Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: FG0PYh/IlaDybRkBeUsH6Ikz00Dn8V5EGwPnAuCkYMQ=
Subject key identifier: CF:C4:E1:BF:23:E3:C9:3F:AE:88:A3:2E:C6:58:F0:2B:00:19:E4:9E
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019F8E6BDD956381B15ABFFEFD52CDD0E3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0FDF
Signing time: Thu 23 Jul 2026 10:01:01 +0000
Manifest this update: Thu 23 Jul 2026 10:01:01 +0000
Manifest next update: Fri 24 Jul 2026 10:01:01 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 8yT7dTeWC0X4uszSpIJsFk7AlpF5yZiA/dBHBUl3kZY=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:dd:95:63:81:b1:5a:bf:fe:fd:52:cd:d0:e3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jul 23 10:01:01 2026 GMT
Not After : Jul 24 10:01:01 2026 GMT
Subject: CN=cfc4e1bf23e3c93fae88a32ec658f02b0019e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:0c:c3:3b:11:c8:23:c1:5b:95:1a:45:98:
a8:30:e8:81:7a:df:4e:29:1e:d8:a6:ec:17:22:2a:
ab:5e:f7:f1:d3:a3:c5:ec:d3:3d:ee:98:d4:d4:2f:
54:9d:4b:b8:ca:6d:6b:19:78:90:20:34:3d:11:1f:
f7:32:35:b3:da:18:93:b9:8b:d3:f5:3a:fa:1a:18:
02:5e:fb:72:82:5a:5d:44:7d:14:93:a1:25:86:5d:
45:a9:09:46:5b:16:0b:65:77:17:df:a0:0a:b5:e8:
2b:c0:c5:fa:8c:a2:85:00:68:e7:b1:88:cd:f7:95:
c9:29:2e:92:92:9d:b7:98:c3:5e:94:14:f6:77:9e:
57:7f:9b:b8:af:b1:a6:72:6d:dd:12:cb:3b:49:15:
fa:e2:08:ab:98:97:57:03:00:46:54:89:2d:f1:e3:
3c:39:91:bc:c2:36:3d:1a:7a:d3:9c:7f:82:5f:a4:
74:04:67:fb:a7:cf:e5:17:8f:40:0b:21:d2:31:f5:
84:bf:a2:0d:73:5c:2e:99:63:1e:76:98:ab:39:b4:
ca:91:88:d5:bd:7c:9c:ef:c9:2e:c3:1c:83:59:65:
14:79:ec:e8:dc:00:86:ca:cb:b6:71:4c:28:07:8c:
33:93:70:ac:c0:f1:dd:97:43:62:ec:1b:09:d3:46:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:E1:BF:23:E3:C9:3F:AE:88:A3:2E:C6:58:F0:2B:00:19:E4:9E
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:dd:57:1a:76:a0:48:6a:84:67:f1:44:08:e6:4b:48:04:
b9:a5:c1:fb:03:73:ca:d3:14:86:f8:d7:83:59:48:9e:e2:4f:
57:26:8b:44:70:a4:46:c1:55:a4:31:25:c5:a9:7f:bf:66:2c:
f2:f7:8b:0f:ac:d8:02:22:4e:c9:91:50:34:77:f6:19:dc:30:
26:53:88:4a:c4:f3:b9:50:f9:a1:92:24:16:c9:cb:30:e1:13:
db:b7:65:d8:f7:88:f4:c8:47:5f:00:e2:ee:9d:a3:09:a1:2d:
a4:7b:47:d0:82:f6:5f:a1:34:5f:a7:86:2b:8d:43:9a:72:60:
9a:ca:62:71:7c:11:fb:2a:20:fc:23:10:cf:8d:2b:48:3b:cf:
1e:be:53:43:90:74:93:02:1d:4c:3a:0d:38:a9:a1:2b:e1:f5:
27:53:f7:ec:f6:72:b1:b7:89:92:84:7d:17:5c:5f:52:ea:c2:
e6:87:6f:4e:02:51:85:67:e2:ca:ab:99:bf:b0:20:32:c1:91:
20:99:46:8d:ce:97:f3:2b:60:c8:fa:ce:af:36:82:97:bb:c7:
23:4e:86:f6:af:be:90:6f:58:ba:f5:76:97:56:38:66:f3:83:
30:1b:42:e1:4d:6b:53:e2:09:83:6a:2a:ea:cb:27:dc:5c:87:
11:a3:96:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa92VY4GxWr/+/VLN0OPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh
YWNhN2IwHhcNMjYwNzIzMTAwMTAxWhcNMjYwNzI0MTAwMTAxWjAzMTEwLwYDVQQD
EyhjZmM0ZTFiZjIzZTNjOTNmYWU4OGEzMmVjNjU4ZjAyYjAwMTllNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51YMwzsRyCPBW5UaRZioMOiBet9O
KR7YpuwXIiqrXvfx06PF7NM97pjU1C9UnUu4ym1rGXiQIDQ9ER/3MjWz2hiTuYvT
9Tr6GhgCXvtyglpdRH0Uk6Elhl1FqQlGWxYLZXcX36AKtegrwMX6jKKFAGjnsYjN
95XJKS6Skp23mMNelBT2d55Xf5u4r7Gmcm3dEss7SRX64girmJdXAwBGVIkt8eM8
OZG8wjY9GnrTnH+CX6R0BGf7p8/lF49ACyHSMfWEv6INc1wumWMedpirObTKkYjV
vXyc78kuwxyDWWUUeezo3ACGysu2cUwoB4wzk3CswPHdl0Ni7BsJ00YVEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/E4b8j48k/roijLsZY8CsAGeSeMB8GA1UdIwQY
MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt
ODFjOGNlNzUwMTI0LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0
LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9XdVxp2
oEhqhGfxRAjmS0gEuaXB+wNzytMUhvjXg1lInuJPVyaLRHCkRsFVpDElxal/v2Ys
8veLD6zYAiJOyZFQNHf2GdwwJlOISsTzuVD5oZIkFsnLMOET27dl2PeI9MhHXwDi
7p2jCaEtpHtH0IL2X6E0X6eGK41DmnJgmspicXwR+yog/CMQz40rSDvPHr5TQ5B0
kwIdTDoNOKmhK+H1J1P37PZysbeJkoR9F1xfUurC5odvTgJRhWfiyquZv7AgMsGR
IJlGjc6X8ytgyPrOrzaCl7vHI06G9q++kG9YuvV2l1Y4ZvODMBtC4U1rU+IJg2oq
6ssn3FyHEaOWsQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:04 2026 by rpki-client