Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: 3P5bNGYz3s/7OL66RWyMVyF9xa1xJpXzMvvH9MIcwMg=
Subject key identifier: 8A:5E:3A:D9:23:0D:04:39:03:EA:B0:B7:69:76:31:B0:9F:9A:99:5F
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019FA2CDE8E226A21F1A7A2EC2457B0A9682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 162E
Signing time: Mon 27 Jul 2026 09:00:31 +0000
Manifest this update: Mon 27 Jul 2026 09:00:31 +0000
Manifest next update: Tue 28 Jul 2026 09:00:31 +0000
Files and hashes: 1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: aLIBbZg3s2CVZfyDnI18bpN001uzzciuKDxOf3SBOZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:e8:e2:26:a2:1f:1a:7a:2e:c2:45:7b:0a:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Jul 27 09:00:31 2026 GMT
Not After : Jul 28 09:00:31 2026 GMT
Subject: CN=8a5e3ad9230d043903eab0b7697631b09f9a995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:55:a1:3c:f4:17:64:d9:9e:ba:e7:d0:7c:
84:a8:51:83:8c:c6:62:29:a3:f9:7b:66:88:92:fc:
ed:da:fb:f2:b3:3e:82:27:75:e8:74:59:b4:de:9a:
08:cb:38:07:63:24:09:80:55:f3:01:4e:99:f7:23:
f0:28:b6:03:86:d8:8f:59:58:cf:0e:2f:7e:2d:f3:
5b:46:0d:fa:1e:74:d7:fc:43:3f:96:46:5f:2d:c3:
54:80:12:6f:98:a1:62:60:f3:ef:36:38:4c:ae:f9:
5e:7c:74:cb:fd:94:65:12:30:6c:e0:34:34:6d:d1:
f4:90:af:35:c0:46:a5:20:1a:0b:7a:bd:35:df:bc:
b3:a3:c6:dd:19:5e:b1:05:8e:63:ed:25:06:e0:b3:
31:03:11:c4:cb:6b:50:36:e2:36:88:42:26:43:52:
62:1e:6c:2d:d9:33:15:90:15:ad:25:0c:15:26:67:
e9:21:62:3f:5c:82:2e:ac:fa:72:c6:3f:3b:11:f0:
4a:b3:0c:86:be:2b:fa:b9:af:96:9a:11:f0:b5:b9:
3b:3a:44:57:a6:ca:0c:53:4f:d6:3a:c6:76:bd:6d:
19:9e:6e:33:34:c7:3c:e8:53:8f:52:9b:4b:cc:68:
3f:f1:fe:54:b5:df:ec:0d:73:3a:ba:84:13:b5:c9:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:3A:D9:23:0D:04:39:03:EA:B0:B7:69:76:31:B0:9F:9A:99:5F
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:27:ac:db:a1:6c:ad:ed:29:b5:67:10:cf:bf:11:d8:a3:22:
0c:77:01:59:3c:2c:25:e2:6c:d3:ed:64:80:8e:d1:66:36:09:
f7:98:ee:b7:cd:28:0f:67:88:2f:17:18:24:9c:cf:ed:1e:1e:
f6:14:ba:fe:41:34:46:90:45:93:b0:1e:90:9d:dc:12:24:7e:
53:b4:29:31:ad:3c:3c:ab:80:b8:e1:6e:24:d8:bd:fe:de:24:
3c:40:7c:64:72:c4:f1:23:aa:fb:e6:e5:47:92:d1:b5:7d:e7:
75:db:dc:05:18:b2:38:4a:c8:f0:ac:6d:b5:2a:19:38:39:05:
3c:85:18:c6:ec:62:b7:d8:26:3b:a7:65:5c:47:71:54:6f:4e:
a6:a3:5f:aa:01:11:4a:b9:ad:f2:ef:57:64:c5:b0:c7:50:03:
5d:ad:3d:1f:52:f3:09:aa:be:b5:bb:45:4f:04:c7:32:ae:8f:
86:11:b7:34:ab:e4:be:d6:99:92:8a:e5:f3:74:88:b6:de:ac:
c7:f0:cd:e2:52:e4:3b:18:37:0f:60:90:a8:20:6a:fb:f4:17:
05:05:98:0b:42:94:00:bc:df:8a:b7:0f:b5:9e:12:31:d5:58:
31:82:b9:ed:26:ec:97:9a:38:9a:f7:69:54:0e:05:aa:8f:a0:
f3:04:26:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izejiJqIfGnouwkV7CpaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2
Mzk4OTgwHhcNMjYwNzI3MDkwMDMxWhcNMjYwNzI4MDkwMDMxWjAzMTEwLwYDVQQD
Eyg4YTVlM2FkOTIzMGQwNDM5MDNlYWIwYjc2OTc2MzFiMDlmOWE5OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm21VoTz0F2TZnrrn0HyEqFGDjMZi
KaP5e2aIkvzt2vvysz6CJ3XodFm03poIyzgHYyQJgFXzAU6Z9yPwKLYDhtiPWVjP
Di9+LfNbRg36HnTX/EM/lkZfLcNUgBJvmKFiYPPvNjhMrvlefHTL/ZRlEjBs4DQ0
bdH0kK81wEalIBoLer0137yzo8bdGV6xBY5j7SUG4LMxAxHEy2tQNuI2iEImQ1Ji
Hmwt2TMVkBWtJQwVJmfpIWI/XIIurPpyxj87EfBKswyGviv6ua+WmhHwtbk7OkRX
psoMU0/WOsZ2vW0Znm4zNMc86FOPUptLzGg/8f5Utd/sDXM6uoQTtcnX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpeOtkjDQQ5A+qwt2l2MbCfmplfMB8GA1UdIwQY
MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt
NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl
LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyes26Fs
re0ptWcQz78R2KMiDHcBWTwsJeJs0+1kgI7RZjYJ95jut80oD2eILxcYJJzP7R4e
9hS6/kE0RpBFk7AekJ3cEiR+U7QpMa08PKuAuOFuJNi9/t4kPEB8ZHLE8SOq++bl
R5LRtX3nddvcBRiyOErI8KxttSoZODkFPIUYxuxit9gmO6dlXEdxVG9OpqNfqgER
Srmt8u9XZMWwx1ADXa09H1LzCaq+tbtFTwTHMq6PhhG3NKvkvtaZkorl83SItt6s
x/DN4lLkOxg3D2CQqCBq+/QXBQWYC0KUALzfircPtZ4SMdVYMYK57Sbsl5o4mvdp
VA4Fqo+g8wQmmA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:10:45 2026 by rpki-client