Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: MK/TS4l2IsczEsiBwKv8CC18taXQPtaPnpC3otfi8zA=
Subject key identifier: A9:59:62:06:96:24:46:72:F4:19:EC:65:BE:3B:F8:B4:09:06:67:9F
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 019F9580C7659A82E60ADFDB8253C1087CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 17A5
Signing time: Fri 24 Jul 2026 19:01:12 +0000
Manifest this update: Fri 24 Jul 2026 19:01:12 +0000
Manifest next update: Sat 25 Jul 2026 19:01:12 +0000
Files and hashes: 1: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (hash: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs=)
2: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: 5GxwLfTUiu1GSq8VD4VdA4dcg1Ykjd6/2rHDhBvdlqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:c7:65:9a:82:e6:0a:df:db:82:53:c1:08:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: Jul 24 19:01:12 2026 GMT
Not After : Jul 25 19:01:12 2026 GMT
Subject: CN=a959620696244672f419ec65be3bf8b40906679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:83:e9:ee:6e:09:04:e6:08:1b:49:70:fa:
70:9d:76:80:24:14:b4:80:68:16:bb:91:96:dd:0f:
f5:ec:e4:79:cc:96:8e:e1:96:66:b9:d8:93:ed:96:
68:8a:b0:9e:04:86:c1:0a:30:03:e1:11:8d:48:ed:
ce:47:0b:e0:c4:98:8d:c0:15:23:e5:47:14:fc:59:
94:7e:55:0d:04:a0:a9:a4:3e:3b:59:68:41:50:d5:
50:54:3a:a5:7a:15:b0:51:ac:90:dd:d8:ea:05:5f:
55:50:1e:b9:8f:66:41:cc:ce:e2:c8:fe:f8:7b:43:
81:ca:4b:f9:ad:ed:d0:33:d7:c0:ad:3a:7a:29:78:
ec:8f:5e:47:69:16:a5:c2:56:ec:9f:f8:d7:fd:8f:
a2:f8:c3:04:d8:6c:da:4e:2c:75:36:13:07:c3:c0:
01:ac:50:f8:9b:db:ac:4a:14:b2:b2:f3:26:41:8a:
0c:11:9e:40:2d:0f:17:a4:cd:7b:bb:61:4e:f5:1c:
49:7c:b8:11:3d:d6:34:ca:2c:87:36:1e:62:b3:f8:
8a:ad:9a:3a:01:07:d1:7a:28:ac:b3:41:87:5e:21:
96:2b:e8:22:70:44:71:74:2b:29:a6:fb:2a:4a:af:
17:75:d9:80:8e:28:b8:88:8c:b5:fa:cf:e1:5a:0f:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:59:62:06:96:24:46:72:F4:19:EC:65:BE:3B:F8:B4:09:06:67:9F
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a6:d8:92:de:8a:cd:b3:34:1b:e7:f8:90:cb:74:e0:c2:94:
a3:1f:62:fd:1d:74:f8:c1:07:74:13:09:09:2e:e6:fa:c1:ed:
39:dc:1e:d1:97:d2:d2:e0:ee:d2:0a:21:7f:0b:ba:4e:8e:b4:
21:d0:3c:50:0a:48:1b:02:2a:bb:e7:33:33:75:26:de:88:38:
b1:a0:cb:a5:b7:25:9b:5e:dd:0a:a2:bb:b9:cf:72:91:33:53:
b9:84:94:b1:e9:17:36:9d:8b:c7:86:9f:53:94:9e:18:49:b4:
f1:80:b1:e3:63:75:0c:de:ff:e2:14:35:be:35:be:1a:d0:ea:
e1:c9:c8:73:85:79:56:d0:77:00:d9:18:f1:74:93:f7:83:05:
82:08:5c:b8:3e:02:d2:65:4c:5f:38:ea:51:24:8b:64:8e:a3:
69:fb:6b:da:db:d6:f3:4d:42:c3:03:5d:64:2f:a7:25:e9:f1:
84:7e:35:ce:5b:ea:20:9e:cb:28:00:be:64:7f:6f:0c:90:f4:
18:14:da:fa:34:1a:13:ec:01:b1:1b:06:3a:e6:bf:25:76:69:
4b:62:5a:d3:cd:e5:16:a6:5d:40:4d:83:b9:7c:23:74:bc:5c:
45:c4:d9:e8:53:51:1e:da:02:8d:4a:54:3b:dc:20:ce:91:7b:
01:20:a7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgMdlmoLmCt/bglPBCHzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmFhODkxMzJkMmE2ODRkOGQyYTFhM2Y3ZTQwZjIyMzQ2
MzZmMzgwHhcNMjYwNzI0MTkwMTEyWhcNMjYwNzI1MTkwMTEyWjAzMTEwLwYDVQQD
EyhhOTU5NjIwNjk2MjQ0NjcyZjQxOWVjNjViZTNiZjhiNDA5MDY2NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyiD6e5uCQTmCBtJcPpwnXaAJBS0
gGgWu5GW3Q/17OR5zJaO4ZZmudiT7ZZoirCeBIbBCjAD4RGNSO3ORwvgxJiNwBUj
5UcU/FmUflUNBKCppD47WWhBUNVQVDqlehWwUayQ3djqBV9VUB65j2ZBzM7iyP74
e0OBykv5re3QM9fArTp6KXjsj15HaRalwlbsn/jX/Y+i+MME2GzaTix1NhMHw8AB
rFD4m9usShSysvMmQYoMEZ5ALQ8XpM17u2FO9RxJfLgRPdY0yiyHNh5is/iKrZo6
AQfReiiss0GHXiGWK+gicERxdCsppvsqSq8XddmAjii4iIy1+s/hWg/bdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlZYgaWJEZy9BnsZb47+LQJBmefMB8GA1UdIwQY
MBaAFGJqqJEy0qaE2NKho/fkDyI0Y284MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTIt
MjkyNmZjNWY2MWI3LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTItMjkyNmZjNWY2MWI3
LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqbYkt6K
zbM0G+f4kMt04MKUox9i/R10+MEHdBMJCS7m+sHtOdwe0ZfS0uDu0gohfwu6To60
IdA8UApIGwIqu+czM3Um3og4saDLpbclm17dCqK7uc9ykTNTuYSUsekXNp2Lx4af
U5SeGEm08YCx42N1DN7/4hQ1vjW+GtDq4cnIc4V5VtB3ANkY8XST94MFgghcuD4C
0mVMXzjqUSSLZI6jaftr2tvW801CwwNdZC+nJenxhH41zlvqIJ7LKAC+ZH9vDJD0
GBTa+jQaE+wBsRsGOua/JXZpS2Ja083lFqZdQE2DuXwjdLxcRcTZ6FNRHtoCjUpU
O9wgzpF7ASCnag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:58 2026 by rpki-client