Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: nrEI2+d69UdMnRLbfUyt/RjMgf7rDd9rasM7z5Bzu7Y=
Subject key identifier: D6:4E:89:B3:D1:D8:58:1A:63:A2:06:12:20:ED:21:E7:EA:51:A2:90
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019F12D3D152A725310EE8D96491A0BFBFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 10:01:39 +0000
Manifest this update: Mon 29 Jun 2026 10:01:39 +0000
Manifest next update: Tue 30 Jun 2026 10:01:39 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: 6MWVGhPka/nn7x2XzTnjas+EPU/KqGW91nEgdXJ6jw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:d1:52:a7:25:31:0e:e8:d9:64:91:a0:bf:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Jun 29 10:01:39 2026 GMT
Not After : Jun 30 10:01:39 2026 GMT
Subject: CN=d64e89b3d1d8581a63a2061220ed21e7ea51a290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:ed:e9:27:62:52:b6:c0:da:f8:97:a2:44:
69:a7:29:07:a7:83:f4:5f:2a:db:88:73:4d:71:4e:
59:5b:a0:6e:0b:74:52:cc:b6:78:d5:4c:11:94:e1:
4a:3b:c4:b5:26:e3:55:d4:70:0a:1c:7a:30:a3:77:
f8:0c:93:37:e7:53:d3:2f:3e:cc:d7:54:0a:a3:d9:
57:bb:21:07:3b:d5:75:d2:6b:80:b2:7f:41:6d:0a:
c8:67:33:3b:ce:e3:f6:0e:24:76:ea:33:0c:12:02:
76:30:eb:93:62:34:e0:11:d9:4a:5e:38:ac:5b:c5:
3f:87:ad:fd:89:94:2d:7e:18:b9:f7:ab:7e:68:7c:
51:00:b8:a5:8e:df:ce:f5:a8:f2:37:9d:39:87:75:
8f:32:ac:38:fe:5b:ab:68:82:3e:f5:e6:4b:35:ab:
72:53:dc:3f:2a:88:b8:26:d7:44:df:e5:e7:4f:c0:
0b:29:f3:bf:c5:b2:a4:94:b6:73:17:01:d6:35:43:
f5:a1:f7:04:ce:88:76:43:51:43:f4:96:f4:9f:1b:
df:b7:15:d7:b6:ca:68:a8:0e:b5:e2:ec:19:6d:e5:
9c:c0:86:bb:8b:e9:31:f5:58:76:0e:dd:97:bc:e2:
ab:36:99:b6:e7:82:c8:05:b4:a4:bf:f2:e6:84:2b:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:89:B3:D1:D8:58:1A:63:A2:06:12:20:ED:21:E7:EA:51:A2:90
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:1e:e7:56:a7:42:30:4a:4e:bd:89:14:90:5f:0f:ee:51:
a8:d9:34:02:17:02:a7:86:33:a2:7e:5e:3a:40:e8:08:b8:ec:
7b:0d:9a:c6:61:cb:9e:7c:6c:5a:60:7b:f5:2f:dc:fc:bc:dc:
6c:15:e2:e6:0e:04:6a:02:9e:03:4d:b9:0e:3b:e1:a1:ab:ba:
85:f0:97:b6:7e:2c:bb:44:28:59:44:2b:91:f9:37:3a:47:86:
f2:fd:e5:c4:c5:05:b0:90:d0:1e:85:0a:46:2c:e5:3d:bf:25:
01:0f:e1:48:1e:72:d5:69:f6:19:a6:0e:fc:53:51:ff:d7:cd:
c3:ed:07:c5:a5:6c:d7:0c:f5:f5:35:9f:39:95:5b:fe:62:4f:
ea:b5:73:5c:33:9a:60:3a:fd:81:6c:fd:d7:d0:54:e9:a0:97:
89:cc:ba:12:2a:bf:c0:70:e2:4c:ce:30:9b:93:4a:9e:66:0d:
c2:65:19:e0:7b:73:25:ed:de:c8:45:a2:ea:44:fa:53:e7:ad:
a5:4f:78:86:7f:68:f2:95:ae:8e:ee:00:b7:ab:28:11:a4:a5:
e5:ed:b6:cd:ac:26:97:d3:fe:d0:92:38:55:2d:71:47:54:25:
9f:c8:8f:ba:8a:33:61:2d:62:93:8e:80:ec:f1:e9:7a:95:2f:
8d:6e:ea:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S09FSpyUxDujZZJGgv7/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy
ZWQ3N2MwHhcNMjYwNjI5MTAwMTM5WhcNMjYwNjMwMTAwMTM5WjAzMTEwLwYDVQQD
EyhkNjRlODliM2QxZDg1ODFhNjNhMjA2MTIyMGVkMjFlN2VhNTFhMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihDt6SdiUrbA2viXokRppykHp4P0
XyrbiHNNcU5ZW6BuC3RSzLZ41UwRlOFKO8S1JuNV1HAKHHowo3f4DJM351PTLz7M
11QKo9lXuyEHO9V10muAsn9BbQrIZzM7zuP2DiR26jMMEgJ2MOuTYjTgEdlKXjis
W8U/h639iZQtfhi596t+aHxRALiljt/O9ajyN505h3WPMqw4/luraII+9eZLNaty
U9w/Koi4JtdE3+XnT8ALKfO/xbKklLZzFwHWNUP1ofcEzoh2Q1FD9Jb0nxvftxXX
tspoqA614uwZbeWcwIa7i+kx9Vh2Dt2XvOKrNpm254LIBbSkv/LmhCtIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZOibPR2FgaY6IGEiDtIefqUaKQMB8GA1UdIwQY
MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt
YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw
LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBQe51an
QjBKTr2JFJBfD+5RqNk0AhcCp4Yzon5eOkDoCLjsew2axmHLnnxsWmB79S/c/Lzc
bBXi5g4EagKeA025Djvhoau6hfCXtn4su0QoWUQrkfk3OkeG8v3lxMUFsJDQHoUK
RizlPb8lAQ/hSB5y1Wn2GaYO/FNR/9fNw+0HxaVs1wz19TWfOZVb/mJP6rVzXDOa
YDr9gWz919BU6aCXicy6Eiq/wHDiTM4wm5NKnmYNwmUZ4HtzJe3eyEWi6kT6U+et
pU94hn9o8pWuju4At6soEaSl5e22zawml9P+0JI4VS1xR1Qln8iPuoozYS1ik46A
7PHpepUvjW7qcw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:14 2026 by rpki-client