Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: hdM1J1xuuw06DPTbqC9ytvF5MP3hjbO+3QutmWgxuK4=
Subject key identifier: 68:A2:F1:45:CB:69:CC:D7:AF:6D:A8:D7:39:5E:30:CE:01:99:2D:7B
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019F9211075517A3900E4C61C473BD30B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0599
Signing time: Fri 24 Jul 2026 03:00:17 +0000
Manifest this update: Fri 24 Jul 2026 03:00:17 +0000
Manifest next update: Sat 25 Jul 2026 03:00:17 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: 57u9M8soHBoFuYsfL/9TGV+zvUMC5Nqe7PefnG+QcDc=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:07:55:17:a3:90:0e:4c:61:c4:73:bd:30:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Jul 24 03:00:17 2026 GMT
Not After : Jul 25 03:00:17 2026 GMT
Subject: CN=68a2f145cb69ccd7af6da8d7395e30ce01992d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:a7:ac:a0:64:d6:77:2d:3f:32:f0:5e:c2:
9f:bc:cc:0d:d3:e7:e0:db:93:e7:01:6c:82:30:c8:
68:26:0f:4b:48:26:a6:89:cf:9c:24:db:fb:3c:b8:
ba:c9:62:43:86:1f:5c:31:e4:ce:81:80:c0:8b:b6:
be:1c:20:f1:0b:87:b0:cd:68:2e:db:f4:11:83:e4:
8c:b8:d9:14:45:2f:0a:9b:9d:89:32:a2:1d:92:46:
8d:49:97:78:c5:f8:41:96:ee:10:13:ec:17:d6:1d:
bc:4f:97:3d:30:2a:3b:27:a3:1b:64:15:52:5a:5f:
c5:23:28:70:85:13:30:7c:41:b7:39:ea:30:98:d4:
ae:a4:5b:11:5f:e9:7b:8c:7a:a9:80:1a:0d:1a:68:
9e:8c:8d:0a:97:46:0f:73:12:ab:30:dd:2e:d3:0a:
b5:7c:b0:9d:96:00:35:ce:31:bf:ee:40:09:a7:fe:
80:6c:58:4d:67:87:d9:af:61:e6:71:cf:18:5b:62:
b5:09:fb:f3:8e:b1:28:00:31:d2:92:63:f7:67:5f:
99:cf:b2:b8:4a:b8:d7:14:be:88:b2:68:94:74:ee:
bd:c3:a1:a7:e2:59:42:fa:9f:bd:6b:22:cf:63:ce:
dd:18:88:0c:52:25:9c:ce:8d:2a:79:21:6c:93:e4:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:F1:45:CB:69:CC:D7:AF:6D:A8:D7:39:5E:30:CE:01:99:2D:7B
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c2:ab:0a:73:4b:e8:5d:54:a1:c2:ab:86:23:cb:c8:a9:bc:
9a:42:56:23:3c:c9:de:1c:3d:c5:1e:32:6d:54:69:ff:e4:a6:
b4:b0:a3:c3:40:67:51:4d:8c:3e:a3:14:35:19:29:55:1b:d2:
d6:97:c5:b4:5e:70:63:b8:c5:7c:40:a1:3c:ad:b0:75:9a:15:
c1:7a:fc:e9:6e:3e:e6:f5:93:5b:fd:7c:d4:46:2a:78:7c:41:
e3:12:9b:4b:6a:b0:9b:d5:cd:40:3a:52:bb:e2:c6:ba:36:3a:
32:45:76:ac:4d:5b:0b:c8:55:a1:cc:0e:ce:90:ce:f3:fb:2b:
11:e9:03:2f:7d:0c:51:69:93:88:f5:d0:6a:ef:ce:da:f2:38:
26:71:2b:ea:52:c6:1f:9e:0f:60:95:95:73:61:36:fc:73:81:
6a:8d:cd:dd:cc:48:13:59:b1:32:64:75:a3:0e:de:e5:4b:72:
6e:ca:cd:d9:c8:8b:a9:40:b3:4b:6c:b7:4c:d1:66:43:c5:11:
00:47:f4:87:07:46:67:c0:e1:ed:0a:f2:54:db:a8:dd:67:a0:
1d:1e:db:3c:b8:d9:66:60:af:01:3a:9d:ca:e8:a7:29:c9:75:
8d:55:5c:23:0c:3b:0c:49:a9:70:5d:80:74:94:f4:f9:bb:e7:
c9:78:b8:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEQdVF6OQDkxhxHO9MLAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjVhYWM3NmZlNmJmMjkxMzM1ZDE5YTY1OGU2NDg5MTA1
Yjg2OWYwHhcNMjYwNzI0MDMwMDE3WhcNMjYwNzI1MDMwMDE3WjAzMTEwLwYDVQQD
Eyg2OGEyZjE0NWNiNjljY2Q3YWY2ZGE4ZDczOTVlMzBjZTAxOTkyZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU6nrKBk1nctPzLwXsKfvMwN0+fg
25PnAWyCMMhoJg9LSCamic+cJNv7PLi6yWJDhh9cMeTOgYDAi7a+HCDxC4ewzWgu
2/QRg+SMuNkURS8Km52JMqIdkkaNSZd4xfhBlu4QE+wX1h28T5c9MCo7J6MbZBVS
Wl/FIyhwhRMwfEG3OeowmNSupFsRX+l7jHqpgBoNGmiejI0Kl0YPcxKrMN0u0wq1
fLCdlgA1zjG/7kAJp/6AbFhNZ4fZr2Hmcc8YW2K1CfvzjrEoADHSkmP3Z1+Zz7K4
SrjXFL6IsmiUdO69w6Gn4llC+p+9ayLPY87dGIgMUiWczo0qeSFsk+SkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGii8UXLaczXr22o1zleMM4BmS17MB8GA1UdIwQY
MBaAFGD1qsdv5r8pEzXRmmWOZIkQW4afMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEt
MmJmYjZhZGRjZjQ1LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEtMmJmYjZhZGRjZjQ1
LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcKrCnNL
6F1UocKrhiPLyKm8mkJWIzzJ3hw9xR4ybVRp/+SmtLCjw0BnUU2MPqMUNRkpVRvS
1pfFtF5wY7jFfEChPK2wdZoVwXr86W4+5vWTW/181EYqeHxB4xKbS2qwm9XNQDpS
u+LGujY6MkV2rE1bC8hVocwOzpDO8/srEekDL30MUWmTiPXQau/O2vI4JnEr6lLG
H54PYJWVc2E2/HOBao3N3cxIE1mxMmR1ow7e5UtybsrN2ciLqUCzS2y3TNFmQ8UR
AEf0hwdGZ8Dh7QryVNuo3WegHR7bPLjZZmCvATqdyuinKcl1jVVcIww7DEmpcF2A
dJT0+bvnyXi4Ew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:00 2026 by rpki-client