Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: c8ZoySJKWLNa5s6cEbF908sdBqr7hnD5JBrIqcjmh4Y=
Subject key identifier: 2B:B1:57:8F:B1:61:2C:CB:F3:E3:A6:17:BF:A6:3C:3D:76:99:C0:D1
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019EB5B380F8E2910776E4FF49166DA12E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0DA3
Signing time: Thu 11 Jun 2026 08:01:40 +0000
Manifest this update: Thu 11 Jun 2026 08:01:40 +0000
Manifest next update: Fri 12 Jun 2026 08:01:40 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: iCxDGvUqh54aLUy78DwjlIvO91bilw/1eXHCL2J/pmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b3:80:f8:e2:91:07:76:e4:ff:49:16:6d:a1:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jun 11 08:01:40 2026 GMT
Not After : Jun 12 08:01:40 2026 GMT
Subject: CN=2bb1578fb1612ccbf3e3a617bfa63c3d7699c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:29:86:dc:90:d9:98:cd:32:df:36:ff:47:
b6:47:4b:4e:5c:c0:fc:12:4f:c9:0a:6b:80:e7:59:
5e:54:aa:eb:38:ee:19:c7:37:8c:96:ba:ea:bc:13:
6e:9a:22:f0:1e:6b:b6:7e:98:b1:7e:1d:d6:03:c1:
d5:78:77:cf:e9:d9:24:e9:c1:86:d5:be:cd:ce:8a:
bc:6f:e9:9a:08:39:1d:d1:7b:2b:9f:f6:9c:c9:d4:
1d:47:48:3e:8b:0f:63:c2:45:a0:3a:a8:3e:32:9a:
52:da:93:78:3d:55:80:42:08:0b:bb:12:fd:15:ed:
67:24:94:75:23:82:33:31:c5:24:66:cf:8a:bf:14:
9f:5c:30:a7:ce:bc:c2:2c:2f:5a:df:5c:7f:7f:5d:
be:93:78:e7:a7:3e:bc:06:bc:8e:b9:35:d9:38:e7:
39:96:6f:bc:82:e9:75:dc:e0:e1:e2:0f:98:74:e9:
df:58:18:7b:fb:70:1f:4b:c5:92:05:00:1d:c6:84:
26:cc:19:5f:5b:fc:3e:c4:bf:5a:b4:4e:a0:60:ec:
f0:1a:44:11:ec:4d:a3:0d:5a:d9:54:24:cd:57:06:
22:6b:60:d5:03:e5:cb:fc:ab:72:15:5e:54:66:19:
20:90:07:34:e0:58:52:e8:64:24:e0:f7:87:38:70:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:57:8F:B1:61:2C:CB:F3:E3:A6:17:BF:A6:3C:3D:76:99:C0:D1
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:8a:b9:cb:ec:e5:f5:c2:cd:b4:f5:5c:a0:e9:81:dc:62:
2b:6c:34:94:f7:5b:e5:6a:bb:a3:8b:9a:22:53:ba:27:16:6b:
35:d1:5c:55:45:c4:ef:02:63:c4:3c:98:01:e0:37:e8:81:11:
9e:9c:29:bf:41:21:eb:a3:11:83:06:19:a1:d9:0e:f5:53:bd:
40:b2:33:eb:77:0f:72:46:3f:b2:79:38:b3:46:93:32:a9:48:
26:38:e6:f2:50:14:74:9a:0a:19:57:29:e7:7e:d1:58:df:8f:
d8:d7:7d:56:d8:4b:21:58:0b:b8:e0:97:d3:24:fa:61:f5:bf:
c1:a7:d1:07:eb:cc:c0:68:f0:7e:78:08:da:47:b7:8c:36:ed:
f7:c8:f0:8d:80:8c:c1:e3:d4:09:bd:2c:81:20:86:8e:a0:4f:
44:81:6c:75:9a:1e:7c:1b:3f:e9:c1:27:d3:01:06:98:ab:e1:
73:35:ec:f2:43:c1:3a:81:86:f7:f4:bb:46:ad:b6:99:00:d1:
0e:74:f4:33:12:28:af:ca:aa:05:09:97:6a:8b:3b:86:6f:ed:
3f:b7:0d:8c:20:7d:99:fe:10:eb:e1:7a:0e:54:c3:23:a4:16:
e6:ec:76:8b:04:45:24:44:90:ca:3b:a8:3c:e2:b6:76:29:6f:
94:24:6a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61s4D44pEHduT/SRZtoS6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy
MWRkNzgwHhcNMjYwNjExMDgwMTQwWhcNMjYwNjEyMDgwMTQwWjAzMTEwLwYDVQQD
EygyYmIxNTc4ZmIxNjEyY2NiZjNlM2E2MTdiZmE2M2MzZDc2OTljMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOEphtyQ2ZjNMt82/0e2R0tOXMD8
Ek/JCmuA51leVKrrOO4ZxzeMlrrqvBNumiLwHmu2fpixfh3WA8HVeHfP6dkk6cGG
1b7Nzoq8b+maCDkd0Xsrn/acydQdR0g+iw9jwkWgOqg+MppS2pN4PVWAQggLuxL9
Fe1nJJR1I4IzMcUkZs+KvxSfXDCnzrzCLC9a31x/f12+k3jnpz68BryOuTXZOOc5
lm+8gul13ODh4g+YdOnfWBh7+3AfS8WSBQAdxoQmzBlfW/w+xL9atE6gYOzwGkQR
7E2jDVrZVCTNVwYia2DVA+XL/KtyFV5UZhkgkAc04FhS6GQk4PeHOHAfVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuxV4+xYSzL8+OmF7+mPD12mcDRMB8GA1UdIwQY
MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut
ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2
LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzCKucvs
5fXCzbT1XKDpgdxiK2w0lPdb5Wq7o4uaIlO6JxZrNdFcVUXE7wJjxDyYAeA36IER
npwpv0Eh66MRgwYZodkO9VO9QLIz63cPckY/snk4s0aTMqlIJjjm8lAUdJoKGVcp
537RWN+P2Nd9VthLIVgLuOCX0yT6YfW/wafRB+vMwGjwfngI2ke3jDbt98jwjYCM
wePUCb0sgSCGjqBPRIFsdZoefBs/6cEn0wEGmKvhczXs8kPBOoGG9/S7Rq22mQDR
DnT0MxIor8qqBQmXaos7hm/tP7cNjCB9mf4Q6+F6DlTDI6QW5ux2iwRFJESQyjuo
POK2dilvlCRq6w==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:01 2026 by rpki-client