Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: WwwIypTy5/i3tObsFwwSsGbZx7moKo/PPKE2ChQVdpE=
Subject key identifier: 89:5D:51:00:B8:01:FD:D8:33:94:9D:62:AF:92:CE:53:F4:27:2A:F0
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019EB6570EA62F866183C12BBE0E8B31B9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 11:00:19 +0000
Manifest this update: Thu 11 Jun 2026 11:00:19 +0000
Manifest next update: Fri 12 Jun 2026 11:00:19 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: fv5fZ2lqolNldhRihou5m/6wlqXrBHWy3qYvo//uqgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:0e:a6:2f:86:61:83:c1:2b:be:0e:8b:31:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Jun 11 11:00:19 2026 GMT
Not After : Jun 12 11:00:19 2026 GMT
Subject: CN=895d5100b801fdd833949d62af92ce53f4272af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:35:e3:05:89:2b:e2:1d:a4:2b:5d:80:f3:
5a:d9:75:f8:1e:e7:22:28:10:ae:d8:05:47:6c:28:
f4:65:f0:70:8c:94:e1:65:ba:40:b5:23:47:f3:9f:
82:02:6f:db:c9:1c:f7:e8:4f:c2:e8:b6:ee:4c:aa:
de:36:da:fa:0b:9f:80:3c:5d:3b:bf:2d:4f:78:b8:
64:23:85:0b:24:96:a5:f8:1b:9d:91:25:90:38:32:
cc:a9:e2:ff:56:4b:3f:d8:a1:64:f5:f8:85:d8:5c:
e3:a5:c2:63:ca:5d:09:07:be:09:7c:b0:98:3f:75:
f2:e1:f8:c7:d0:81:14:88:d9:4c:7d:80:01:4d:a3:
7c:fd:b6:7b:a2:99:3c:7f:33:d2:5c:53:4e:2d:e3:
5f:ee:98:72:41:70:61:45:d1:8c:f1:7d:0c:2f:19:
a5:7d:40:9c:43:ca:08:80:66:9c:dd:3d:1d:a4:51:
22:a0:b6:96:80:38:f1:2b:32:c7:36:fe:99:18:bc:
cf:77:af:e2:bd:8b:29:5b:4d:51:a4:dc:1a:76:a4:
0e:b3:93:ee:bf:a9:b8:5e:12:b1:60:4b:49:84:80:
1a:39:c9:60:47:de:b0:36:5c:19:d9:1e:91:da:e9:
b5:5c:d5:d3:de:14:92:c5:97:eb:88:33:41:16:3b:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:51:00:B8:01:FD:D8:33:94:9D:62:AF:92:CE:53:F4:27:2A:F0
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:f0:d1:8d:e5:a2:bb:76:9c:37:82:d2:8c:ca:5c:7b:1a:
d3:1a:89:5a:cf:16:c1:b2:00:95:c2:e4:72:00:91:cb:45:9a:
50:48:4a:39:9e:e2:4c:e3:63:0d:d2:6e:a7:4a:e2:2b:63:cf:
7d:ac:ac:19:7c:3d:d3:d5:22:1f:d8:50:1d:2e:31:f3:b4:39:
cc:b1:d5:ce:9f:b6:b3:ef:fb:c8:70:3d:02:7b:c3:6c:33:13:
dc:2c:82:78:0e:56:ad:27:a4:b1:8a:a2:c7:b3:4e:9a:21:58:
7b:f4:53:74:b6:8b:d1:88:3d:7e:58:28:38:d3:83:dd:df:83:
22:7d:54:80:1c:20:16:1e:a5:0b:0c:54:c5:84:c0:23:0f:58:
77:89:e1:83:69:c0:7d:5e:13:07:40:02:cf:4a:7b:5c:34:02:
a5:06:11:6e:1f:e1:64:24:7a:d2:04:92:a2:37:9b:16:eb:66:
ad:ce:10:15:cf:10:02:3e:5e:2e:d7:cf:f3:cc:97:37:cd:b0:
79:bd:2d:b8:1f:f8:cd:80:4e:cc:3c:4f:21:99:d9:6e:50:0b:
52:99:9c:66:b4:75:e9:9b:61:e6:3e:f4:ba:7c:ac:03:45:43:
af:dc:31:6c:99:9e:9e:56:ac:40:3c:4e:f8:00:bc:1e:13:09:
ce:19:3c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62Vw6mL4Zhg8Ervg6LMbnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjYwNjExMTEwMDE5WhcNMjYwNjEyMTEwMDE5WjAzMTEwLwYDVQQD
Eyg4OTVkNTEwMGI4MDFmZGQ4MzM5NDlkNjJhZjkyY2U1M2Y0MjcyYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthc14wWJK+IdpCtdgPNa2XX4Huci
KBCu2AVHbCj0ZfBwjJThZbpAtSNH85+CAm/byRz36E/C6LbuTKreNtr6C5+APF07
vy1PeLhkI4ULJJal+BudkSWQODLMqeL/Vks/2KFk9fiF2FzjpcJjyl0JB74JfLCY
P3Xy4fjH0IEUiNlMfYABTaN8/bZ7opk8fzPSXFNOLeNf7phyQXBhRdGM8X0MLxml
fUCcQ8oIgGac3T0dpFEioLaWgDjxKzLHNv6ZGLzPd6/ivYspW01RpNwadqQOs5Pu
v6m4XhKxYEtJhIAaOclgR96wNlwZ2R6R2um1XNXT3hSSxZfriDNBFjsfZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIldUQC4Af3YM5SdYq+SzlP0JyrwMB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGTw0Y3l
ort2nDeC0ozKXHsa0xqJWs8WwbIAlcLkcgCRy0WaUEhKOZ7iTONjDdJup0riK2PP
faysGXw909UiH9hQHS4x87Q5zLHVzp+2s+/7yHA9AnvDbDMT3CyCeA5WrSeksYqi
x7NOmiFYe/RTdLaL0Yg9flgoONOD3d+DIn1UgBwgFh6lCwxUxYTAIw9Yd4nhg2nA
fV4TB0ACz0p7XDQCpQYRbh/hZCR60gSSojebFutmrc4QFc8QAj5eLtfP88yXN82w
eb0tuB/4zYBOzDxPIZnZblALUpmcZrR16Zth5j70unysA0VDr9wxbJmenlasQDxO
+AC8HhMJzhk8fA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:19:56 2026 by rpki-client