Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: EWU+FkJj7d2ZnyeP20cbw7HRFr7sXPY+yH88nna4b6k=
Subject key identifier: E1:FA:3B:17:7D:DF:4A:A0:B3:A1:E4:3B:43:2F:B0:A9:AD:37:B7:3D
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019F1377DE0AD7DD7E74EDC0838694F56CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 13:00:50 +0000
Manifest this update: Mon 29 Jun 2026 13:00:50 +0000
Manifest next update: Tue 30 Jun 2026 13:00:50 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: sGwGvjLM2NIjJ4K+l5OIxdfNuekHSLrURDFnFVCgVvI=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:de:0a:d7:dd:7e:74:ed:c0:83:86:94:f5:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jun 29 13:00:50 2026 GMT
Not After : Jun 30 13:00:50 2026 GMT
Subject: CN=e1fa3b177ddf4aa0b3a1e43b432fb0a9ad37b73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:26:9b:fa:f4:91:cc:fe:9e:bd:b0:d4:eb:
d6:a5:bc:05:a0:66:ae:62:a9:d4:76:b1:fe:13:94:
ef:a8:ca:d3:22:28:63:1f:16:95:b7:b7:5f:45:56:
1c:df:27:fa:a9:27:3b:fd:54:5c:ff:87:ab:c5:f8:
c4:63:54:d4:ac:cd:44:9b:09:4a:42:08:9e:f4:7a:
9a:bd:47:32:9a:ba:ce:39:be:51:90:97:8c:43:f0:
75:ba:c8:33:26:59:97:80:9a:71:45:7a:25:aa:60:
6b:11:1f:b8:87:7c:42:12:4d:fd:72:2b:78:6b:7e:
0e:22:ab:02:db:9b:54:62:f5:c4:2e:a8:3a:ce:09:
60:d1:46:a9:8c:02:cf:17:ed:60:1d:d0:e9:f8:7d:
87:3a:61:bd:18:61:8e:2d:44:27:bd:ac:e8:59:98:
e6:d1:79:75:69:5f:7d:55:96:75:4c:84:68:40:fe:
f8:42:f0:95:3c:8a:09:c5:06:d8:cc:9d:2c:12:17:
4c:6e:04:93:9f:62:d0:2c:b6:f2:35:d3:b0:e0:ee:
1c:21:c8:24:73:c7:a9:9f:24:e9:98:87:97:f7:f8:
f6:23:56:ed:11:65:6f:c5:56:a5:c8:4f:c6:10:ca:
9b:7b:19:2b:d0:53:d5:b1:92:e4:65:85:41:b6:65:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:3B:17:7D:DF:4A:A0:B3:A1:E4:3B:43:2F:B0:A9:AD:37:B7:3D
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:c7:99:4f:c2:34:3c:39:52:a6:14:7f:28:f1:ad:de:0a:
af:50:31:4a:c7:0a:6c:8d:e4:04:24:f1:f3:d9:8d:af:27:d5:
a3:ca:2f:92:05:08:41:04:39:da:5b:1c:15:2f:8d:92:6f:bd:
50:57:fd:ca:7f:f6:62:2a:72:19:85:1a:bd:8a:31:76:07:c9:
a3:3d:27:f7:bb:68:01:3d:67:22:01:dc:95:c2:86:54:90:c3:
e4:7f:28:a6:c0:31:61:be:7b:d0:c1:73:96:f1:68:46:a7:e9:
ed:af:a1:21:a5:08:24:43:ef:56:83:22:b6:8a:e1:94:98:94:
24:3c:76:bb:db:b9:f9:76:9a:78:9e:56:67:09:80:5b:94:49:
e5:96:a8:9a:ba:1a:ce:41:f9:52:95:8d:74:c9:46:d5:26:b1:
5f:a8:06:f4:7f:11:e7:73:91:c8:53:23:dd:4f:47:be:8e:7f:
28:7a:94:42:76:ea:c3:22:4b:d1:73:3f:15:39:88:6a:c8:5d:
2f:3d:65:ce:dc:bc:8c:6d:e5:dd:34:da:f4:e8:da:ea:9b:d0:
5a:19:bb:50:06:c6:0d:24:d6:e9:1e:71:d5:f8:ff:3c:b7:5b:
06:80:09:f0:31:67:24:ae:bf:b8:9a:07:88:54:0a:4e:12:8c:
ff:72:36:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Td94K191+dO3Ag4aU9WytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjYwNjI5MTMwMDUwWhcNMjYwNjMwMTMwMDUwWjAzMTEwLwYDVQQD
EyhlMWZhM2IxNzdkZGY0YWEwYjNhMWU0M2I0MzJmYjBhOWFkMzdiNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ugmm/r0kcz+nr2w1OvWpbwFoGau
YqnUdrH+E5TvqMrTIihjHxaVt7dfRVYc3yf6qSc7/VRc/4erxfjEY1TUrM1EmwlK
Qgie9HqavUcymrrOOb5RkJeMQ/B1usgzJlmXgJpxRXolqmBrER+4h3xCEk39cit4
a34OIqsC25tUYvXELqg6zglg0UapjALPF+1gHdDp+H2HOmG9GGGOLUQnvazoWZjm
0Xl1aV99VZZ1TIRoQP74QvCVPIoJxQbYzJ0sEhdMbgSTn2LQLLbyNdOw4O4cIcgk
c8epnyTpmIeX9/j2I1btEWVvxValyE/GEMqbexkr0FPVsZLkZYVBtmXwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH6Oxd930qgs6HkO0MvsKmtN7c9MB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDrHmU/C
NDw5UqYUfyjxrd4Kr1AxSscKbI3kBCTx89mNryfVo8ovkgUIQQQ52lscFS+Nkm+9
UFf9yn/2YipyGYUavYoxdgfJoz0n97toAT1nIgHclcKGVJDD5H8opsAxYb570MFz
lvFoRqfp7a+hIaUIJEPvVoMitorhlJiUJDx2u9u5+XaaeJ5WZwmAW5RJ5Zaomroa
zkH5UpWNdMlG1SaxX6gG9H8R53ORyFMj3U9Hvo5/KHqUQnbqwyJL0XM/FTmIashd
Lz1lzty8jG3l3TTa9Oja6pvQWhm7UAbGDSTW6R5x1fj/PLdbBoAJ8DFnJK6/uJoH
iFQKThKM/3I2dg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:47:12 2026 by rpki-client