Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: JyM5fW/+QygpIxDBWNvp2gcCir0lodB5WG/rnbpDLJk=
Subject key identifier: 6C:1F:CB:9A:68:34:EC:E2:F6:9E:06:B2:CA:7E:55:43:56:8D:89:5F
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019FA304D98B2F70A9631856C3012101198D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0923
Signing time: Mon 27 Jul 2026 10:00:31 +0000
Manifest this update: Mon 27 Jul 2026 10:00:31 +0000
Manifest next update: Tue 28 Jul 2026 10:00:31 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: XI8jv3B+4E02W711ra0YLUxni8tf5cNReTS+LhfJ8Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:d9:8b:2f:70:a9:63:18:56:c3:01:21:01:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jul 27 10:00:31 2026 GMT
Not After : Jul 28 10:00:31 2026 GMT
Subject: CN=6c1fcb9a6834ece2f69e06b2ca7e5543568d895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:10:fc:67:70:b4:52:6b:54:a1:9c:7b:8e:
9f:e4:9d:19:82:e2:39:eb:13:7a:bd:6e:e4:e3:3a:
43:ea:10:bc:3c:4b:a7:25:89:0e:dc:9e:0c:e3:07:
28:e1:b3:e6:8b:96:bf:a4:cf:c6:02:bd:ed:d4:10:
08:7d:ab:7e:fd:f8:94:46:c2:3a:0d:4c:06:56:65:
68:41:0b:90:e3:4e:d1:90:3e:40:37:ff:52:ef:ab:
cd:77:b2:b9:d8:fc:76:ad:4c:9b:e3:9a:8c:9f:18:
a5:27:3b:6e:bd:6b:02:2e:5b:ac:56:a5:33:93:47:
f9:e2:d9:7c:32:8f:3c:b4:31:e0:87:33:6e:0c:1c:
e0:19:7a:ca:55:d0:e9:43:d1:e9:29:c5:ca:c9:e8:
74:2b:6d:82:9a:fe:73:aa:c9:89:49:73:4f:dc:c6:
2c:53:3b:95:a1:b9:b3:19:7d:99:6c:c2:a4:40:ea:
17:c6:67:03:7d:86:34:80:4c:d2:cc:f6:6d:b1:35:
f1:fc:0c:f4:ee:3e:19:38:66:46:b9:33:c6:b1:a3:
ae:4f:f0:ee:76:e7:53:e3:f0:32:5b:be:fc:10:a3:
59:a4:43:05:25:15:f5:51:c0:0a:38:f5:ce:7b:58:
f9:0b:45:e8:42:31:1a:df:1a:ec:1c:b9:4a:66:45:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1F:CB:9A:68:34:EC:E2:F6:9E:06:B2:CA:7E:55:43:56:8D:89:5F
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:bd:18:46:8e:f6:8e:bf:f2:f2:c5:43:cb:88:cd:56:37:
81:f8:b8:1b:33:e0:e4:d2:4c:e5:23:62:1b:39:df:bd:e3:6e:
ef:e9:35:26:d1:28:1b:61:6c:b7:4c:fc:c7:ea:1c:0e:9f:3b:
85:47:27:b3:aa:cf:47:56:a8:78:24:a7:83:49:b8:a3:c6:af:
6b:bf:28:e8:4f:1c:e2:41:80:6d:45:68:8c:fb:bb:ec:33:13:
f9:2e:d1:d1:97:98:f7:5a:cb:04:ec:2c:69:31:07:73:09:ac:
be:12:54:87:35:e9:45:2d:fa:0e:51:a3:99:81:3d:e0:99:98:
da:9f:29:ba:26:3b:92:7e:ec:5f:c3:06:cb:10:ae:0a:6a:5b:
26:54:70:9c:24:66:2b:f6:2f:19:94:41:9b:78:48:42:11:f7:
91:31:2a:8c:bb:2d:f6:12:02:bc:77:b1:a6:41:cf:79:08:a8:
c9:eb:a8:49:05:b1:70:ec:17:2d:05:ff:bf:33:98:28:6c:18:
7f:0e:53:fc:4c:89:6c:86:72:56:f0:a3:9e:97:9d:1f:ec:c8:
9b:49:68:69:be:5e:69:ed:3e:58:35:b8:87:d6:c9:cc:c3:95:
76:e2:a5:c4:bb:a7:28:04:a8:e1:be:4b:6d:1a:f5:79:0d:62:
47:89:57:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBNmLL3CpYxhWwwEhARmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4
ZGQ5ZGQwHhcNMjYwNzI3MTAwMDMxWhcNMjYwNzI4MTAwMDMxWjAzMTEwLwYDVQQD
Eyg2YzFmY2I5YTY4MzRlY2UyZjY5ZTA2YjJjYTdlNTU0MzU2OGQ4OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAMQ/GdwtFJrVKGce46f5J0ZguI5
6xN6vW7k4zpD6hC8PEunJYkO3J4M4wco4bPmi5a/pM/GAr3t1BAIfat+/fiURsI6
DUwGVmVoQQuQ407RkD5AN/9S76vNd7K52Px2rUyb45qMnxilJztuvWsCLlusVqUz
k0f54tl8Mo88tDHghzNuDBzgGXrKVdDpQ9HpKcXKyeh0K22Cmv5zqsmJSXNP3MYs
UzuVobmzGX2ZbMKkQOoXxmcDfYY0gEzSzPZtsTXx/Az07j4ZOGZGuTPGsaOuT/Du
dudT4/AyW778EKNZpEMFJRX1UcAKOPXOe1j5C0XoQjEa3xrsHLlKZkX4vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwfy5poNOzi9p4Gssp+VUNWjYlfMB8GA1UdIwQY
MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt
M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5
LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuu9GEaO
9o6/8vLFQ8uIzVY3gfi4GzPg5NJM5SNiGznfveNu7+k1JtEoG2Fst0z8x+ocDp87
hUcns6rPR1aoeCSng0m4o8ava78o6E8c4kGAbUVojPu77DMT+S7R0ZeY91rLBOws
aTEHcwmsvhJUhzXpRS36DlGjmYE94JmY2p8puiY7kn7sX8MGyxCuCmpbJlRwnCRm
K/YvGZRBm3hIQhH3kTEqjLst9hICvHexpkHPeQioyeuoSQWxcOwXLQX/vzOYKGwY
fw5T/EyJbIZyVvCjnpedH+zIm0loab5eae0+WDW4h9bJzMOVduKlxLunKASo4b5L
bRr1eQ1iR4lXPQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:21 2026 by rpki-client