Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: h3FtaeVWcneXoHlgsrjl02p+LjqlyT1ckhKalklc7ck=
Subject key identifier: 91:81:89:01:B1:82:EA:2A:C3:BF:C7:F4:3B:89:DA:B3:8A:2D:A7:F1
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019EE28C0F359DF6EAD4133B662C75735D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 08DD
Signing time: Sat 20 Jun 2026 01:01:30 +0000
Manifest this update: Sat 20 Jun 2026 01:01:30 +0000
Manifest next update: Sun 21 Jun 2026 01:01:30 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: NiWhcMwaHpX817jRjeorqU9f0eVhCCrubTIZex9lC9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8c:0f:35:9d:f6:ea:d4:13:3b:66:2c:75:73:5d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Jun 20 01:01:30 2026 GMT
Not After : Jun 21 01:01:30 2026 GMT
Subject: CN=91818901b182ea2ac3bfc7f43b89dab38a2da7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:88:b3:21:9f:40:96:c0:21:7d:45:a8:2e:
5d:07:a8:63:56:85:44:6c:7e:3f:94:7a:10:13:6a:
43:b9:3f:13:d2:15:8d:93:4b:68:dc:5a:41:3e:5d:
b7:43:54:1f:a5:cf:a5:99:df:f0:9f:3d:7c:56:3c:
d4:47:45:e2:03:67:16:38:a4:24:83:d2:d9:97:7a:
8c:78:cf:1a:68:e8:c1:77:88:5c:77:e9:17:6a:84:
89:fe:36:f6:a6:4f:62:38:22:af:47:30:d4:f2:e7:
75:af:a6:ad:87:25:ce:14:b0:2e:4a:20:99:ce:04:
cc:f8:64:bb:6a:26:b0:cd:7b:2f:1e:f0:b1:22:ad:
8d:2a:8e:42:64:f3:46:02:e9:a0:de:ef:bf:5c:7b:
d3:10:63:cc:eb:d4:d9:f4:60:2c:00:0d:6d:72:57:
89:06:a8:7d:8a:91:ec:96:69:af:57:e8:92:7f:18:
86:6e:c1:8e:c7:b3:9e:1c:e5:74:87:16:60:1e:21:
19:74:13:e8:4c:6d:5a:c3:c1:2d:78:7d:cf:34:56:
a3:44:65:ee:b7:62:6a:db:be:d6:0c:6c:15:d4:64:
0f:5a:87:d4:e8:9c:20:72:b7:79:e4:d0:35:43:e5:
88:fa:b6:9a:1b:23:fa:81:b0:6f:b9:c2:cf:a9:4c:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:81:89:01:B1:82:EA:2A:C3:BF:C7:F4:3B:89:DA:B3:8A:2D:A7:F1
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:d9:a1:07:07:07:f6:3a:ba:86:00:d4:dd:94:ab:66:cc:
d9:ea:8f:46:0d:41:c7:f8:9d:cd:16:74:5d:ce:2c:7d:db:94:
a9:d0:77:b6:e3:18:74:94:14:98:d2:fa:de:45:ff:bb:58:75:
54:8f:a6:91:60:27:65:4e:19:7e:3a:3d:32:37:49:65:5a:7e:
19:90:3b:9c:c4:af:0b:dd:22:22:c8:69:17:1b:79:c3:5c:4b:
08:ab:70:38:b6:5f:47:cc:6d:25:e8:6d:c4:9c:8d:3a:3b:20:
aa:e8:56:23:0d:05:1e:44:99:1b:3b:95:cb:81:04:f9:71:72:
48:ff:f6:da:74:6f:ec:41:10:29:11:00:16:1a:34:d6:50:6e:
58:d7:5e:a9:7d:86:86:9a:b9:d7:3e:de:a6:75:e1:a1:8b:21:
6c:06:8b:63:8b:b8:f8:b4:7e:04:7c:da:ae:e4:45:f0:94:75:
88:3f:60:68:f0:27:4b:68:b7:18:6c:e9:c4:7c:a8:e4:c0:cf:
7f:dd:29:51:af:62:71:bb:69:ff:eb:0c:37:f2:fd:94:5c:b8:
c6:b1:d7:30:08:76:5e:88:e2:1c:99:45:01:88:1f:ef:24:22:
23:8b:a0:78:30:c1:5a:82:95:ee:8d:9f:35:32:95:71:cf:f1:
20:50:bb:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ijA81nfbq1BM7Zix1c101MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5
YTI2OTQwHhcNMjYwNjIwMDEwMTMwWhcNMjYwNjIxMDEwMTMwWjAzMTEwLwYDVQQD
Eyg5MTgxODkwMWIxODJlYTJhYzNiZmM3ZjQzYjg5ZGFiMzhhMmRhN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosqIsyGfQJbAIX1FqC5dB6hjVoVE
bH4/lHoQE2pDuT8T0hWNk0to3FpBPl23Q1Qfpc+lmd/wnz18VjzUR0XiA2cWOKQk
g9LZl3qMeM8aaOjBd4hcd+kXaoSJ/jb2pk9iOCKvRzDU8ud1r6athyXOFLAuSiCZ
zgTM+GS7aiawzXsvHvCxIq2NKo5CZPNGAumg3u+/XHvTEGPM69TZ9GAsAA1tcleJ
Bqh9ipHslmmvV+iSfxiGbsGOx7OeHOV0hxZgHiEZdBPoTG1aw8EteH3PNFajRGXu
t2Jq277WDGwV1GQPWofU6Jwgcrd55NA1Q+WI+raaGyP6gbBvucLPqUx7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGBiQGxguoqw7/H9DuJ2rOKLafxMB8GA1UdIwQY
MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPHZoQcH
B/Y6uoYA1N2Uq2bM2eqPRg1Bx/idzRZ0Xc4sfduUqdB3tuMYdJQUmNL63kX/u1h1
VI+mkWAnZU4Zfjo9MjdJZVp+GZA7nMSvC90iIshpFxt5w1xLCKtwOLZfR8xtJeht
xJyNOjsgquhWIw0FHkSZGzuVy4EE+XFySP/22nRv7EEQKREAFho01lBuWNdeqX2G
hpq51z7epnXhoYshbAaLY4u4+LR+BHzaruRF8JR1iD9gaPAnS2i3GGzpxHyo5MDP
f90pUa9icbtp/+sMN/L9lFy4xrHXMAh2XojiHJlFAYgf7yQiI4ugeDDBWoKV7o2f
NTKVcc/xIFC7Xw==
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:44:31 2026 by rpki-client