Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: Yk6ZjlLYIx1HjhLiSBpvXKPK90zx1z+apdf/CForQe0=
Subject key identifier: A1:2A:B6:4D:38:02:13:C7:2E:E3:5A:D0:04:D0:0A:3B:52:15:7C:BB
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019EB921189907D2EB0AF155E84F89017D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 05D7
Signing time: Fri 12 Jun 2026 00:00:14 +0000
Manifest this update: Fri 12 Jun 2026 00:00:14 +0000
Manifest next update: Sat 13 Jun 2026 00:00:14 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: Pj1zun2XEaeNKgmVNWJJYfI7YT9FT/cD9ISI7SMRJN4=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:18:99:07:d2:eb:0a:f1:55:e8:4f:89:01:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Jun 12 00:00:14 2026 GMT
Not After : Jun 13 00:00:14 2026 GMT
Subject: CN=a12ab64d380213c72ee35ad004d00a3b52157cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:b5:02:21:20:df:f2:e1:14:2d:1f:30:38:
fb:f8:5a:24:4f:09:34:c9:c0:5c:34:70:22:37:36:
2c:0c:9e:04:84:28:ce:4e:4a:90:27:76:39:c8:e6:
66:d7:65:58:f6:3a:8c:8d:fd:d7:96:7d:c8:bb:f5:
b7:b1:cd:ae:25:33:be:01:f3:70:ed:f8:a9:4d:0d:
32:08:c3:65:9d:16:43:e8:77:a8:63:58:f2:40:65:
6c:93:7d:ec:4c:52:7d:dd:84:a6:e2:5b:6f:8b:9b:
e4:79:b3:cd:1c:ba:98:3a:28:ee:ef:b0:0d:f4:9f:
5a:5f:00:2a:27:62:6f:b6:00:b9:90:7c:66:2c:17:
9c:5a:33:23:9a:5d:85:fb:28:20:d0:7c:07:28:26:
e8:1a:0d:ca:5e:6a:36:a6:08:fe:6f:46:5b:37:e9:
50:41:73:26:a8:d9:33:15:d1:b7:b7:2c:74:45:63:
8b:c0:3e:d4:69:aa:b5:9d:95:9b:6d:0d:2e:03:d5:
f1:04:c7:14:fa:29:60:b8:9b:93:c8:f5:db:14:2f:
fe:a8:a1:06:c9:44:0f:4b:7b:5a:3f:90:b9:aa:56:
30:3f:aa:04:d7:57:ec:8c:79:d6:f0:ac:97:88:a7:
4a:f4:6b:40:f8:82:87:55:bf:96:c8:c4:50:5f:18:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:B6:4D:38:02:13:C7:2E:E3:5A:D0:04:D0:0A:3B:52:15:7C:BB
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:29:b5:f4:51:b8:e6:f7:a6:4b:d1:f3:c7:2b:6a:86:ca:
24:85:0e:c6:52:34:38:44:d4:f1:b0:45:3c:38:29:3a:8d:cb:
12:71:4f:2b:83:f9:44:68:55:05:72:6e:65:f2:a8:d3:1f:ec:
14:04:aa:d8:2c:84:42:13:3b:34:ce:a9:4f:de:15:c7:d5:fc:
23:2e:fe:a8:fe:a8:d2:04:94:aa:0f:80:01:22:43:a4:31:ed:
a6:64:7a:be:5d:8e:c5:8b:04:f2:c5:c9:8d:03:60:96:67:32:
ed:d3:03:f6:98:05:15:f1:e0:3f:7c:a6:f7:b8:6b:5a:67:26:
a0:c6:1a:a0:0a:da:da:1c:0f:af:ba:14:8e:49:8b:df:f0:ac:
33:21:fa:28:56:66:91:a5:fb:29:5c:9b:16:a3:48:e7:a2:9a:
53:e9:04:bd:cb:32:1d:2c:26:c8:76:12:af:0b:8a:83:d7:6c:
cf:89:ae:b3:52:a2:1a:9a:31:4d:8d:4f:a7:09:ce:1f:c9:87:
1e:f7:76:9a:29:7f:4f:ef:d8:a3:82:0d:9c:94:ea:ca:85:25:
3f:33:3e:26:4f:b7:4f:58:59:56:4b:3a:e0:29:08:e7:f9:d1:
0d:86:70:37:a4:88:1d:dd:e4:f6:66:b0:7d:88:8f:3e:9a:23:
4d:3d:32:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IRiZB9LrCvFV6E+JAX2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm
ZDU1MGIwHhcNMjYwNjEyMDAwMDE0WhcNMjYwNjEzMDAwMDE0WjAzMTEwLwYDVQQD
EyhhMTJhYjY0ZDM4MDIxM2M3MmVlMzVhZDAwNGQwMGEzYjUyMTU3Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGC1AiEg3/LhFC0fMDj7+FokTwk0
ycBcNHAiNzYsDJ4EhCjOTkqQJ3Y5yOZm12VY9jqMjf3Xln3Iu/W3sc2uJTO+AfNw
7fipTQ0yCMNlnRZD6HeoY1jyQGVsk33sTFJ93YSm4ltvi5vkebPNHLqYOiju77AN
9J9aXwAqJ2JvtgC5kHxmLBecWjMjml2F+ygg0HwHKCboGg3KXmo2pgj+b0ZbN+lQ
QXMmqNkzFdG3tyx0RWOLwD7Uaaq1nZWbbQ0uA9XxBMcU+ilguJuTyPXbFC/+qKEG
yUQPS3taP5C5qlYwP6oE11fsjHnW8KyXiKdK9GtA+IKHVb+WyMRQXxictwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEqtk04AhPHLuNa0ATQCjtSFXy7MB8GA1UdIwQY
MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt
MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk
LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqQptfRR
uOb3pkvR88craobKJIUOxlI0OETU8bBFPDgpOo3LEnFPK4P5RGhVBXJuZfKo0x/s
FASq2CyEQhM7NM6pT94Vx9X8Iy7+qP6o0gSUqg+AASJDpDHtpmR6vl2OxYsE8sXJ
jQNglmcy7dMD9pgFFfHgP3ym97hrWmcmoMYaoAra2hwPr7oUjkmL3/CsMyH6KFZm
kaX7KVybFqNI56KaU+kEvcsyHSwmyHYSrwuKg9dsz4mus1KiGpoxTY1PpwnOH8mH
Hvd2mil/T+/Yo4INnJTqyoUlPzM+Jk+3T1hZVks64CkI5/nRDYZwN6SIHd3k9maw
fYiPPpojTT0yjg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:23:36 2026 by rpki-client