Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: o3o0wzRvpliJl+bxySYSUximlKCljHL+rxLS7BwvUfg=
Subject key identifier: A4:58:45:CB:AA:A2:D6:67:7A:D0:59:86:BE:22:E2:65:B6:66:3E:BF
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019F90FF8E775C4AE44A9C939575DA5E8F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 1733
Signing time: Thu 23 Jul 2026 22:01:34 +0000
Manifest this update: Thu 23 Jul 2026 22:01:34 +0000
Manifest next update: Fri 24 Jul 2026 22:01:34 +0000
Files and hashes: 1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: +QClVAx2b2Ye3NI2MMFssXJAraEKqxeRycczfZNiZhs=)
3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
4: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
5: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
6: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
7: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
8: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:8e:77:5c:4a:e4:4a:9c:93:95:75:da:5e:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jul 23 22:01:34 2026 GMT
Not After : Jul 24 22:01:34 2026 GMT
Subject: CN=a45845cbaaa2d6677ad05986be22e265b6663ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:87:c4:8a:8f:12:e9:bd:fe:e0:c3:bb:8b:
fa:72:fb:6e:27:e8:22:ea:a4:3f:28:67:5b:1e:28:
0f:5a:32:6a:96:68:08:66:6c:0f:d5:07:29:6f:71:
32:df:59:a1:9d:fe:28:5e:94:7d:75:4b:cf:a7:74:
43:d3:a6:90:3b:9a:2e:d2:c8:87:02:ef:c1:f6:93:
24:21:f1:00:98:b8:5b:d3:0d:ee:0d:06:e7:96:c3:
1b:04:af:a5:78:ea:d4:85:97:b7:7b:ac:64:1c:9e:
12:06:9d:e3:cf:60:29:44:35:92:12:52:34:89:07:
88:69:45:b4:2e:9b:21:1c:66:78:0e:b6:d0:c5:22:
62:de:60:7f:3d:a9:e3:0b:1e:54:0f:5a:43:ba:df:
41:e9:b3:27:76:54:d5:0c:36:79:e5:5c:38:7b:1f:
5a:88:84:02:a4:60:2e:61:78:50:76:d6:d3:5b:5d:
61:7b:ae:14:52:75:77:8d:92:2a:db:70:d0:37:4f:
d8:7e:8d:72:b2:92:d1:b7:cd:a1:c6:13:a8:b5:ab:
12:10:ef:37:10:c0:f5:09:82:44:d8:89:8c:4a:4a:
d8:10:bd:a5:41:c9:9f:08:3e:b1:74:94:bc:8f:68:
a9:a2:36:b0:30:c9:cc:82:9c:44:cf:30:84:cc:fe:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:45:CB:AA:A2:D6:67:7A:D0:59:86:BE:22:E2:65:B6:66:3E:BF
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:c5:68:47:55:d2:f4:0b:44:37:a9:f2:c4:4a:69:aa:ce:
fe:66:73:1c:a8:e9:44:48:fb:17:4d:36:c9:67:44:b5:bf:e9:
39:b4:da:a2:86:22:13:4f:d0:21:6b:07:9f:03:bf:ad:2c:d0:
6e:c6:7d:c9:29:4f:26:00:7f:62:e3:4f:b7:65:55:16:f5:45:
ff:5e:ec:36:5a:57:91:23:a6:26:c8:cc:fb:43:dc:f2:f4:3d:
ed:9d:57:8a:37:c3:e5:02:54:99:84:6e:37:e8:e9:d0:83:31:
57:ec:bb:87:3e:7c:91:d0:a3:86:6b:6b:20:a2:08:ec:1b:8f:
7c:11:18:ce:0f:83:77:4a:13:49:12:ab:4a:c2:64:98:65:7c:
a6:35:91:1d:7a:b3:f9:30:21:a5:a1:e2:6f:4e:a2:b4:75:4f:
38:ab:3c:4d:4e:0c:ab:1d:aa:dd:fe:17:c2:f7:f3:19:72:a0:
e4:d9:4c:fa:c2:54:28:3e:ef:77:e4:74:cf:18:de:25:fd:fe:
1f:8b:3b:1f:b0:30:4d:5f:4e:1f:8e:90:96:36:49:29:3c:3c:
eb:89:96:c4:21:fe:a1:6d:1b:fe:dc:8f:37:31:5c:af:b3:ef:
d8:9f:dc:9c:d4:d0:71:39:ca:5e:98:b1:2f:e6:d4:6b:ec:32:
61:60:73:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/453XErkSpyTlXXaXo9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjYwNzIzMjIwMTM0WhcNMjYwNzI0MjIwMTM0WjAzMTEwLwYDVQQD
EyhhNDU4NDVjYmFhYTJkNjY3N2FkMDU5ODZiZTIyZTI2NWI2NjYzZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGmHxIqPEum9/uDDu4v6cvtuJ+gi
6qQ/KGdbHigPWjJqlmgIZmwP1Qcpb3Ey31mhnf4oXpR9dUvPp3RD06aQO5ou0siH
Au/B9pMkIfEAmLhb0w3uDQbnlsMbBK+leOrUhZe3e6xkHJ4SBp3jz2ApRDWSElI0
iQeIaUW0LpshHGZ4DrbQxSJi3mB/PanjCx5UD1pDut9B6bMndlTVDDZ55Vw4ex9a
iIQCpGAuYXhQdtbTW11he64UUnV3jZIq23DQN0/Yfo1yspLRt82hxhOotasSEO83
EMD1CYJE2ImMSkrYEL2lQcmfCD6xdJS8j2ipojawMMnMgpxEzzCEzP7qRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRYRcuqotZnetBZhr4i4mW2Zj6/MB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXPFaEdV
0vQLRDep8sRKaarO/mZzHKjpREj7F002yWdEtb/pObTaooYiE0/QIWsHnwO/rSzQ
bsZ9ySlPJgB/YuNPt2VVFvVF/17sNlpXkSOmJsjM+0Pc8vQ97Z1XijfD5QJUmYRu
N+jp0IMxV+y7hz58kdCjhmtrIKII7BuPfBEYzg+Dd0oTSRKrSsJkmGV8pjWRHXqz
+TAhpaHib06itHVPOKs8TU4Mqx2q3f4XwvfzGXKg5NlM+sJUKD7vd+R0zxjeJf3+
H4s7H7AwTV9OH46QljZJKTw864mWxCH+oW0b/tyPNzFcr7Pv2J/cnNTQcTnKXpix
L+bUa+wyYWBzmw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:25 2026 by rpki-client