Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
File: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft (raw, json)
Hash identifier: 2ft6P3hHBb+V3lNW3v3baYKcFU13p8E4TDcD6Wo13jU=
Subject key identifier: 91:AD:53:92:BE:3F:97:2F:2F:2A:76:BD:39:E1:24:40:51:15:C2:EE
Authority key identifier: C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
Certificate issuer: /CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Certificate serial: 019F9512821462EF13FDB09A165983F35937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
Manifest number: 0100
Signing time: Fri 24 Jul 2026 17:00:45 +0000
Manifest this update: Fri 24 Jul 2026 17:00:45 +0000
Manifest next update: Sat 25 Jul 2026 17:00:45 +0000
Files and hashes: 1: JLl9ieAggP9WR-N8wVWrBA7z2QU.roa (hash: /5ecZkNFv83mEzuS65WLl+FgZAKLhz3j2fY0mS2pA+k=)
2: Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa (hash: klxLaLJRe/p4fV22qW+zJTTxCBMy1xczkItxrxoNHkw=)
3: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl (hash: uMe6yYJtyRgoc66BYOPZ6gSmFp6oh9hR8/VDE0gL42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:82:14:62:ef:13:fd:b0:9a:16:59:83:f3:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Validity
Not Before: Jul 24 17:00:45 2026 GMT
Not After : Jul 25 17:00:45 2026 GMT
Subject: CN=91ad5392be3f972f2f2a76bd39e124405115c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:5b:27:45:22:fb:f6:ad:32:f6:1f:f1:2b:
40:68:ce:4c:8b:9d:8c:9f:2f:e9:ec:08:52:6d:5b:
e2:79:88:03:bb:a6:79:41:cd:93:78:0c:6c:53:94:
b1:64:0d:73:37:34:71:19:f0:4a:af:45:ce:73:3e:
4f:20:13:85:3b:70:2e:be:81:f8:ef:ef:e7:30:14:
d8:02:77:0b:71:48:13:42:33:e9:91:c3:4b:7c:51:
01:f5:47:36:32:1f:40:3b:7c:63:14:88:18:8f:d7:
d3:b6:d8:09:21:69:d1:e7:70:b5:c6:7c:51:c8:27:
58:bb:35:33:03:24:31:60:2e:ec:ba:e6:9c:6d:14:
3e:f9:1a:e7:a7:69:38:68:7b:a1:07:a7:14:af:60:
bc:30:1b:ac:96:9a:ae:40:f4:42:34:ba:6b:0b:91:
17:33:0e:11:9f:40:9d:e4:5f:da:42:e5:38:c1:f2:
50:e2:08:9d:0c:1d:7a:e5:10:de:49:ec:f9:2d:e0:
c3:fe:26:9d:a0:dc:55:93:49:cc:33:04:40:27:90:
39:4c:21:70:40:4f:aa:fe:e6:bb:65:dc:f6:46:26:
68:ef:59:11:a7:74:c8:0f:91:dc:40:37:bb:f6:fc:
ed:18:02:c7:a8:af:9a:43:cb:06:ed:41:a0:43:88:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:53:92:BE:3F:97:2F:2F:2A:76:BD:39:E1:24:40:51:15:C2:EE
X509v3 Authority Key Identifier:
keyid:C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:66:97:b8:bc:d3:59:f1:27:a9:d9:ae:01:e5:3a:fd:27:
1e:d3:b6:fd:95:33:5e:b7:ef:4a:38:39:69:83:d9:af:6b:5d:
70:b6:19:88:48:86:31:63:00:d9:0f:37:49:c2:26:9d:13:4e:
1f:d3:bc:78:0f:7d:02:e4:f8:b2:51:b0:36:18:9f:7e:83:78:
32:88:0d:bd:58:63:4b:22:de:86:be:4d:f6:c7:00:ce:b0:e1:
ad:cf:20:f9:56:a1:1c:47:c7:9a:3b:09:7d:ce:1c:e0:8a:ad:
33:d1:3f:10:62:de:fb:d8:a0:97:41:dc:47:90:8a:4c:b2:9c:
5e:6a:e7:4d:8b:b6:99:28:34:1e:fe:e0:7f:ae:51:6e:b6:87:
1d:a3:3f:b0:58:b3:a5:35:18:d6:44:31:c3:27:08:37:6a:7d:
1e:5a:2c:fe:b6:94:20:55:c1:a4:7a:ed:6e:99:72:fc:8b:b5:
91:04:82:5d:3a:a6:b7:ad:3b:44:ef:fb:c7:8c:a6:71:a3:8e:
10:91:e5:27:bd:fd:d5:1c:af:dc:2e:34:2a:8e:1e:e6:e1:97:
73:01:d9:1f:c4:d3:82:8f:1c:6a:55:5c:cb:4b:2f:c1:4e:93:
f9:32:7f:36:de:ee:5c:45:13:50:d0:05:e3:9a:27:df:76:49:
0f:1a:8a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEoIUYu8T/bCaFlmD81k3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmExZTE4MTI4NmVjZGNmNzRkYzk0YmMzM2YxOTk0OTcx
M2IzOTEwHhcNMjYwNzI0MTcwMDQ1WhcNMjYwNzI1MTcwMDQ1WjAzMTEwLwYDVQQD
Eyg5MWFkNTM5MmJlM2Y5NzJmMmYyYTc2YmQzOWUxMjQ0MDUxMTVjMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnNbJ0Ui+/atMvYf8StAaM5Mi52M
ny/p7AhSbVvieYgDu6Z5Qc2TeAxsU5SxZA1zNzRxGfBKr0XOcz5PIBOFO3AuvoH4
7+/nMBTYAncLcUgTQjPpkcNLfFEB9Uc2Mh9AO3xjFIgYj9fTttgJIWnR53C1xnxR
yCdYuzUzAyQxYC7suuacbRQ++Rrnp2k4aHuhB6cUr2C8MBuslpquQPRCNLprC5EX
Mw4Rn0Cd5F/aQuU4wfJQ4gidDB165RDeSez5LeDD/iadoNxVk0nMMwRAJ5A5TCFw
QE+q/ua7Zdz2RiZo71kRp3TID5HcQDe79vztGALHqK+aQ8sG7UGgQ4jNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGtU5K+P5cvLyp2vTnhJEBRFcLuMB8GA1UdIwQY
MBaAFMi6HhgShuzc903JS8M/GZSXE7ORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxvZUdCS0c3TnozVGNsTHd6OFpsSmNUczVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lYzFmZGQtMTA4MC00MTY3LTk1NWIt
MjA1ZmZhZjg0YzAyLzEveUxvZUdCS0c3TnozVGNsTHd6OFpsSmNUczVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lYzFmZGQtMTA4MC00MTY3LTk1NWItMjA1ZmZhZjg0YzAy
LzEveUxvZUdCS0c3TnozVGNsTHd6OFpsSmNUczVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXVml7i8
01nxJ6nZrgHlOv0nHtO2/ZUzXrfvSjg5aYPZr2tdcLYZiEiGMWMA2Q83ScImnRNO
H9O8eA99AuT4slGwNhiffoN4MogNvVhjSyLehr5N9scAzrDhrc8g+VahHEfHmjsJ
fc4c4IqtM9E/EGLe+9igl0HcR5CKTLKcXmrnTYu2mSg0Hv7gf65RbraHHaM/sFiz
pTUY1kQxwycIN2p9Hlos/raUIFXBpHrtbply/Iu1kQSCXTqmt607RO/7x4ymcaOO
EJHlJ7391Ryv3C40Ko4e5uGXcwHZH8TTgo8calVcy0svwU6T+TJ/Nt7uXEUTUNAF
45on33ZJDxqKOg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:08:10 2026 by rpki-client