Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: RAy+70yV5Qqen/FqaKekTCMf3LQ+2pCWyr9Ie0w137M=
Subject key identifier: 5A:31:D3:E7:37:BD:DD:58:74:E9:E4:37:CA:0E:A4:6A:D5:0D:02:4D
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019F197A6FB09885A8C160BB86E9C15FF118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 08D7
Signing time: Tue 30 Jun 2026 17:01:21 +0000
Manifest this update: Tue 30 Jun 2026 17:01:21 +0000
Manifest next update: Wed 01 Jul 2026 17:01:21 +0000
Files and hashes: 1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: 03CE2W65NAPzo7GA0R+tZCbfFqoILeCtCIYegqJVSuU=)
3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:6f:b0:98:85:a8:c1:60:bb:86:e9:c1:5f:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jun 30 17:01:21 2026 GMT
Not After : Jul 1 17:01:21 2026 GMT
Subject: CN=5a31d3e737bddd5874e9e437ca0ea46ad50d024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:a1:05:9f:50:21:58:df:e5:c1:91:82:05:
e1:5b:4b:f8:b9:d8:6c:4e:f5:ee:da:45:67:3d:c5:
ea:fa:63:ca:cd:54:0d:70:53:23:52:2a:fe:5d:ed:
40:67:b3:20:23:1b:71:72:98:16:fb:88:ba:cc:5b:
c6:c7:24:87:12:9b:c8:9e:a9:6d:38:8c:a2:20:9a:
3a:4f:fe:d2:92:4a:41:72:9f:ea:5d:62:5d:e6:5d:
ea:b5:6e:8b:49:a7:f0:7d:ec:6f:e5:2b:27:dd:86:
47:12:c7:69:a3:81:2f:39:6a:51:83:07:2e:be:9c:
ba:ec:85:44:92:c5:f5:37:34:4b:73:0f:7c:5e:83:
a5:36:4d:1f:f7:86:7c:d6:82:db:7f:a1:d6:b2:2a:
20:55:a2:29:d1:36:b8:91:99:d2:fe:72:ad:df:7d:
07:c5:6c:12:0b:e4:4a:9b:76:c9:a7:62:69:42:eb:
f8:8e:b2:08:26:61:b5:10:41:31:d5:0b:9e:25:d7:
66:8f:6a:5e:c0:49:47:01:8f:a8:1d:85:3c:b7:5d:
de:57:c0:27:54:b6:87:19:5e:b7:54:86:4c:72:2b:
89:06:9c:aa:70:5e:3c:97:ca:98:3a:db:75:aa:df:
49:d3:32:9d:25:9b:af:c4:5d:3c:53:92:98:05:ee:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:D3:E7:37:BD:DD:58:74:E9:E4:37:CA:0E:A4:6A:D5:0D:02:4D
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:b6:d2:cd:c4:1d:87:a0:43:5f:ed:1d:9e:21:ad:d7:95:
a6:8e:24:7a:80:d2:c5:95:8c:80:ff:42:10:4c:fb:4f:90:00:
50:9c:fb:f5:3e:54:f1:7f:e7:80:fc:fc:aa:f5:5d:76:e1:30:
69:20:23:8b:6f:27:3e:c9:2b:f0:59:c0:66:2c:9c:82:b6:49:
fd:0d:48:e5:6a:4e:a1:a1:30:50:66:90:96:13:20:f6:2a:fa:
ec:5d:e1:da:2e:55:cc:44:00:05:c8:36:0a:9d:b2:47:a5:db:
3f:a1:18:8e:9d:dc:dd:24:28:bf:58:b4:e4:80:6d:06:97:e3:
78:02:d7:a5:d0:34:a8:ef:33:78:5b:ca:19:f7:f0:77:6f:1e:
0b:4f:33:5f:8e:b7:13:09:05:ec:fa:ac:fa:ba:12:15:86:d9:
c4:33:ac:a2:32:66:1e:e3:51:3c:12:9d:00:33:c9:87:9a:f5:
12:e6:4d:cd:64:c3:4a:a0:28:c3:f4:7a:47:90:cd:1f:9b:f6:
79:28:25:fe:d6:11:03:b0:87:c6:76:b8:be:82:ac:52:ae:c2:
7d:2f:fb:94:69:91:4b:0b:0c:de:69:c9:cb:8f:e5:3d:cd:41:
b7:a2:1f:f0:6f:0d:1f:e0:ad:70:6e:ae:7f:0b:1c:40:0e:e1:
09:65:9f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zem+wmIWowWC7hunBX/EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3
NGZhODUwHhcNMjYwNjMwMTcwMTIxWhcNMjYwNzAxMTcwMTIxWjAzMTEwLwYDVQQD
Eyg1YTMxZDNlNzM3YmRkZDU4NzRlOWU0MzdjYTBlYTQ2YWQ1MGQwMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscqhBZ9QIVjf5cGRggXhW0v4udhs
TvXu2kVnPcXq+mPKzVQNcFMjUir+Xe1AZ7MgIxtxcpgW+4i6zFvGxySHEpvInqlt
OIyiIJo6T/7SkkpBcp/qXWJd5l3qtW6LSafwfexv5Ssn3YZHEsdpo4EvOWpRgwcu
vpy67IVEksX1NzRLcw98XoOlNk0f94Z81oLbf6HWsiogVaIp0Ta4kZnS/nKt330H
xWwSC+RKm3bJp2JpQuv4jrIIJmG1EEEx1QueJddmj2pewElHAY+oHYU8t13eV8An
VLaHGV63VIZMciuJBpyqcF48l8qYOtt1qt9J0zKdJZuvxF08U5KYBe4W9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFox0+c3vd1YdOnkN8oOpGrVDQJNMB8GA1UdIwQY
MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt
MWZjMjU5YmI3ZGUyLzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy
LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV+20s3E
HYegQ1/tHZ4hrdeVpo4keoDSxZWMgP9CEEz7T5AAUJz79T5U8X/ngPz8qvVdduEw
aSAji28nPskr8FnAZiycgrZJ/Q1I5WpOoaEwUGaQlhMg9ir67F3h2i5VzEQABcg2
Cp2yR6XbP6EYjp3c3SQov1i05IBtBpfjeALXpdA0qO8zeFvKGffwd28eC08zX463
EwkF7Pqs+roSFYbZxDOsojJmHuNRPBKdADPJh5r1EuZNzWTDSqAow/R6R5DNH5v2
eSgl/tYRA7CHxna4voKsUq7CfS/7lGmRSwsM3mnJy4/lPc1Bt6If8G8NH+CtcG6u
fwscQA7hCWWfsw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:29 2026 by rpki-client