Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: NhZjuYl2IOyBA5WCiWzuiQ1pVuvgttXbc1Bpr7asyes=
Subject key identifier: 8B:E0:38:41:79:6C:05:C2:CF:CB:06:A2:0D:15:77:0A:8E:49:75:C5
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019F92EDE77148FF126856A27D74B5EE4672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:32 +0000
Manifest this update: Fri 24 Jul 2026 07:01:32 +0000
Manifest next update: Sat 25 Jul 2026 07:01:32 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: PoOFimkbs4nb/buUKCiT/WrUu89i1DGrmJLggprFHMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e7:71:48:ff:12:68:56:a2:7d:74:b5:ee:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Jul 24 07:01:32 2026 GMT
Not After : Jul 25 07:01:32 2026 GMT
Subject: CN=8be03841796c05c2cfcb06a20d15770a8e4975c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:d0:de:92:bc:47:75:9d:17:24:ba:26:0d:
0f:98:25:73:cb:ec:2a:2e:e8:c8:95:d5:23:a0:5d:
5d:54:1c:31:28:4e:60:38:e5:10:af:f0:73:84:d2:
1a:9d:18:59:c6:74:eb:e2:75:4f:59:78:d1:66:2e:
b8:2a:6d:98:88:12:54:9d:a0:ad:76:11:7d:a1:33:
df:80:18:cf:80:5c:16:e4:0f:c4:f4:df:c9:45:ff:
9b:b2:2b:53:d6:e6:03:e4:f0:7c:26:b5:8c:e9:05:
9d:4b:ca:88:7f:71:c6:72:1e:b1:c8:35:18:16:ab:
c3:16:17:0c:6a:4b:cd:dc:55:8e:24:c6:4d:1d:5d:
7e:4b:28:89:94:ae:dc:51:a4:01:cf:8d:f2:89:35:
5c:db:2a:6c:77:29:00:5c:59:66:5c:f7:df:37:b8:
22:8d:be:fc:21:0c:e2:84:15:f2:c8:69:e8:51:f4:
7f:6b:49:f0:31:79:fb:37:3a:74:a5:db:e5:a8:74:
03:45:81:68:c7:05:e5:41:e3:68:b1:80:4a:34:45:
ae:18:a4:20:a0:2e:7f:74:44:d3:42:ca:ea:2b:be:
ad:af:be:2b:b1:aa:e2:f4:42:c6:92:d4:c1:f2:cd:
50:41:11:fe:5c:29:b8:2f:ed:e8:94:c8:c0:2a:34:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:38:41:79:6C:05:C2:CF:CB:06:A2:0D:15:77:0A:8E:49:75:C5
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:b0:cb:63:77:32:43:63:22:9b:a7:89:44:bf:fb:15:75:
5d:a6:fc:32:78:98:d9:40:ca:12:19:fe:3a:97:65:ee:7a:12:
7d:26:b8:f5:17:ff:49:79:77:8d:a2:ea:14:c5:0b:b8:e9:1c:
d2:e3:2c:a0:c9:e5:07:ba:1c:88:61:57:2b:df:c6:78:75:3a:
e4:63:64:f4:ec:6b:4f:51:7c:ac:e0:eb:5e:61:8c:68:9d:fc:
16:be:b1:45:40:e9:51:6f:f2:9b:9d:f1:3f:41:d1:ff:f3:d5:
3a:ef:e9:56:e7:21:8d:11:4a:dc:ab:06:6c:04:31:38:06:58:
9c:23:72:97:d2:db:7c:07:37:64:87:ce:30:39:16:3b:50:55:
24:a0:07:7f:30:6d:a5:9e:72:3a:93:d6:32:35:e9:1b:10:43:
16:64:d7:79:da:4c:a9:82:0a:5a:43:3d:3b:a5:87:74:56:5d:
e8:06:e9:a1:17:16:16:00:79:94:e3:e3:d1:bd:ea:69:30:3f:
db:67:19:45:1c:a6:51:8b:8a:bb:74:e6:26:db:aa:2d:e0:64:
f8:29:92:a4:53:f2:5a:fe:ec:6f:83:fc:18:a8:16:6f:01:d0:
53:0f:2e:0a:31:d3:bc:02:1f:16:be:61:bf:4d:62:17:29:20:
b4:3a:c1:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7edxSP8SaFaifXS17kZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi
ODg4MWEwHhcNMjYwNzI0MDcwMTMyWhcNMjYwNzI1MDcwMTMyWjAzMTEwLwYDVQQD
Eyg4YmUwMzg0MTc5NmMwNWMyY2ZjYjA2YTIwZDE1NzcwYThlNDk3NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKrQ3pK8R3WdFyS6Jg0PmCVzy+wq
LujIldUjoF1dVBwxKE5gOOUQr/BzhNIanRhZxnTr4nVPWXjRZi64Km2YiBJUnaCt
dhF9oTPfgBjPgFwW5A/E9N/JRf+bsitT1uYD5PB8JrWM6QWdS8qIf3HGch6xyDUY
FqvDFhcMakvN3FWOJMZNHV1+SyiJlK7cUaQBz43yiTVc2ypsdykAXFlmXPffN7gi
jb78IQzihBXyyGnoUfR/a0nwMXn7Nzp0pdvlqHQDRYFoxwXlQeNosYBKNEWuGKQg
oC5/dETTQsrqK76tr74rsari9ELGktTB8s1QQRH+XCm4L+3olMjAKjQmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvgOEF5bAXCz8sGog0VdwqOSXXFMB8GA1UdIwQY
MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt
ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj
LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2Cwy2N3
MkNjIpuniUS/+xV1Xab8MniY2UDKEhn+Opdl7noSfSa49Rf/SXl3jaLqFMULuOkc
0uMsoMnlB7ociGFXK9/GeHU65GNk9OxrT1F8rODrXmGMaJ38Fr6xRUDpUW/ym53x
P0HR//PVOu/pVuchjRFK3KsGbAQxOAZYnCNyl9LbfAc3ZIfOMDkWO1BVJKAHfzBt
pZ5yOpPWMjXpGxBDFmTXedpMqYIKWkM9O6WHdFZd6AbpoRcWFgB5lOPj0b3qaTA/
22cZRRymUYuKu3TmJtuqLeBk+CmSpFPyWv7sb4P8GKgWbwHQUw8uCjHTvAIfFr5h
v01iFykgtDrBbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:52 2026 by rpki-client