Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: QXPd7F0gWx3wbUCoGsLkbd5FyYQXl1i2GOP0XrYBNkQ=
Subject key identifier: 82:94:A1:5F:3B:18:ED:F7:7B:CF:00:AA:FD:55:38:6E:96:D3:F0:EA
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 019F91A36001B67D709B81D41EA60754D3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 01:00:30 +0000
Manifest this update: Fri 24 Jul 2026 01:00:30 +0000
Manifest next update: Sat 25 Jul 2026 01:00:30 +0000
Files and hashes: 1: 3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa (hash: Zkr3qlEk5NZQXDe7nwoX/wyvk4zh4il5FQTwuh5WfIw=)
2: cpTfXtYH4v1rSjqKtu9ZqpUx3xM.roa (hash: ovwDXS3yKtACozUh0/9y9dib/PgNmZTku682Xe84kxM=)
3: yCVmIRzNa3tIF_MU4qrOr7DResw.roa (hash: obCtvPuMFr0+7aVoRxpK/YudJ9U9WEay72ENhR3GLLg=)
4: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: xRx0cq/nE5FUn+fypTqqcChzQwml387PS0QF0yeefOM=)
5: yzMl80kUPFPXCVyuhTRWq2l6-PU.roa (hash: 10HhilhYAwZngg7Yfm2XzCkVn++CZDGvggSHZV4Fd0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:60:01:b6:7d:70:9b:81:d4:1e:a6:07:54:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jul 24 01:00:30 2026 GMT
Not After : Jul 25 01:00:30 2026 GMT
Subject: CN=8294a15f3b18edf77bcf00aafd55386e96d3f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:75:af:2b:a2:f8:4f:7e:36:09:38:62:ca:
fb:a9:9c:09:2c:70:83:d5:99:c7:e6:69:1b:ba:0e:
7b:25:53:4b:74:6f:08:bc:62:3c:05:46:44:a2:83:
21:2c:a1:d7:9e:67:eb:b3:ea:32:d1:ec:a4:bb:72:
17:53:52:71:4c:d3:f4:72:25:49:1f:9c:d4:d0:6c:
6f:d8:f6:b5:63:c5:48:5c:4d:38:a9:f0:66:20:f9:
85:64:9c:e6:80:11:d3:86:f7:56:e5:78:4b:2c:a7:
3b:50:49:fb:3a:80:84:68:db:ff:4f:ef:b1:c1:a3:
59:9c:3d:ae:16:c2:00:b0:bc:64:9d:3c:94:a5:28:
b8:a8:40:6c:b1:74:63:7e:13:ff:94:15:83:46:55:
02:da:d1:53:72:ef:b6:6a:c1:97:e4:16:18:3d:2b:
c7:e0:c0:dc:a6:00:dd:4b:e4:f1:3e:71:02:5d:97:
98:18:c1:5d:a4:01:47:32:ac:db:f2:8a:20:c7:57:
14:a7:83:c5:6b:52:f0:cf:5f:c7:9a:20:23:50:29:
5d:fa:55:b5:7b:07:88:a1:86:3c:89:cc:3b:d9:18:
4c:47:db:23:86:e6:1b:f0:33:f6:89:12:fd:32:85:
2e:34:d3:bc:39:dd:ca:3b:4a:37:0a:ff:10:5f:b2:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:A1:5F:3B:18:ED:F7:7B:CF:00:AA:FD:55:38:6E:96:D3:F0:EA
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:5d:cd:51:23:6e:d1:7f:16:21:a2:24:f8:8a:94:ae:b5:
0b:03:88:d8:a0:20:65:e4:e5:1f:89:42:ee:61:32:89:b3:3f:
7e:60:0f:59:d2:50:c0:b7:d1:d0:48:72:3f:95:c4:a7:54:e4:
d0:da:61:41:17:5e:84:1d:1e:23:16:8c:ee:fb:e0:63:9a:c6:
b2:48:9c:06:90:15:3e:8a:dd:09:41:97:8d:70:60:f9:0e:51:
cc:60:04:11:31:11:d0:49:70:4e:e9:03:47:3e:63:7e:13:9e:
7d:fa:73:bd:f6:b1:bd:d9:90:97:24:dd:05:cc:0a:ee:2d:4b:
c8:e9:f0:3d:78:37:57:b5:a6:18:71:4f:df:15:eb:ef:f5:6f:
65:30:d4:85:ed:c9:c7:d2:0d:a1:0e:bc:73:12:ac:d1:eb:e8:
ef:ad:23:2e:fb:9d:29:50:ee:b6:ca:ea:74:4c:7b:e8:f5:c9:
24:db:62:9a:f5:41:c7:3b:fd:6f:4d:90:dd:49:b5:6e:27:af:
37:14:24:67:f7:fd:43:ac:19:bc:79:a7:88:be:24:17:a2:bd:
77:7a:8b:10:f1:12:d9:56:2f:0a:d1:b2:df:1f:4c:c7:6f:9c:
ca:d3:6c:aa:bc:4b:81:be:f9:08:14:a1:12:10:ec:39:a6:2f:
f3:78:73:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro2ABtn1wm4HUHqYHVNPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl
MjRhZjkwHhcNMjYwNzI0MDEwMDMwWhcNMjYwNzI1MDEwMDMwWjAzMTEwLwYDVQQD
Eyg4Mjk0YTE1ZjNiMThlZGY3N2JjZjAwYWFmZDU1Mzg2ZTk2ZDNmMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVJ1ryui+E9+Ngk4Ysr7qZwJLHCD
1ZnH5mkbug57JVNLdG8IvGI8BUZEooMhLKHXnmfrs+oy0eyku3IXU1JxTNP0ciVJ
H5zU0Gxv2Pa1Y8VIXE04qfBmIPmFZJzmgBHThvdW5XhLLKc7UEn7OoCEaNv/T++x
waNZnD2uFsIAsLxknTyUpSi4qEBssXRjfhP/lBWDRlUC2tFTcu+2asGX5BYYPSvH
4MDcpgDdS+TxPnECXZeYGMFdpAFHMqzb8oogx1cUp4PFa1Lwz1/HmiAjUCld+lW1
eweIoYY8icw72RhMR9sjhuYb8DP2iRL9MoUuNNO8Od3KO0o3Cv8QX7L5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKUoV87GO33e88Aqv1VOG6W0/DqMB8GA1UdIwQY
MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt
OTUzMWQyNGUwNjEwLzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw
LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr1dzVEj
btF/FiGiJPiKlK61CwOI2KAgZeTlH4lC7mEyibM/fmAPWdJQwLfR0EhyP5XEp1Tk
0NphQRdehB0eIxaM7vvgY5rGskicBpAVPordCUGXjXBg+Q5RzGAEETER0ElwTukD
Rz5jfhOeffpzvfaxvdmQlyTdBcwK7i1LyOnwPXg3V7WmGHFP3xXr7/VvZTDUhe3J
x9INoQ68cxKs0evo760jLvudKVDutsrqdEx76PXJJNtimvVBxzv9b02Q3Um1biev
NxQkZ/f9Q6wZvHmniL4kF6K9d3qLEPES2VYvCtGy3x9Mx2+cytNsqrxLgb75CBSh
EhDsOaYv83hz3w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:22:22 2026 by rpki-client