Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: ffRnZ9TDQPwokkiW0dbv45mYBudEzeoRqOXV/TH/+8w=
Subject key identifier: 22:51:6A:6D:F3:79:9C:EE:B7:73:11:30:EA:06:62:98:90:D6:42:2A
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019F921126E19E5569FAEC5B69749A42BC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:25 +0000
Manifest this update: Fri 24 Jul 2026 03:00:25 +0000
Manifest next update: Sat 25 Jul 2026 03:00:25 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: OTxgZWItXGqUlRf+99VCqWOXP7e4tJH959yxCYCIES8=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:26:e1:9e:55:69:fa:ec:5b:69:74:9a:42:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Jul 24 03:00:25 2026 GMT
Not After : Jul 25 03:00:25 2026 GMT
Subject: CN=22516a6df3799ceeb7731130ea06629890d6422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:47:1d:98:6f:d9:16:4a:d9:92:ab:a4:99:
fe:6c:99:87:2f:fa:7f:3f:95:98:67:dd:f3:b3:56:
86:fa:b5:46:4e:ab:df:d0:54:6c:b1:49:1e:7c:0e:
9f:fc:e4:7a:6b:37:09:e4:de:16:25:b8:c3:ff:bf:
2e:e1:11:c9:ed:4c:ed:6a:8b:4e:18:15:38:d1:a1:
1c:e1:38:75:af:bb:69:02:5e:83:a8:e2:2b:ed:6d:
de:cc:4d:31:53:62:bd:a3:7d:e8:9c:56:dc:29:2e:
ed:b3:ca:3b:60:0a:d6:ac:48:11:c8:64:d0:fa:76:
9e:78:a3:7d:96:16:ce:4d:25:9f:ac:45:1d:f7:93:
f5:0c:2e:e4:8f:af:73:df:54:0c:ac:ef:f0:58:1d:
ac:76:1f:64:59:ec:ef:43:7e:df:86:3f:16:6c:e8:
69:9a:70:2f:06:d3:7d:85:d9:8e:8b:f7:af:9b:14:
e7:2b:6d:e6:fb:4f:f6:ed:97:4c:9a:2d:c2:14:55:
c0:70:b4:30:df:19:71:59:3d:1a:71:f5:c2:76:a2:
0d:53:e1:40:bf:36:33:a4:5b:8e:c5:2c:06:c7:c2:
75:bd:f3:7e:0d:ec:3d:6c:90:02:f6:70:1e:4f:af:
e0:8f:45:30:b1:91:96:7b:c4:34:47:7c:51:a1:94:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:6A:6D:F3:79:9C:EE:B7:73:11:30:EA:06:62:98:90:D6:42:2A
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:ba:c0:ac:8a:89:64:c6:c5:88:27:eb:1d:f0:d2:e1:c3:
a8:b3:fc:76:1b:99:fb:b7:e6:8c:b9:cc:39:f1:e2:2f:48:b6:
ff:5a:be:e0:3f:ab:15:14:07:54:b2:a9:03:5d:ed:a4:15:55:
f0:49:ae:06:6f:e2:56:f8:f4:ff:eb:d6:47:18:0d:75:a7:05:
03:1d:9e:67:41:d4:fd:74:5d:37:ed:0a:87:8d:38:30:54:7d:
e5:30:6a:28:a0:a8:ae:5f:56:52:0a:83:07:1d:64:e2:89:b6:
c2:60:08:56:bd:66:56:f1:ae:60:54:b7:1c:9a:44:c9:b0:58:
04:0d:99:12:93:7b:63:28:7a:9b:d8:0b:ac:17:06:47:f7:b1:
78:df:0e:08:d8:13:97:bb:d4:31:25:87:01:f1:a5:7c:c7:00:
b7:4a:ba:9d:a7:69:ea:61:54:ba:bf:63:e8:82:35:fa:b4:d4:
8d:d9:a6:cd:0d:0d:2d:5f:88:9d:5a:47:81:57:8a:52:f3:30:
06:36:fe:0f:5c:5d:d5:3e:78:07:25:57:b4:f0:55:ce:33:be:
a4:3c:a2:f8:aa:43:b7:42:8e:ed:e4:cc:dc:40:95:cc:ed:cd:
10:8a:97:65:b7:ac:e1:93:78:4f:e0:56:76:3a:03:12:2a:8b:
53:e1:65:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SESbhnlVp+uxbaXSaQryIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjYwNzI0MDMwMDI1WhcNMjYwNzI1MDMwMDI1WjAzMTEwLwYDVQQD
EygyMjUxNmE2ZGYzNzk5Y2VlYjc3MzExMzBlYTA2NjI5ODkwZDY0MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKtHHZhv2RZK2ZKrpJn+bJmHL/p/
P5WYZ93zs1aG+rVGTqvf0FRssUkefA6f/OR6azcJ5N4WJbjD/78u4RHJ7UztaotO
GBU40aEc4Th1r7tpAl6DqOIr7W3ezE0xU2K9o33onFbcKS7ts8o7YArWrEgRyGTQ
+naeeKN9lhbOTSWfrEUd95P1DC7kj69z31QMrO/wWB2sdh9kWezvQ37fhj8WbOhp
mnAvBtN9hdmOi/evmxTnK23m+0/27ZdMmi3CFFXAcLQw3xlxWT0acfXCdqINU+FA
vzYzpFuOxSwGx8J1vfN+Dew9bJAC9nAeT6/gj0UwsZGWe8Q0R3xRoZRI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJRam3zeZzut3MRMOoGYpiQ1kIqMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqK6wKyK
iWTGxYgn6x3w0uHDqLP8dhuZ+7fmjLnMOfHiL0i2/1q+4D+rFRQHVLKpA13tpBVV
8EmuBm/iVvj0/+vWRxgNdacFAx2eZ0HU/XRdN+0Kh404MFR95TBqKKCorl9WUgqD
Bx1k4om2wmAIVr1mVvGuYFS3HJpEybBYBA2ZEpN7Yyh6m9gLrBcGR/exeN8OCNgT
l7vUMSWHAfGlfMcAt0q6nadp6mFUur9j6II1+rTUjdmmzQ0NLV+InVpHgVeKUvMw
Bjb+D1xd1T54ByVXtPBVzjO+pDyi+KpDt0KO7eTM3ECVzO3NEIqXZbes4ZN4T+BW
djoDEiqLU+FlCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:33 2026 by rpki-client