Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File: YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier: APscwxa70oSy4nABBNcW4ofNL/Xtj0cmhA6Z0rRhAEM=
Subject key identifier: 79:7B:85:09:A6:78:0A:E5:C7:D5:58:9B:FC:3A:BC:4D:45:7B:16:D7
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer: /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial: 019F927F7F88BEE5F7AC9B396E25125CC7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number: 0107
Signing time: Fri 24 Jul 2026 05:00:56 +0000
Manifest this update: Fri 24 Jul 2026 05:00:56 +0000
Manifest next update: Sat 25 Jul 2026 05:00:56 +0000
Files and hashes: 1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: gffeHFzP+0kiQ5wBgwAgcU3HLvsgf5UFJStInykfxy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7f:88:be:e5:f7:ac:9b:39:6e:25:12:5c:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Validity
Not Before: Jul 24 05:00:56 2026 GMT
Not After : Jul 25 05:00:56 2026 GMT
Subject: CN=797b8509a6780ae5c7d5589bfc3abc4d457b16d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:1e:09:f1:b6:63:f2:ae:ca:66:e1:a1:80:
23:a6:b1:4d:5b:8d:41:7d:e1:39:44:8b:8b:b7:98:
5b:bc:40:d4:d3:84:53:4c:e5:37:a1:17:df:28:0b:
15:16:46:06:80:1b:8e:25:66:2a:95:b4:0f:eb:0b:
76:f0:1b:78:af:1a:71:40:cc:5e:5a:b2:77:ac:53:
2b:be:6a:dd:dd:f0:01:cb:f5:26:bb:f6:4a:49:ad:
3d:77:65:a0:98:74:fd:5b:3f:8a:79:cf:4a:12:60:
b5:68:e9:64:e0:3c:1b:21:94:8c:c8:16:c6:26:79:
e5:40:7a:bd:a6:e1:50:a2:5e:af:f4:ad:d9:0b:8f:
e7:c9:77:71:7a:1f:01:b9:c8:ca:6b:98:9d:32:23:
38:6d:2e:73:83:1f:d4:ed:0c:76:99:b9:eb:3c:3a:
18:af:40:d9:76:21:7a:8d:8e:b1:28:71:a4:3f:55:
9b:3e:e1:23:66:e6:b2:4c:11:70:1a:7b:d1:ad:cd:
58:41:2f:1f:ee:05:1b:fa:b8:fa:b2:b8:c3:0a:4c:
9e:1a:b4:0a:a6:84:1a:34:8d:4f:3b:c0:e3:c6:a1:
f3:3e:81:af:92:42:37:53:63:69:ea:ab:13:d1:d8:
cb:cd:91:67:6b:e7:e2:fb:fb:82:cc:39:d9:e8:c9:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:85:09:A6:78:0A:E5:C7:D5:58:9B:FC:3A:BC:4D:45:7B:16:D7
X509v3 Authority Key Identifier:
keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:5d:68:b5:a1:64:54:41:16:bf:e8:c1:78:dc:96:7c:d1:
c9:39:50:15:61:f7:03:cd:8c:50:b2:88:54:8d:78:88:e7:14:
e1:db:f1:e2:0a:77:25:c2:a6:44:ab:64:07:65:15:72:3e:94:
64:f9:f9:70:81:41:3a:76:f9:64:bd:f2:06:5a:18:63:5f:e4:
a6:2e:36:f7:c0:c7:44:a2:70:5b:37:96:ae:20:51:5f:63:df:
15:cd:ba:9a:53:75:11:ef:71:a9:bd:4c:99:64:8f:fc:6b:44:
ba:7b:77:98:c1:66:88:83:b3:33:d8:8a:2e:db:a1:d4:47:b3:
57:af:7a:6c:f1:56:75:12:d3:fa:95:7b:64:c8:5f:f4:66:ef:
b7:05:d2:7b:95:15:90:d3:0c:74:4c:d0:89:75:bb:cb:f1:95:
54:c1:ea:2b:08:87:61:47:df:14:13:15:85:46:dc:9b:b5:93:
89:8a:09:af:39:bb:ea:1c:9e:45:e6:4b:ba:02:4a:96:ae:10:
23:fa:c8:b3:0e:46:b2:b5:de:60:1c:10:e9:e8:f7:58:6b:ba:
2a:cd:8b:0f:8d:07:fe:7d:8b:ed:c6:b1:0b:6e:88:8c:84:e9:
23:02:42:28:c2:3f:9d:0e:8d:f8:eb:c9:05:20:5d:9d:c7:32:
c5:40:64:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf3+IvuX3rJs5biUSXMfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWI0YmExMzNmMjM4ZGQ2YWIzZTBhOWFjODg3NWM4ZDgw
YmY2YjcwHhcNMjYwNzI0MDUwMDU2WhcNMjYwNzI1MDUwMDU2WjAzMTEwLwYDVQQD
Eyg3OTdiODUwOWE2NzgwYWU1YzdkNTU4OWJmYzNhYmM0ZDQ1N2IxNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XseCfG2Y/KuymbhoYAjprFNW41B
feE5RIuLt5hbvEDU04RTTOU3oRffKAsVFkYGgBuOJWYqlbQP6wt28Bt4rxpxQMxe
WrJ3rFMrvmrd3fABy/Umu/ZKSa09d2WgmHT9Wz+Kec9KEmC1aOlk4DwbIZSMyBbG
JnnlQHq9puFQol6v9K3ZC4/nyXdxeh8BucjKa5idMiM4bS5zgx/U7Qx2mbnrPDoY
r0DZdiF6jY6xKHGkP1WbPuEjZuayTBFwGnvRrc1YQS8f7gUb+rj6srjDCkyeGrQK
poQaNI1PO8DjxqHzPoGvkkI3U2Np6qsT0djLzZFna+fi+/uCzDnZ6MkDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl7hQmmeArlx9VYm/w6vE1FexbXMB8GA1UdIwQY
MBaAFGAbS6Ez8jjdarPgqayIdcjYC/a3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgt
N2QyNDJmY2FiMTcwLzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgtN2QyNDJmY2FiMTcw
LzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTJdaLWh
ZFRBFr/owXjclnzRyTlQFWH3A82MULKIVI14iOcU4dvx4gp3JcKmRKtkB2UVcj6U
ZPn5cIFBOnb5ZL3yBloYY1/kpi4298DHRKJwWzeWriBRX2PfFc26mlN1Ee9xqb1M
mWSP/GtEunt3mMFmiIOzM9iKLtuh1EezV696bPFWdRLT+pV7ZMhf9GbvtwXSe5UV
kNMMdEzQiXW7y/GVVMHqKwiHYUffFBMVhUbcm7WTiYoJrzm76hyeReZLugJKlq4Q
I/rIsw5GsrXeYBwQ6ej3WGu6Ks2LD40H/n2L7caxC26IjITpIwJCKMI/nQ6N+OvJ
BSBdnccyxUBk3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:57 2026 by rpki-client