Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: Y8/ZXBHzkgjw/nzeEFkq27P3aL45/vj2GOIfpEPcq+U=
Subject key identifier: 0B:AD:62:59:9F:B4:7D:56:A2:60:97:54:E3:C2:9A:B6:B5:4E:2F:15
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019F122E11C9641A61C83959FA8637A4F33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 1450
Signing time: Mon 29 Jun 2026 07:00:36 +0000
Manifest this update: Mon 29 Jun 2026 07:00:36 +0000
Manifest next update: Tue 30 Jun 2026 07:00:36 +0000
Files and hashes: 1: 0OOhZQIpq6dXwSrbl0KaN4bQBwk.roa (hash: z5lcUbMXKGaRM5S0Zeu6WP6amOKl5X2nXO5t7H9TCbI=)
2: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: nGtnj05aJwC6LJrCFpMi+5Det3QcZNol134AnmEIyq8=)
3: r8W-JPeHlAiFCJwWv-YMAOVztvA.asa (hash: k63Cqync/EGh92kwaNFltDkZGtDaRvYKfq5QI6GDv7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:11:c9:64:1a:61:c8:39:59:fa:86:37:a4:f3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Jun 29 07:00:36 2026 GMT
Not After : Jun 30 07:00:36 2026 GMT
Subject: CN=0bad62599fb47d56a2609754e3c29ab6b54e2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:56:1a:19:43:0e:ec:05:ee:89:e7:fe:71:
76:94:b6:6e:be:c1:63:3c:72:00:a2:2a:10:33:5d:
27:14:cf:ea:aa:68:c5:f2:37:af:a2:bd:e9:cc:70:
16:94:01:4c:4e:d6:57:64:66:06:2f:0a:35:c0:1c:
80:a5:c2:49:0c:86:93:dc:ff:9f:27:e0:55:7a:c0:
da:36:6f:f4:db:11:57:63:25:c2:bd:40:f5:0c:01:
24:6a:dc:b8:e3:21:ee:4c:c1:13:5e:c3:49:76:2a:
2e:f9:cb:77:5b:e6:d9:cd:8d:63:1b:ee:87:7e:96:
76:73:9c:ec:23:3c:aa:c0:b9:ae:38:6f:18:66:87:
17:d4:ea:99:97:ba:1a:65:39:1d:e5:99:05:0e:d1:
36:af:7a:d0:23:8e:09:9b:f3:2d:be:92:e3:e8:f2:
2f:d5:3e:b2:72:b9:a1:ef:07:e9:85:61:f8:9c:bc:
ae:2e:79:88:d5:5f:4f:a9:5a:fd:d1:40:ba:61:72:
71:3a:38:27:6e:c8:0a:bb:89:3d:88:c5:33:45:6b:
57:a1:0b:d9:ab:a1:be:8f:23:f5:d6:f6:a7:49:e9:
fa:8d:b9:eb:88:36:59:df:41:17:cf:64:eb:32:54:
7f:5c:16:8a:74:da:fb:d5:2f:7d:56:36:6e:e6:5f:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:62:59:9F:B4:7D:56:A2:60:97:54:E3:C2:9A:B6:B5:4E:2F:15
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:7d:52:30:06:b4:c0:bf:83:e4:99:d3:1b:68:1c:72:92:
b3:49:4a:40:a8:86:35:f7:42:fe:59:a9:05:5f:a9:55:6a:27:
d7:01:48:43:ab:45:84:1c:cd:11:bf:66:15:76:82:82:43:27:
67:17:0a:66:ec:42:44:3c:27:f1:70:d0:80:d3:f5:a1:b7:51:
6a:5e:19:18:f3:92:a9:39:0e:39:25:08:89:af:37:9b:30:a9:
50:02:90:9f:54:21:3d:46:b7:ab:72:23:1d:63:6d:1b:dc:06:
0f:f4:49:48:85:e2:34:a5:2d:71:19:76:78:7f:50:96:59:07:
1b:8a:66:8e:d3:16:16:f8:52:a7:3e:26:13:28:82:13:36:44:
7c:fe:67:82:66:d3:36:9d:9b:70:9a:ce:32:4a:3f:05:09:93:
d1:4c:fc:a4:24:9f:e3:66:cd:4e:fb:2f:ce:38:45:36:8b:45:
e4:c4:a4:32:64:11:15:9e:85:09:fc:08:4e:b4:6a:4f:6f:d3:
6a:f5:31:7e:ce:21:2a:52:1a:fa:1f:53:8e:88:cb:1c:85:3a:
85:9b:f7:f3:96:74:c8:97:2c:d5:58:07:88:44:c5:8c:23:b0:
0c:e9:23:2b:c9:af:af:40:32:e1:7f:a5:01:99:19:8e:da:32:
32:49:4f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLhHJZBphyDlZ+oY3pPM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl
OTNhMzYwHhcNMjYwNjI5MDcwMDM2WhcNMjYwNjMwMDcwMDM2WjAzMTEwLwYDVQQD
EygwYmFkNjI1OTlmYjQ3ZDU2YTI2MDk3NTRlM2MyOWFiNmI1NGUyZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqxWGhlDDuwF7onn/nF2lLZuvsFj
PHIAoioQM10nFM/qqmjF8jevor3pzHAWlAFMTtZXZGYGLwo1wByApcJJDIaT3P+f
J+BVesDaNm/02xFXYyXCvUD1DAEkaty44yHuTMETXsNJdiou+ct3W+bZzY1jG+6H
fpZ2c5zsIzyqwLmuOG8YZocX1OqZl7oaZTkd5ZkFDtE2r3rQI44Jm/MtvpLj6PIv
1T6ycrmh7wfphWH4nLyuLnmI1V9PqVr90UC6YXJxOjgnbsgKu4k9iMUzRWtXoQvZ
q6G+jyP11vanSen6jbnriDZZ30EXz2TrMlR/XBaKdNr71S99VjZu5l/CkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAutYlmftH1WomCXVOPCmra1Ti8VMB8GA1UdIwQY
MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt
OTgwNTExZGMwNWFlLzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl
LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuJ9UjAG
tMC/g+SZ0xtoHHKSs0lKQKiGNfdC/lmpBV+pVWon1wFIQ6tFhBzNEb9mFXaCgkMn
ZxcKZuxCRDwn8XDQgNP1obdRal4ZGPOSqTkOOSUIia83mzCpUAKQn1QhPUa3q3Ij
HWNtG9wGD/RJSIXiNKUtcRl2eH9QllkHG4pmjtMWFvhSpz4mEyiCEzZEfP5ngmbT
Np2bcJrOMko/BQmT0Uz8pCSf42bNTvsvzjhFNotF5MSkMmQRFZ6FCfwITrRqT2/T
avUxfs4hKlIa+h9TjojLHIU6hZv385Z0yJcs1VgHiETFjCOwDOkjK8mvr0Ay4X+l
AZkZjtoyMklPEA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:58 2026 by rpki-client