Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: qXF4sVL7kBlUgW5F9oWpDVIa2MG6X4OHc+etelDeyQw=
Subject key identifier: 42:8D:7C:24:99:C6:CD:B6:D6:1B:4A:41:AF:72:95:0E:40:AB:B4:1A
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019EBA342C0D3C77D120C9A2E53000F0BD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0324
Signing time: Fri 12 Jun 2026 05:00:41 +0000
Manifest this update: Fri 12 Jun 2026 05:00:41 +0000
Manifest next update: Sat 13 Jun 2026 05:00:41 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: tsYsiXV5r221Qu4Iy6wY8vijffUXdaGKlZF5TthmkCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:2c:0d:3c:77:d1:20:c9:a2:e5:30:00:f0:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Jun 12 05:00:41 2026 GMT
Not After : Jun 13 05:00:41 2026 GMT
Subject: CN=428d7c2499c6cdb6d61b4a41af72950e40abb41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:b7:76:44:0a:88:0b:f9:1d:bb:e5:5b:65:
a6:79:22:8c:82:73:14:86:77:a5:90:6c:dc:2a:16:
b5:db:c7:9e:14:1b:32:f9:c0:a6:50:c5:0a:5d:52:
e5:15:6f:31:33:ca:ed:12:b3:d1:1c:3a:9e:f4:36:
7a:2d:d0:6a:c1:4c:d9:33:86:cf:6c:9a:8f:85:a1:
76:93:84:e6:99:b8:2b:9b:eb:14:66:6d:cf:c5:a8:
72:54:a4:f9:7b:ef:13:55:f4:71:c3:bb:ac:27:3c:
cf:36:c7:07:f2:3a:1e:16:66:9d:a6:a2:5b:fd:22:
21:51:df:e9:2e:d8:8a:ce:b5:01:b3:26:b6:a3:a1:
49:06:b3:4a:ef:93:5d:f1:0c:2c:69:9c:e7:b8:ce:
33:28:20:6c:fa:9f:9f:33:0c:fe:cc:6c:48:a3:8d:
c2:51:8c:26:b2:b7:86:4e:ca:5c:5e:39:74:24:59:
8c:34:3a:ca:e2:a3:f6:f8:23:82:ec:ed:1f:ff:7a:
89:f8:f9:bc:99:13:7d:4b:de:2f:74:33:ca:cf:34:
f7:27:d1:fb:8f:78:26:c8:63:6b:45:88:94:54:9d:
1f:2b:97:37:98:67:29:aa:11:c9:e8:9d:5a:2f:0e:
bf:df:6f:a6:2b:cb:7f:90:e0:e8:41:55:6f:af:16:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:7C:24:99:C6:CD:B6:D6:1B:4A:41:AF:72:95:0E:40:AB:B4:1A
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ed:c9:fe:03:f5:28:2d:9a:dd:5f:c6:b2:fc:43:42:26:6d:
b1:77:fa:71:10:71:a9:18:6f:99:ad:b7:cd:00:de:a6:5b:f5:
fa:21:85:1e:d2:fa:33:8c:ff:9b:e0:28:46:15:a2:6c:93:df:
d4:c0:c4:be:bb:2a:f7:6c:c5:d0:cb:02:37:eb:d6:18:30:01:
f7:04:07:e8:5c:f3:7b:d5:28:44:1b:a7:39:5c:f5:97:13:00:
ae:3f:d2:b4:ef:61:94:0a:5d:ee:c1:24:2a:fe:63:8c:ba:a6:
ca:d3:9b:49:54:b7:71:78:d9:3d:b2:31:3d:c1:b3:ad:73:64:
51:69:21:19:30:0f:38:67:fb:24:b0:df:97:a2:6e:c6:57:1d:
af:98:db:1c:f7:c9:b2:f5:d9:5e:91:33:78:bf:3e:95:6e:ec:
0c:8b:80:64:fd:f2:3b:f1:53:77:83:2c:33:a1:3f:4e:e4:20:
ec:d0:83:47:f5:b4:3c:dc:b1:8c:80:a9:23:1c:6c:d7:06:25:
dc:b3:0d:93:18:ad:cf:9c:84:96:41:40:ca:01:2e:9e:66:7c:
92:5c:d1:79:e1:63:fd:c2:6d:08:a1:b9:7c:c3:25:25:48:49:
cc:70:3b:c6:71:f5:3b:0d:74:cb:76:35:fe:10:cb:ab:19:96:
83:bc:23:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NCwNPHfRIMmi5TAA8L1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx
YzU5MTMwHhcNMjYwNjEyMDUwMDQxWhcNMjYwNjEzMDUwMDQxWjAzMTEwLwYDVQQD
Eyg0MjhkN2MyNDk5YzZjZGI2ZDYxYjRhNDFhZjcyOTUwZTQwYWJiNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2y3dkQKiAv5HbvlW2WmeSKMgnMU
hnelkGzcKha128eeFBsy+cCmUMUKXVLlFW8xM8rtErPRHDqe9DZ6LdBqwUzZM4bP
bJqPhaF2k4Tmmbgrm+sUZm3PxahyVKT5e+8TVfRxw7usJzzPNscH8joeFmadpqJb
/SIhUd/pLtiKzrUBsya2o6FJBrNK75Nd8QwsaZznuM4zKCBs+p+fMwz+zGxIo43C
UYwmsreGTspcXjl0JFmMNDrK4qP2+COC7O0f/3qJ+Pm8mRN9S94vdDPKzzT3J9H7
j3gmyGNrRYiUVJ0fK5c3mGcpqhHJ6J1aLw6/32+mK8t/kODoQVVvrxZELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKNfCSZxs221htKQa9ylQ5Aq7QaMB8GA1UdIwQY
MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt
MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0
LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO3J/gP1
KC2a3V/GsvxDQiZtsXf6cRBxqRhvma23zQDeplv1+iGFHtL6M4z/m+AoRhWibJPf
1MDEvrsq92zF0MsCN+vWGDAB9wQH6Fzze9UoRBunOVz1lxMArj/StO9hlApd7sEk
Kv5jjLqmytObSVS3cXjZPbIxPcGzrXNkUWkhGTAPOGf7JLDfl6Juxlcdr5jbHPfJ
svXZXpEzeL8+lW7sDIuAZP3yO/FTd4MsM6E/TuQg7NCDR/W0PNyxjICpIxxs1wYl
3LMNkxitz5yElkFAygEunmZ8klzReeFj/cJtCKG5fMMlJUhJzHA7xnH1Ow10y3Y1
/hDLqxmWg7wjVQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:47:39 2026 by rpki-client