Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: a0fCV4+vMmmcuiZkzqv48ePJ0OswS9i8xvUhnAruNkg=
Subject key identifier: 02:43:48:17:35:DC:86:E3:FC:23:3C:87:F4:41:BF:45:C0:65:9C:F3
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019F935B777BD2026EBAD178CB8A1669BC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 10AA
Signing time: Fri 24 Jul 2026 09:01:12 +0000
Manifest this update: Fri 24 Jul 2026 09:01:12 +0000
Manifest next update: Sat 25 Jul 2026 09:01:12 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 8WYnnj/pfzcvfRnuEtx2llxCYqKhnyJla3+BWkPxKTQ=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:77:7b:d2:02:6e:ba:d1:78:cb:8a:16:69:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Jul 24 09:01:12 2026 GMT
Not After : Jul 25 09:01:12 2026 GMT
Subject: CN=0243481735dc86e3fc233c87f441bf45c0659cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:1f:91:ee:ee:73:0b:7e:80:2a:e0:f1:39:
0e:e8:8e:ee:eb:28:6d:69:05:09:3d:ba:36:d8:bf:
27:5c:3e:ae:79:11:ca:e5:61:b7:52:24:42:74:fc:
be:5e:19:61:8c:30:8e:7c:82:3c:2f:5a:72:8f:73:
2d:57:a7:80:6c:37:f5:63:ff:d9:cc:0f:8f:aa:34:
00:4e:e6:ce:c2:88:4c:80:77:d7:d0:f8:34:37:ee:
82:57:30:f7:90:85:4e:90:04:e9:14:ef:d5:64:ce:
cf:4c:44:c2:4a:20:8f:49:71:13:61:a9:be:74:8b:
8f:1d:e8:4a:5d:ca:d8:3f:57:2c:54:ec:5d:e2:42:
4b:c4:7d:4d:e1:07:4e:9b:d6:18:b0:61:30:05:5d:
b4:81:c0:34:ae:d9:bd:40:c8:d1:64:a0:68:1e:52:
3f:6f:a2:0a:80:8a:ba:8f:39:74:34:22:b8:b7:88:
d7:1f:93:07:ce:41:6c:c5:6f:97:40:b4:fb:3a:2d:
02:e0:3c:dd:cb:68:cb:15:9f:0d:bf:26:56:37:fa:
c3:c7:34:b8:ae:04:2a:00:87:42:e1:8a:37:3d:6a:
f4:20:1b:7e:c5:3f:13:58:9d:4f:51:41:c4:ee:8c:
b2:86:1f:bf:42:2a:09:b1:6f:c0:bb:a9:30:1c:30:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:48:17:35:DC:86:E3:FC:23:3C:87:F4:41:BF:45:C0:65:9C:F3
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:67:88:89:63:50:2c:ed:cc:9a:d6:46:fa:eb:8d:22:18:
9a:8c:fa:fd:64:70:71:62:19:6b:0e:dd:76:11:8a:01:a9:f3:
fc:e4:89:fd:0a:52:5e:7a:be:9d:1f:35:89:d6:0e:f1:ed:ba:
4b:13:e9:51:ba:0b:6d:69:23:6a:ee:04:6d:2d:8c:a7:ec:7d:
f6:e6:7f:81:ff:7f:5e:8a:ab:f4:b0:7b:b7:be:0d:27:a2:2c:
b4:4c:c3:32:b7:69:89:0e:01:21:19:58:08:fb:b2:45:a5:6c:
f7:2e:92:9b:f8:9a:da:ee:ff:56:0b:86:56:4a:2b:35:ed:9f:
12:66:46:b1:d6:e9:ca:f4:f6:38:a8:88:7e:f3:6e:e6:f4:51:
73:24:ec:a5:37:b8:69:b4:2c:64:89:a9:2f:85:fd:38:01:61:
08:ed:bd:19:31:30:3c:0f:76:ec:53:fc:ed:fe:1d:00:de:27:
a9:b9:3b:db:9e:6f:91:2f:e9:52:ad:d0:f2:99:61:ee:3a:bf:
35:62:34:7d:d5:fd:19:96:ed:0e:27:47:7d:5a:aa:bc:c3:23:
68:f1:a5:d4:96:6a:ea:b5:ff:45:be:1b:d4:a4:87:2f:48:22:
ca:3b:db:6a:fc:2f:de:be:d7:88:eb:bd:9f:8e:4b:5b:f2:4e:
43:f4:06:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW3d70gJuutF4y4oWabxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5
ZGE5MTgwHhcNMjYwNzI0MDkwMTEyWhcNMjYwNzI1MDkwMTEyWjAzMTEwLwYDVQQD
EygwMjQzNDgxNzM1ZGM4NmUzZmMyMzNjODdmNDQxYmY0NWMwNjU5Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLUfke7ucwt+gCrg8TkO6I7u6yht
aQUJPbo22L8nXD6ueRHK5WG3UiRCdPy+XhlhjDCOfII8L1pyj3MtV6eAbDf1Y//Z
zA+PqjQATubOwohMgHfX0Pg0N+6CVzD3kIVOkATpFO/VZM7PTETCSiCPSXETYam+
dIuPHehKXcrYP1csVOxd4kJLxH1N4QdOm9YYsGEwBV20gcA0rtm9QMjRZKBoHlI/
b6IKgIq6jzl0NCK4t4jXH5MHzkFsxW+XQLT7Oi0C4Dzdy2jLFZ8NvyZWN/rDxzS4
rgQqAIdC4Yo3PWr0IBt+xT8TWJ1PUUHE7oyyhh+/QioJsW/Au6kwHDCDOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJDSBc13Ibj/CM8h/RBv0XAZZzzMB8GA1UdIwQY
MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct
Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4
LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRxniIlj
UCztzJrWRvrrjSIYmoz6/WRwcWIZaw7ddhGKAanz/OSJ/QpSXnq+nR81idYO8e26
SxPpUboLbWkjau4EbS2Mp+x99uZ/gf9/Xoqr9LB7t74NJ6IstEzDMrdpiQ4BIRlY
CPuyRaVs9y6Sm/ia2u7/VguGVkorNe2fEmZGsdbpyvT2OKiIfvNu5vRRcyTspTe4
abQsZImpL4X9OAFhCO29GTEwPA927FP87f4dAN4nqbk7255vkS/pUq3Q8plh7jq/
NWI0fdX9GZbtDidHfVqqvMMjaPGl1JZq6rX/Rb4b1KSHL0giyjvbavwv3r7XiOu9
n45LW/JOQ/QG5w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:40 2026 by rpki-client