
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: R1Kw00pzNci7ur1f2EZj/QY0tbQkAG03OILmBN7wFRo=
Subject key identifier: 95:4D:E0:05:1B:B0:CC:94:25:62:B5:5F:26:5B:64:D3:61:74:67:BC
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019F1AFB1324B8072A0D1092C172609FC275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 144D
Signing time: Wed 01 Jul 2026 00:01:29 +0000
Manifest this update: Wed 01 Jul 2026 00:01:29 +0000
Manifest next update: Thu 02 Jul 2026 00:01:29 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: hxoCWS1EVkoyAYLAQhRzVklVhkQ2GKfrtXNp/Hdmy/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fb:13:24:b8:07:2a:0d:10:92:c1:72:60:9f:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jul 1 00:01:29 2026 GMT
Not After : Jul 2 00:01:29 2026 GMT
Subject: CN=954de0051bb0cc942562b55f265b64d3617467bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:33:1b:6a:d8:e4:c9:b3:b6:8e:ad:fb:8b:
17:ca:34:b6:68:c6:cb:01:03:a5:5e:76:01:77:8f:
0a:23:c2:a4:40:12:70:66:f4:75:14:ef:2c:b6:22:
16:2a:c2:f7:a7:be:83:87:d0:a1:20:3a:e2:4b:12:
b8:51:f1:e5:60:c1:13:13:b7:00:23:56:66:d4:3e:
87:e0:84:72:e0:3b:a2:4a:b4:fe:31:90:64:53:d9:
46:e7:fd:3e:d2:4b:69:e7:82:89:50:c7:4a:f4:85:
f0:09:47:d7:4a:2a:2d:e4:62:f4:b6:0a:c0:5d:24:
8e:3c:9b:34:2c:0a:af:d2:d1:5a:54:cc:a6:66:35:
15:85:48:45:0b:a8:bc:7e:06:2d:1a:f8:11:82:77:
a8:79:b3:c7:d8:39:66:ba:1c:36:6b:4a:ae:2c:b2:
eb:8b:30:29:d5:45:a2:24:9e:b8:96:8c:20:ef:27:
fb:12:71:0f:61:98:e9:50:46:4c:bd:88:16:16:5d:
c3:89:8e:fb:72:9f:bb:f7:29:2a:67:ab:4e:2a:2b:
46:3c:e0:50:9b:b2:8c:28:e2:15:0b:b1:7f:91:39:
57:14:bd:2b:b7:e0:e2:4c:b1:f2:0f:c2:50:b1:44:
94:92:c3:ec:73:ce:5a:61:9d:fc:28:ff:29:df:25:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:E0:05:1B:B0:CC:94:25:62:B5:5F:26:5B:64:D3:61:74:67:BC
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:94:8d:ee:a6:19:5f:3b:29:67:86:21:3b:c7:e0:40:b0:
31:fe:01:d0:28:78:61:33:67:e4:6f:f1:fb:3f:b4:1c:25:ca:
91:78:1c:b6:3d:65:f3:67:b1:cb:83:d6:9c:ed:cd:78:a3:12:
32:d1:61:05:4c:cb:41:25:1d:50:7a:5f:e3:69:f9:29:35:86:
68:9f:f8:3f:da:db:ce:3c:eb:4d:dc:8f:42:51:3e:da:60:01:
d5:d8:4f:2e:ab:19:12:49:6f:a2:4d:e9:ce:bb:09:f0:08:13:
cf:c8:a2:45:88:db:20:6e:6d:f3:c2:e9:dc:4f:7f:05:ef:40:
d3:3b:2c:04:71:e6:6d:7b:97:82:02:6d:27:70:82:5c:ea:78:
c7:c0:92:91:4a:c1:cd:74:c1:21:58:08:85:0b:99:77:4b:d5:
99:ed:c9:c1:a5:3b:58:66:21:b6:4e:94:ad:5d:83:a2:ac:ca:
c7:2b:91:6f:e0:a1:33:f8:ae:c4:2b:93:9f:40:77:5b:35:dc:
87:7a:92:02:92:74:ab:83:3b:fe:75:8f:6f:b8:3a:f9:99:2a:
25:2b:8e:a9:2d:b8:d0:a2:a6:76:11:70:f2:98:f2:27:29:f0:
d6:57:21:71:8e:db:d0:f2:3a:57:78:a3:07:df:7e:90:48:f3:
94:65:88:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8a+xMkuAcqDRCSwXJgn8J1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3
MjA3NjIwHhcNMjYwNzAxMDAwMTI5WhcNMjYwNzAyMDAwMTI5WjAzMTEwLwYDVQQD
Eyg5NTRkZTAwNTFiYjBjYzk0MjU2MmI1NWYyNjViNjRkMzYxNzQ2N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM4zG2rY5Mmzto6t+4sXyjS2aMbL
AQOlXnYBd48KI8KkQBJwZvR1FO8stiIWKsL3p76Dh9ChIDriSxK4UfHlYMETE7cA
I1Zm1D6H4IRy4DuiSrT+MZBkU9lG5/0+0ktp54KJUMdK9IXwCUfXSiot5GL0tgrA
XSSOPJs0LAqv0tFaVMymZjUVhUhFC6i8fgYtGvgRgneoebPH2Dlmuhw2a0quLLLr
izAp1UWiJJ64lowg7yf7EnEPYZjpUEZMvYgWFl3DiY77cp+79ykqZ6tOKitGPOBQ
m7KMKOIVC7F/kTlXFL0rt+DiTLHyD8JQsUSUksPsc85aYZ38KP8p3yX3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVN4AUbsMyUJWK1XyZbZNNhdGe8MB8GA1UdIwQY
MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt
N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk
LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt6Uje6m
GV87KWeGITvH4ECwMf4B0Ch4YTNn5G/x+z+0HCXKkXgctj1l82exy4PWnO3NeKMS
MtFhBUzLQSUdUHpf42n5KTWGaJ/4P9rbzjzrTdyPQlE+2mAB1dhPLqsZEklvok3p
zrsJ8AgTz8iiRYjbIG5t88Lp3E9/Be9A0zssBHHmbXuXggJtJ3CCXOp4x8CSkUrB
zXTBIVgIhQuZd0vVme3JwaU7WGYhtk6UrV2DoqzKxyuRb+ChM/iuxCuTn0B3WzXc
h3qSApJ0q4M7/nWPb7g6+ZkqJSuOqS240KKmdhFw8pjyJynw1lchcY7b0PI6V3ij
B99+kEjzlGWIRA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:21:17 2026 by rpki-client