Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: RmvwlRc/KUJRi4UyQ4DhGy1ZBsw0XjcNxMFaezVcftg=
Subject key identifier: 2D:3B:A4:04:0E:D3:A3:08:94:E4:48:A6:09:93:55:75:4A:37:0E:01
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019FA1F1FD40FFF0A1722B290BE5DE771335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 1592
Signing time: Mon 27 Jul 2026 05:00:18 +0000
Manifest this update: Mon 27 Jul 2026 05:00:18 +0000
Manifest next update: Tue 28 Jul 2026 05:00:18 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: eCLBO9Pt261hdHRAlHg8xpZdsPoC3roIToc0pukN1+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f1:fd:40:ff:f0:a1:72:2b:29:0b:e5:de:77:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jul 27 05:00:18 2026 GMT
Not After : Jul 28 05:00:18 2026 GMT
Subject: CN=2d3ba4040ed3a30894e448a6099355754a370e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:93:81:ca:2c:7a:eb:f8:e4:8f:08:2a:6f:
82:34:6e:d5:e4:1a:4e:4f:4b:8f:54:ee:3c:a6:3c:
e3:e9:cc:d4:5a:62:05:02:2b:88:84:2a:59:f9:32:
af:27:dc:c8:02:34:53:a3:bf:97:14:57:a3:f5:d6:
1a:56:78:b2:21:5f:82:29:cd:19:72:e8:fc:fb:59:
79:ce:30:aa:13:9b:f8:e4:c5:10:b1:fe:fa:e8:31:
b4:a7:b5:b9:35:21:c4:b1:78:57:e9:6d:2d:4b:6f:
a6:c8:f0:6c:a0:64:c9:47:57:81:31:ee:52:1a:ef:
8e:e4:01:bf:2c:53:37:51:bc:d3:e1:93:2e:79:6f:
59:c5:80:df:c4:ae:40:8b:bf:a3:ad:12:64:e8:8c:
11:4a:51:7c:00:56:7d:b8:91:bd:d3:83:38:60:6b:
5f:61:7b:4e:2d:2e:09:03:ff:aa:fb:c7:1c:8b:f7:
fc:e6:6a:ab:07:00:30:31:f2:e2:cc:6f:0d:72:6a:
fc:d5:a8:49:b6:78:8d:57:8e:fa:dd:32:42:16:45:
51:cd:6b:d0:18:58:c1:a5:23:6f:64:7e:1e:d1:3a:
d6:7a:9c:09:48:c0:75:b8:a0:7b:82:04:23:80:bf:
22:30:4a:28:d3:15:8d:20:de:92:21:eb:9a:4f:56:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:A4:04:0E:D3:A3:08:94:E4:48:A6:09:93:55:75:4A:37:0E:01
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:6e:44:a4:74:d5:8b:05:a1:c0:ef:57:85:fd:66:98:11:
05:d0:c9:7e:7f:de:da:fd:fc:a3:93:d3:55:f3:7c:5d:01:c7:
65:51:24:71:07:c4:84:8f:a1:bc:16:10:40:0d:c2:e8:cd:50:
90:32:69:99:14:54:1d:e3:3d:0b:6a:73:39:69:8d:f0:b6:2a:
7c:8d:62:69:18:d2:40:29:cb:12:10:b0:02:7f:d4:96:9d:b9:
8a:0c:6a:ea:cd:79:a8:c6:fd:aa:bf:aa:39:28:3f:63:93:3a:
a3:52:af:05:e2:1d:fc:71:1f:a2:db:8e:66:76:c8:4c:3d:f3:
55:7f:c2:ee:26:75:e6:c5:1b:78:63:a3:71:ae:fe:8c:a8:50:
ea:07:e4:dd:d4:58:42:cf:6e:5f:19:ab:9c:15:4a:58:ee:0b:
d9:0c:f7:0f:5a:0b:55:e7:19:95:00:ef:9e:2e:1e:30:b1:b3:
d1:78:ef:5b:f5:a2:c8:cc:b7:87:fa:26:99:b2:b5:d7:18:2a:
6c:d4:b6:1b:f1:29:e1:a8:26:40:14:96:de:42:7c:fe:54:bc:
38:eb:09:b5:bc:33:5d:33:00:4c:ce:af:80:19:ed:e6:d7:9e:
3b:8e:fe:c1:3c:15:8b:b8:e1:f6:ff:bf:78:a1:af:94:7c:d3:
2a:14:42:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8f1A//ChcispC+XedxM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjYwNzI3MDUwMDE4WhcNMjYwNzI4MDUwMDE4WjAzMTEwLwYDVQQD
EygyZDNiYTQwNDBlZDNhMzA4OTRlNDQ4YTYwOTkzNTU3NTRhMzcwZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeTgcoseuv45I8IKm+CNG7V5BpO
T0uPVO48pjzj6czUWmIFAiuIhCpZ+TKvJ9zIAjRTo7+XFFej9dYaVniyIV+CKc0Z
cuj8+1l5zjCqE5v45MUQsf766DG0p7W5NSHEsXhX6W0tS2+myPBsoGTJR1eBMe5S
Gu+O5AG/LFM3UbzT4ZMueW9ZxYDfxK5Ai7+jrRJk6IwRSlF8AFZ9uJG904M4YGtf
YXtOLS4JA/+q+8cci/f85mqrBwAwMfLizG8Ncmr81ahJtniNV4763TJCFkVRzWvQ
GFjBpSNvZH4e0TrWepwJSMB1uKB7ggQjgL8iMEoo0xWNIN6SIeuaT1ZQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC07pAQO06MIlORIpgmTVXVKNw4BMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn5uRKR0
1YsFocDvV4X9ZpgRBdDJfn/e2v38o5PTVfN8XQHHZVEkcQfEhI+hvBYQQA3C6M1Q
kDJpmRRUHeM9C2pzOWmN8LYqfI1iaRjSQCnLEhCwAn/Ulp25igxq6s15qMb9qr+q
OSg/Y5M6o1KvBeId/HEfotuOZnbITD3zVX/C7iZ15sUbeGOjca7+jKhQ6gfk3dRY
Qs9uXxmrnBVKWO4L2Qz3D1oLVecZlQDvni4eMLGz0XjvW/WiyMy3h/ommbK11xgq
bNS2G/Ep4agmQBSW3kJ8/lS8OOsJtbwzXTMATM6vgBnt5teeO47+wTwVi7jh9v+/
eKGvlHzTKhRCWw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:10 2026 by rpki-client