Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: kI+cnyYf0a4U0iCxuFovq22xp1qVTp7CoV7itmPzavA=
Subject key identifier: C2:B4:C1:35:29:0E:0E:90:F5:01:7F:A2:36:DB:94:80:49:FE:BE:E2
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019EB7A097CDD5858812DFDD7ABD9ECC78F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 149A
Signing time: Thu 11 Jun 2026 17:00:15 +0000
Manifest this update: Thu 11 Jun 2026 17:00:15 +0000
Manifest next update: Fri 12 Jun 2026 17:00:15 +0000
Files and hashes: 1: hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa (hash: /1Qaua2qcuy21kP73vJzs1KKO/Ht1pr5AntmjkyRFoc=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: NNy8ZpRWNuUmpkMfCYZFBJ+fZsytITZkG0bfgFOpJQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:97:cd:d5:85:88:12:df:dd:7a:bd:9e:cc:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Jun 11 17:00:15 2026 GMT
Not After : Jun 12 17:00:15 2026 GMT
Subject: CN=c2b4c135290e0e90f5017fa236db948049febee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:49:32:f0:11:71:f4:df:be:85:3b:d0:45:
b2:e3:21:60:fd:f3:d5:2a:fc:6d:b9:e9:e9:de:83:
8c:9e:1c:ad:cf:3a:bd:d3:f2:ac:dd:86:1e:e8:23:
3e:f9:a2:58:f2:52:77:d9:22:15:f4:c5:58:a2:e4:
0a:a6:d8:8a:3a:a6:a7:69:18:60:4a:cb:00:69:d2:
87:27:bc:7e:5b:bb:81:81:41:d7:34:40:cb:66:b5:
97:8d:8f:5b:db:85:e1:97:f8:b4:1f:27:f8:07:7c:
d9:6b:09:f3:5a:10:1e:e2:77:0c:ba:c3:32:6a:29:
f2:6e:c8:ac:a1:2a:6f:9f:e6:71:a9:1b:64:3e:ba:
00:59:c9:cc:5b:c5:a0:28:a6:eb:6b:b6:0e:01:5b:
c0:ff:fa:11:ec:9e:76:f6:37:a5:17:7c:7e:c4:d8:
a1:fa:4a:a7:25:b0:d6:b9:d4:8d:ff:d1:a1:14:85:
98:eb:a7:da:76:8e:ed:d3:d0:97:fe:7a:2a:85:e3:
7e:e4:e6:dd:44:93:ec:2d:fb:37:4f:26:39:a1:c2:
44:a6:5a:9d:e0:a4:e1:de:20:42:ca:fb:0d:0f:a7:
c0:67:b8:c2:9c:d3:20:07:b7:cc:f6:82:b6:af:7f:
8b:3a:c9:76:4f:28:87:a3:86:04:4b:fb:3d:3a:80:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:C1:35:29:0E:0E:90:F5:01:7F:A2:36:DB:94:80:49:FE:BE:E2
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:2c:e7:5e:66:28:0d:d0:cd:5d:dc:2b:2a:ea:ba:eb:bc:
2b:c0:ad:1e:2b:a2:cd:47:43:81:37:3d:f2:8a:1a:de:9b:f9:
7a:a7:a9:05:dd:a7:1d:0d:d5:d4:5e:1d:71:e6:d2:a2:d6:9c:
08:3d:a6:32:d6:d1:b0:a6:ac:3e:13:6b:10:8e:77:d1:c8:b1:
fa:5c:66:69:89:a5:6c:4f:51:79:a6:d2:37:7e:18:e0:ee:57:
f1:25:43:4a:f2:ab:28:e3:d6:10:f5:d4:8d:20:73:23:b6:fc:
c7:d8:4c:94:fd:b0:39:81:55:6a:e8:7f:e5:65:92:ab:91:33:
85:10:fa:c3:0b:0a:fc:22:a2:fc:67:b8:d0:62:30:8b:2f:a5:
23:c9:31:23:15:bb:7b:72:f5:4d:39:d7:a9:73:05:2c:e4:59:
52:d5:7a:1e:3b:66:26:59:2c:2e:cb:bd:03:29:a0:26:96:da:
e2:8f:2e:22:12:10:ee:0c:c5:79:16:5c:e4:31:65:2c:5b:88:
d5:14:f5:be:d1:77:b4:2f:3c:1b:2b:f0:a2:c0:b7:7c:b5:82:
a9:50:fd:3b:87:24:db:19:d9:09:aa:6f:95:f5:6d:b6:d6:f6:
1b:79:6d:f3:36:cd:49:09:bc:c4:fc:ce:c5:e6:8d:d2:34:81:
2a:0b:82:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oJfN1YWIEt/der2ezHjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy
ZjRjMjkwHhcNMjYwNjExMTcwMDE1WhcNMjYwNjEyMTcwMDE1WjAzMTEwLwYDVQQD
EyhjMmI0YzEzNTI5MGUwZTkwZjUwMTdmYTIzNmRiOTQ4MDQ5ZmViZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAxJMvARcfTfvoU70EWy4yFg/fPV
Kvxtuenp3oOMnhytzzq90/Ks3YYe6CM++aJY8lJ32SIV9MVYouQKptiKOqanaRhg
SssAadKHJ7x+W7uBgUHXNEDLZrWXjY9b24Xhl/i0Hyf4B3zZawnzWhAe4ncMusMy
ainybsisoSpvn+ZxqRtkProAWcnMW8WgKKbra7YOAVvA//oR7J529jelF3x+xNih
+kqnJbDWudSN/9GhFIWY66fado7t09CX/noqheN+5ObdRJPsLfs3TyY5ocJEplqd
4KTh3iBCyvsND6fAZ7jCnNMgB7fM9oK2r3+LOsl2TyiHo4YES/s9OoDAzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK0wTUpDg6Q9QF/ojbblIBJ/r7iMB8GA1UdIwQY
MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt
ZWVjMTRjOTcxYzRkLzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk
LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9Ms515m
KA3QzV3cKyrquuu8K8CtHiuizUdDgTc98ooa3pv5eqepBd2nHQ3V1F4dcebSotac
CD2mMtbRsKasPhNrEI530cix+lxmaYmlbE9ReabSN34Y4O5X8SVDSvKrKOPWEPXU
jSBzI7b8x9hMlP2wOYFVauh/5WWSq5EzhRD6wwsK/CKi/Ge40GIwiy+lI8kxIxW7
e3L1TTnXqXMFLORZUtV6HjtmJlksLsu9AymgJpba4o8uIhIQ7gzFeRZc5DFlLFuI
1RT1vtF3tC88GyvwosC3fLWCqVD9O4ck2xnZCapvlfVtttb2G3lt8zbNSQm8xPzO
xeaN0jSBKguCiQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:16:22 2026 by rpki-client