Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: epN8UMzoWZMC/qIcUe+TbshtdT6iNZdC6XIBs8N4DUc=
Subject key identifier: 57:65:5D:E8:38:AC:D6:60:01:1A:9F:68:66:30:9D:2F:B1:7C:6A:47
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019F92EDC0023FF99F3F1222A8CE42963EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0E9A
Signing time: Fri 24 Jul 2026 07:01:22 +0000
Manifest this update: Fri 24 Jul 2026 07:01:22 +0000
Manifest next update: Sat 25 Jul 2026 07:01:22 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: Oa04N9evdvZ3wV7Iu3ttOlvuUFX6dlPoYePPAtcEx/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c0:02:3f:f9:9f:3f:12:22:a8:ce:42:96:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Jul 24 07:01:22 2026 GMT
Not After : Jul 25 07:01:22 2026 GMT
Subject: CN=57655de838acd660011a9f6866309d2fb17c6a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:47:72:be:d5:91:88:69:73:b1:bf:9b:1e:
9a:61:66:5b:d3:51:c4:cf:90:a1:ac:e6:d1:3f:7e:
14:37:b5:fa:58:9f:ec:77:fb:96:a2:86:4b:1d:a3:
29:84:51:91:3e:40:fd:ee:b3:90:bb:bc:a1:20:b9:
03:d7:e9:08:3e:c0:f4:68:3f:73:31:16:ee:e1:44:
7a:61:1a:a5:5e:3f:77:82:69:4a:69:c3:c4:3d:b5:
4a:e8:cd:8e:58:27:9f:85:bb:a0:e6:2c:f6:1b:52:
75:6c:18:08:26:1d:5e:be:6d:23:4d:a8:75:ce:cf:
54:8f:6c:b9:57:ec:d9:a0:6b:7b:03:52:ba:b5:80:
a6:37:98:de:5a:a4:62:89:ed:84:b3:18:88:c2:97:
72:4f:bb:6d:c1:7e:fe:6c:c2:60:3c:84:95:97:61:
b1:9b:04:ff:11:cb:fa:5a:39:39:ef:70:31:24:b7:
c5:57:8a:9c:8b:93:1d:24:92:78:74:79:65:b1:ed:
3c:64:1e:48:0f:e5:a0:a6:f4:3c:c6:1f:7e:e3:6a:
6a:41:ae:53:28:40:85:64:86:bd:1b:98:fe:45:f9:
05:f8:cc:10:09:dc:14:97:61:3c:88:14:5d:9b:ce:
98:e2:5a:81:69:8e:79:97:63:92:c1:f4:cf:c2:cc:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:5D:E8:38:AC:D6:60:01:1A:9F:68:66:30:9D:2F:B1:7C:6A:47
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:9d:25:ac:34:1b:12:56:d5:e8:f4:8c:b2:ab:60:24:a4:
ec:e5:8f:3c:d6:23:ed:16:d6:9c:c4:b4:fe:2f:ab:eb:7f:48:
77:57:a7:44:cc:3f:af:e1:b4:16:9a:d9:cf:98:f0:3b:cd:21:
ed:c9:aa:9c:d6:05:28:d3:c3:0b:55:1c:3b:fa:82:31:1b:a9:
6a:85:cc:29:6a:bc:60:e6:35:87:76:26:d7:4a:0b:21:85:8b:
1e:48:a5:64:a7:da:76:ff:f9:93:26:32:c0:ac:df:42:11:a6:
ba:11:7a:16:6b:83:29:d9:bf:1e:ac:32:d6:ba:fb:0f:7d:cf:
4e:71:b8:bc:f7:5f:55:fb:89:53:2f:65:c7:b4:08:c0:c1:9f:
f6:b0:43:4a:8c:2f:3c:b9:0a:28:54:bc:36:11:4c:6a:99:44:
3e:03:5c:70:f4:16:7b:6e:88:2a:79:01:10:4d:cf:27:89:78:
f2:75:c3:2e:09:03:92:6d:78:60:5e:a7:a7:d5:3c:93:53:ea:
57:a1:ac:af:a8:5c:8f:63:7d:60:bf:65:f8:2c:66:6e:46:32:
20:65:5f:8f:c7:14:b3:f1:b6:d5:6e:47:2a:51:86:d2:f7:79:
f7:30:e1:81:13:54:d9:2c:9b:fc:7f:05:e3:64:d8:24:fc:2c:
10:60:d9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7cACP/mfPxIiqM5Clj60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjYwNzI0MDcwMTIyWhcNMjYwNzI1MDcwMTIyWjAzMTEwLwYDVQQD
Eyg1NzY1NWRlODM4YWNkNjYwMDExYTlmNjg2NjMwOWQyZmIxN2M2YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjttHcr7VkYhpc7G/mx6aYWZb01HE
z5ChrObRP34UN7X6WJ/sd/uWooZLHaMphFGRPkD97rOQu7yhILkD1+kIPsD0aD9z
MRbu4UR6YRqlXj93gmlKacPEPbVK6M2OWCefhbug5iz2G1J1bBgIJh1evm0jTah1
zs9Uj2y5V+zZoGt7A1K6tYCmN5jeWqRiie2EsxiIwpdyT7ttwX7+bMJgPISVl2Gx
mwT/Ecv6Wjk573AxJLfFV4qci5MdJJJ4dHllse08ZB5ID+WgpvQ8xh9+42pqQa5T
KECFZIa9G5j+RfkF+MwQCdwUl2E8iBRdm86Y4lqBaY55l2OSwfTPwsxR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdlXeg4rNZgARqfaGYwnS+xfGpHMB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaGdJaw0
GxJW1ej0jLKrYCSk7OWPPNYj7RbWnMS0/i+r639Id1enRMw/r+G0FprZz5jwO80h
7cmqnNYFKNPDC1UcO/qCMRupaoXMKWq8YOY1h3Ym10oLIYWLHkilZKfadv/5kyYy
wKzfQhGmuhF6FmuDKdm/Hqwy1rr7D33PTnG4vPdfVfuJUy9lx7QIwMGf9rBDSowv
PLkKKFS8NhFMaplEPgNccPQWe26IKnkBEE3PJ4l48nXDLgkDkm14YF6np9U8k1Pq
V6Gsr6hcj2N9YL9l+CxmbkYyIGVfj8cUs/G21W5HKlGG0vd59zDhgRNU2Syb/H8F
42TYJPwsEGDZQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:36 2026 by rpki-client