Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: TH26jJ8yfudNxnMz2mjQu78Zy94DXiDRkIYzjCPmR3A=
Subject key identifier: AE:D3:97:35:30:EC:01:2F:EA:1E:23:B3:19:CD:12:3B:3C:AF:7D:1B
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019F92EDA26F9E313CD6A4C62B62B611A1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 09B0
Signing time: Fri 24 Jul 2026 07:01:14 +0000
Manifest this update: Fri 24 Jul 2026 07:01:14 +0000
Manifest next update: Sat 25 Jul 2026 07:01:14 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: XK8EVobviG52FHoOmrR6vkIWiNFkHJmKC/XC5Bjs060=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a2:6f:9e:31:3c:d6:a4:c6:2b:62:b6:11:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jul 24 07:01:14 2026 GMT
Not After : Jul 25 07:01:14 2026 GMT
Subject: CN=aed3973530ec012fea1e23b319cd123b3caf7d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:69:93:e7:33:57:8f:73:a3:3e:51:66:cd:
9b:a9:91:62:60:93:cd:ce:48:45:b1:b0:0e:5e:9c:
81:0e:78:5c:40:b7:e4:51:d2:6d:7e:7f:33:2d:89:
8a:fa:17:ca:29:cb:70:46:7d:5f:fe:a5:39:4f:ff:
3f:a1:38:85:4f:41:17:22:b9:26:96:0e:d5:f8:64:
ac:82:de:9d:83:36:53:cc:c0:79:cd:ca:69:a4:09:
90:8e:10:9c:dd:8b:0a:74:a9:20:d6:93:49:90:95:
ae:9e:92:af:bc:f5:87:5d:b7:63:4d:66:3a:62:13:
b4:b3:1d:79:2a:fa:c8:43:9b:c5:df:82:3e:37:22:
05:7b:19:2c:f2:52:96:7b:3a:f5:68:9b:99:fb:65:
7f:7b:d9:c0:9d:2e:22:51:32:e4:71:bc:2e:30:fa:
ad:69:cc:f4:1f:7f:56:18:e5:1c:64:1e:2f:1f:d7:
41:1c:6e:5d:55:6b:56:04:68:75:bc:bd:9e:9c:2c:
83:50:90:76:d3:f5:7d:77:8e:21:db:c0:99:44:36:
f6:b4:03:8f:7e:d9:ad:52:c8:cf:46:48:79:0d:52:
cb:5c:2c:29:11:5f:4b:4b:7a:6a:c1:08:18:a6:e3:
bd:86:39:9b:ec:52:ed:36:29:be:42:62:dc:3c:55:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:97:35:30:EC:01:2F:EA:1E:23:B3:19:CD:12:3B:3C:AF:7D:1B
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:22:dc:c8:9e:6c:e2:08:0f:81:52:8e:9b:0b:8a:c4:1b:
7c:0f:63:01:5b:1c:ac:89:31:01:e9:27:8a:0d:65:9a:24:af:
2d:28:97:ec:fb:ce:ed:dd:5d:d6:9a:87:c4:07:ce:34:98:93:
b8:a8:b9:e0:a8:04:9f:49:46:23:4b:08:f3:99:97:3b:09:3d:
f6:57:4d:da:45:63:e5:3c:f9:6c:35:7f:e5:21:a5:40:a7:27:
4c:d2:7d:6d:79:77:fa:e6:26:00:9a:3e:e6:af:4d:5f:76:35:
b1:5c:57:43:ac:26:6a:c4:ef:13:bc:77:d8:96:cb:f3:20:34:
14:4e:c3:ed:c2:ac:d8:02:56:ae:55:f1:8d:2b:41:cd:69:e7:
47:be:ea:d7:a9:e5:57:9b:ed:36:ec:8d:65:da:e8:fe:13:07:
6e:b0:d0:3f:37:35:b6:76:1e:70:7d:d6:ab:c1:cd:d6:e4:a5:
98:7f:46:ca:ef:f0:9d:32:fa:2d:45:57:59:40:6b:dc:c9:55:
ee:05:cf:48:f7:9d:2f:a6:b0:40:8c:7e:c2:7b:4b:46:e5:50:
e0:b6:d0:c4:5a:bc:06:6e:49:86:12:a5:9c:50:4d:86:29:1e:
37:1c:7e:c8:60:8a:86:6a:92:58:e0:50:01:ec:7b:3c:f0:c4:
5f:4a:ef:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7aJvnjE81qTGK2K2EaH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjYwNzI0MDcwMTE0WhcNMjYwNzI1MDcwMTE0WjAzMTEwLwYDVQQD
EyhhZWQzOTczNTMwZWMwMTJmZWExZTIzYjMxOWNkMTIzYjNjYWY3ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyppk+czV49zoz5RZs2bqZFiYJPN
zkhFsbAOXpyBDnhcQLfkUdJtfn8zLYmK+hfKKctwRn1f/qU5T/8/oTiFT0EXIrkm
lg7V+GSsgt6dgzZTzMB5zcpppAmQjhCc3YsKdKkg1pNJkJWunpKvvPWHXbdjTWY6
YhO0sx15KvrIQ5vF34I+NyIFexks8lKWezr1aJuZ+2V/e9nAnS4iUTLkcbwuMPqt
acz0H39WGOUcZB4vH9dBHG5dVWtWBGh1vL2enCyDUJB20/V9d44h28CZRDb2tAOP
ftmtUsjPRkh5DVLLXCwpEV9LS3pqwQgYpuO9hjmb7FLtNim+QmLcPFUEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7TlzUw7AEv6h4jsxnNEjs8r30bMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE84i3Mie
bOIID4FSjpsLisQbfA9jAVscrIkxAeknig1lmiSvLSiX7PvO7d1d1pqHxAfONJiT
uKi54KgEn0lGI0sI85mXOwk99ldN2kVj5Tz5bDV/5SGlQKcnTNJ9bXl3+uYmAJo+
5q9NX3Y1sVxXQ6wmasTvE7x32JbL8yA0FE7D7cKs2AJWrlXxjStBzWnnR77q16nl
V5vtNuyNZdro/hMHbrDQPzc1tnYecH3Wq8HN1uSlmH9Gyu/wnTL6LUVXWUBr3MlV
7gXPSPedL6awQIx+wntLRuVQ4LbQxFq8Bm5JhhKlnFBNhikeNxx+yGCKhmqSWOBQ
Aex7PPDEX0rvuA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:23 2026 by rpki-client