Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: PLMu3KxXghIF/37Nf0e984S3KKxBSSw2ePzBxuAHevw=
Subject key identifier: 86:A6:99:40:7B:17:89:1B:B6:F1:09:45:F1:F9:FE:07:42:CF:F2:2E
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019F9549AF37C647763570A8E63022B8ED51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0F98
Signing time: Fri 24 Jul 2026 18:01:01 +0000
Manifest this update: Fri 24 Jul 2026 18:01:01 +0000
Manifest next update: Sat 25 Jul 2026 18:01:01 +0000
Files and hashes: 1: QrszOClIEQh3elMo6v8ATkV3fJ0.roa (hash: VAU1sjN6ik5JtfJ9K0j96yl5ekT9sKWTrHI+CDnGb7U=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: ULglzv+HCXIx4fHLvA5L9ucpI01IPhoCmFDzroPWqa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:af:37:c6:47:76:35:70:a8:e6:30:22:b8:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jul 24 18:01:01 2026 GMT
Not After : Jul 25 18:01:01 2026 GMT
Subject: CN=86a699407b17891bb6f10945f1f9fe0742cff22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:2e:1e:05:b0:36:80:1b:45:cb:58:bc:ce:
a1:00:cd:c0:dc:b0:39:18:ac:e4:6f:3a:76:f8:76:
93:c1:d4:2c:78:0e:bb:bd:38:0d:65:72:e6:63:30:
b2:60:90:60:ed:c1:ac:de:52:df:71:31:5f:af:16:
d6:cb:4d:5e:e6:5a:98:79:c7:7e:61:93:7f:b2:24:
e8:30:51:74:f6:a3:5c:d4:d0:98:94:0c:5d:c4:56:
07:13:0c:94:c0:47:bd:39:45:8f:f1:d4:54:90:75:
3b:74:0f:ec:8b:bf:a9:97:3f:35:03:e0:04:70:44:
92:34:43:36:8b:91:d4:fc:15:4e:09:aa:e8:66:87:
6a:2d:4f:7e:22:6c:0e:64:34:76:9c:00:8f:2b:46:
7f:db:5c:c4:eb:5c:ff:1e:b9:3b:9e:af:28:b5:95:
38:2a:2d:e1:5e:91:36:d4:a5:00:b2:62:3e:37:da:
61:80:4f:b2:1d:17:28:7a:8e:e1:6a:3e:7c:39:f1:
f0:b3:7d:f3:a9:10:1d:54:05:41:a3:9b:fb:e6:98:
67:c5:7f:7d:1b:5c:94:ba:79:91:21:32:da:f6:b6:
51:89:25:9a:07:c2:fe:c2:57:d6:9b:18:86:eb:a4:
27:f7:cb:b8:b1:25:d6:c1:9c:27:0f:46:74:30:09:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:99:40:7B:17:89:1B:B6:F1:09:45:F1:F9:FE:07:42:CF:F2:2E
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e0:e0:14:4b:64:c0:17:09:71:d5:d4:14:f4:47:7b:04:f9:
e4:b8:f9:06:8e:15:7e:f4:73:97:f0:f8:78:9a:78:87:da:c6:
ab:87:6e:99:2a:fe:e8:8b:45:34:3d:6c:ed:f1:37:31:9a:65:
b6:c5:f2:df:3d:67:ce:0c:4e:cf:04:4f:de:42:a7:7a:f1:76:
ac:07:4c:c3:37:f9:28:c9:47:37:75:94:bc:2e:d4:83:e3:5f:
ce:1b:a3:cd:b8:07:39:b3:6c:f3:4b:99:41:fd:66:4a:6e:b3:
00:b9:c6:2b:89:51:bc:24:1d:dd:44:cb:37:12:cd:8b:b3:bf:
8c:37:bd:63:99:a6:59:f0:88:03:f8:6e:f8:4a:4c:0e:f2:5e:
ee:fc:34:57:ec:58:d5:81:47:ee:66:b8:d7:9b:af:bd:dc:b4:
13:ed:cb:7a:68:74:12:5c:92:f5:ec:fd:d0:d2:04:52:2c:d2:
cb:dd:25:58:95:06:d5:37:b3:c8:8a:cd:c8:60:1d:b3:eb:10:
5d:6c:c2:53:41:91:3c:69:c2:c8:a1:d5:c8:b6:a0:cb:1c:87:
8c:49:e5:bc:06:94:ad:6a:d6:88:41:af:c7:8d:45:72:0b:eb:
0d:ba:73:1c:ba:0c:99:14:7e:c8:72:9e:a0:36:a0:17:49:3a:
55:0d:86:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSa83xkd2NXCo5jAiuO1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4
NWM3ZGUwHhcNMjYwNzI0MTgwMTAxWhcNMjYwNzI1MTgwMTAxWjAzMTEwLwYDVQQD
Eyg4NmE2OTk0MDdiMTc4OTFiYjZmMTA5NDVmMWY5ZmUwNzQyY2ZmMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLEuHgWwNoAbRctYvM6hAM3A3LA5
GKzkbzp2+HaTwdQseA67vTgNZXLmYzCyYJBg7cGs3lLfcTFfrxbWy01e5lqYecd+
YZN/siToMFF09qNc1NCYlAxdxFYHEwyUwEe9OUWP8dRUkHU7dA/si7+plz81A+AE
cESSNEM2i5HU/BVOCaroZodqLU9+ImwOZDR2nACPK0Z/21zE61z/Hrk7nq8otZU4
Ki3hXpE21KUAsmI+N9phgE+yHRcoeo7haj58OfHws33zqRAdVAVBo5v75phnxX99
G1yUunmRITLa9rZRiSWaB8L+wlfWmxiG66Qn98u4sSXWwZwnD0Z0MAl4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIammUB7F4kbtvEJRfH5/gdCz/IuMB8GA1UdIwQY
MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt
ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh
LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeDgFEtk
wBcJcdXUFPRHewT55Lj5Bo4VfvRzl/D4eJp4h9rGq4dumSr+6ItFND1s7fE3MZpl
tsXy3z1nzgxOzwRP3kKnevF2rAdMwzf5KMlHN3WUvC7Ug+NfzhujzbgHObNs80uZ
Qf1mSm6zALnGK4lRvCQd3UTLNxLNi7O/jDe9Y5mmWfCIA/hu+EpMDvJe7vw0V+xY
1YFH7ma415uvvdy0E+3Lemh0ElyS9ez90NIEUizSy90lWJUG1TezyIrNyGAds+sQ
XWzCU0GRPGnCyKHVyLagyxyHjEnlvAaUrWrWiEGvx41FcgvrDbpzHLoMmRR+yHKe
oDagF0k6VQ2GmQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:03 2026 by rpki-client