e6:39:41:ad:ef:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:B5:CC:22:A2:72:9B:00:11:93:06:C3:00:4E:81:A4:BA:7C:F1
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:07:e6:51:27:a0:86:12:0e:4b:fc:80:43:65:e5:59:28:00:
fc:0f:c3:98:4e:27:72:9f:f6:3e:53:4b:42:66:91:fa:0d:4a:
2e:21:25:32:b9:94:e5:21:07:52:8e:d6:b6:d0:f5:e3:aa:67:
8c:4b:8e:af:4d:70:7a:52:1b:38:43:48:39:66:54:32:3f:f8:
f3:73:05:bf:84:a5:af:11:df:ff:28:33:d4:b9:61:44:87:ea:
1c:68:c6:e6:3b:80:52:d9:e8:3b:69:be:0c:71:59:6e:55:1b:
78:4b:da:79:6d:b0:dc:d7:e5:0f:93:47:c4:84:3a:8b:b4:31:
1e:fd:3a:e3:8d:34:31:1b:27:a4:66:ef:19:fd:34:55:1c:2e:
76:75:4d:6e:a1:f6:b4:fc:87:41:bc:f5:79:a5:2a:59:43:82:
f7:7f:50:d7:aa:eb:83:05:01:96:fb:2e:e1:1a:44:8a:02:d7:
a1:a3:ba:8e:0c:40:7e:7a:33:11:49:a1:30:d4:10:30:0e:46:
b2:4f:d0:a5:68:95:89:9f:ac:f6:09:fe:e8:c6:aa:15:fe:93:
56:38:4e:22:9a:1a:14:2e:da:8b:3f:58:8f:ce:d8:56:88:8c:
80:f9:50:af:60:af:2c:f7:54:f1:98:f2:6b:ba:ec:18:44:c6:
9c:22:81:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6a4AKloCkU6xxauSGreLPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw
ZmJjN2YwHhcNMjYwNjA2MDMwMDMyWhcNMjYwNjA3MDMwMDMyWjAzMTEwLwYDVQQD
Eyg2Y2U5YjVjYzIyYTI3MjliMDAxMTkzMDZjMzAwNGU4MWE0YmE3Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PwcyktcNSNJY/Dr/H8AGJL04bqb
OeNpP0wZ8s7LCDT4m9yI+JdHh5IhWHdMTlXfBm1F+OE7Lkw2AKTG0N6u5af+Swu1
0og1RjkgfgfV20vWP+nB8WUEwmBTQZHlZro3QLawnFQLuctpFONk+X+zWCdPjbki
A26gmY4al8TjThjHVSRnATQqomcsv0WmUETQ6CSlsTsWT/2pqhsMIUeR5ySukuqg
4rkN08mxTnftiqnb7k8VgytOAeu1nLa674VoT5v+mEdj8vuGrkPEPLqD+0rQkDH3
i1tCK+gJkrYFkme/zDFRRIzPMgPJQQA2UeIpMX2PhGuw4E075jlBre8fYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzptcwionKbABGTBsMAToGkunzxMB8GA1UdIwQY
MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt
N2VlNTMxMWEyYTNjLzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj
LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwfmUSeg
hhIOS/yAQ2XlWSgA/A/DmE4ncp/2PlNLQmaR+g1KLiElMrmU5SEHUo7WttD146pn
jEuOr01welIbOENIOWZUMj/483MFv4SlrxHf/ygz1LlhRIfqHGjG5juAUtnoO2m+
DHFZblUbeEvaeW2w3NflD5NHxIQ6i7QxHv064400MRsnpGbvGf00VRwudnVNbqH2
tPyHQbz1eaUqWUOC939Q16rrgwUBlvsu4RpEigLXoaO6jgxAfnozEUmhMNQQMA5G
sk/QpWiViZ+s9gn+6MaqFf6TVjhOIpoaFC7aiz9Yj87YVoiMgPlQr2CvLPdU8Zjy
a7rsGETGnCKBOA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:59 2026 by rpki-client