Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: q7VD6FfdrkPYQevdO7VFxIKYywXHhWedO/Whih/huzM=
Subject key identifier: 38:1D:3E:46:56:CA:31:B9:E1:38:98:8C:AC:A4:FE:6D:A5:BF:05:D3
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019EDD2EE57A103525594A2E9391558C14FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 08FF
Signing time: Fri 19 Jun 2026 00:01:38 +0000
Manifest this update: Fri 19 Jun 2026 00:01:38 +0000
Manifest next update: Sat 20 Jun 2026 00:01:38 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: GcVQu89eA+wGIwEb/a2KfLB+dWrGmDCkpI4N2CDwO0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:2e:e5:7a:10:35:25:59:4a:2e:93:91:55:8c:14:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Jun 19 00:01:38 2026 GMT
Not After : Jun 20 00:01:38 2026 GMT
Subject: CN=381d3e4656ca31b9e138988caca4fe6da5bf05d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:74:63:6d:00:3a:98:16:b0:75:fb:55:1b:
50:45:d2:e2:d9:a0:7a:c0:52:b9:a3:90:40:d9:2b:
3b:45:cc:d3:94:1b:0d:f4:24:f0:a2:de:b0:5b:2e:
2b:df:f3:75:8e:5f:d9:a6:d4:52:df:0a:01:e7:3f:
0f:70:e6:cf:11:f5:c7:31:ba:ab:0f:b7:11:59:94:
06:d9:cd:a8:5f:92:d0:e6:22:ad:24:d2:a9:0b:8b:
c4:ef:83:f3:2f:5a:33:c7:8f:14:4f:b8:61:49:e9:
b0:03:e4:c0:c9:e5:42:f9:68:f4:b7:09:d0:2c:f7:
b5:4e:3f:25:a4:37:7d:a1:0f:72:15:d6:f7:b4:59:
ce:88:7f:d3:43:90:ee:02:9a:ef:53:f9:70:dc:3a:
18:43:27:5d:34:a3:6d:0d:a5:9c:ee:d9:f8:b3:b6:
2d:ac:7a:a5:04:28:98:c2:1f:f7:2e:5e:ca:99:87:
f5:84:a4:f7:7c:b7:97:72:76:b0:86:49:bd:39:75:
e7:92:b0:93:3c:4c:6c:74:ae:39:e4:71:e8:7e:7f:
ea:96:13:a3:60:a1:7f:20:62:66:7b:5e:c9:41:ca:
3a:eb:5b:6d:59:2b:18:73:88:dc:cd:f5:04:04:0f:
06:72:05:00:3f:5f:57:39:9c:8c:03:09:36:4e:21:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:3E:46:56:CA:31:B9:E1:38:98:8C:AC:A4:FE:6D:A5:BF:05:D3
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:68:c4:15:04:fc:c0:7d:47:0a:03:b7:da:55:7e:0a:b4:03:
2c:8b:40:d0:2e:50:07:13:a8:55:e2:b4:f5:5e:4a:55:9c:6f:
86:10:df:d8:27:9a:11:04:76:bd:db:12:7b:43:50:2f:11:7d:
5e:13:1c:2b:a6:e9:aa:b7:77:9b:73:41:02:26:07:de:04:2a:
56:27:e5:ac:9d:c4:1c:64:69:ba:0a:64:0e:86:ef:44:04:ce:
ce:e6:7e:f1:40:87:e6:69:d6:90:8c:cd:6b:67:d9:34:51:7e:
08:12:83:4c:40:47:3f:2d:8d:0b:aa:5a:f8:46:7b:e5:71:f0:
98:4f:46:54:8b:cf:e9:53:fc:b1:a6:f7:46:ba:c5:be:82:5c:
83:fa:f1:5d:17:dd:d1:63:fc:b2:84:61:96:06:75:35:52:26:
ad:f3:a5:31:ae:59:f3:bb:a3:49:29:73:2e:30:ca:31:cd:71:
b7:29:fc:40:d3:e7:ad:25:37:86:65:2d:6b:b6:7f:a5:01:b3:
7e:dd:7f:fd:13:4e:bf:68:46:db:d9:1c:61:74:37:94:5f:73:
b7:c7:b8:0d:4e:b4:75:a7:bb:12:c0:43:bb:13:e9:b7:c3:60:
0d:ca:24:c2:e8:ed:d8:1d:d6:f1:07:78:80:b2:cf:b7:22:00:
ba:68:9a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7dLuV6EDUlWUouk5FVjBT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz
Y2QzZTAwHhcNMjYwNjE5MDAwMTM4WhcNMjYwNjIwMDAwMTM4WjAzMTEwLwYDVQQD
EygzODFkM2U0NjU2Y2EzMWI5ZTEzODk4OGNhY2E0ZmU2ZGE1YmYwNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XB0Y20AOpgWsHX7VRtQRdLi2aB6
wFK5o5BA2Ss7RczTlBsN9CTwot6wWy4r3/N1jl/ZptRS3woB5z8PcObPEfXHMbqr
D7cRWZQG2c2oX5LQ5iKtJNKpC4vE74PzL1ozx48UT7hhSemwA+TAyeVC+Wj0twnQ
LPe1Tj8lpDd9oQ9yFdb3tFnOiH/TQ5DuAprvU/lw3DoYQyddNKNtDaWc7tn4s7Yt
rHqlBCiYwh/3Ll7KmYf1hKT3fLeXcnawhkm9OXXnkrCTPExsdK455HHofn/qlhOj
YKF/IGJme17JQco661ttWSsYc4jczfUEBA8GcgUAP19XOZyMAwk2TiGMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgdPkZWyjG54TiYjKyk/m2lvwXTMB8GA1UdIwQY
MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt
MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw
LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmjEFQT8
wH1HCgO32lV+CrQDLItA0C5QBxOoVeK09V5KVZxvhhDf2CeaEQR2vdsSe0NQLxF9
XhMcK6bpqrd3m3NBAiYH3gQqViflrJ3EHGRpugpkDobvRATOzuZ+8UCH5mnWkIzN
a2fZNFF+CBKDTEBHPy2NC6pa+EZ75XHwmE9GVIvP6VP8sab3RrrFvoJcg/rxXRfd
0WP8soRhlgZ1NVImrfOlMa5Z87ujSSlzLjDKMc1xtyn8QNPnrSU3hmUta7Z/pQGz
ft1//RNOv2hG29kcYXQ3lF9zt8e4DU60dae7EsBDuxPpt8NgDcokwujt2B3W8Qd4
gLLPtyIAumiarg==
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:36:01 2026 by rpki-client