Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: CMG/K+LNs+RunPgpUGEbQ1dDXLS/MGy3o5m9IxYAevg=
Subject key identifier: EC:2A:F2:A6:A7:2D:8B:49:C2:8E:62:05:DB:BC:B9:49:CD:1D:B3:D7
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019EBF5AC936A87682073AB8A6C089D8F32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 1526
Signing time: Sat 13 Jun 2026 05:00:58 +0000
Manifest this update: Sat 13 Jun 2026 05:00:58 +0000
Manifest next update: Sun 14 Jun 2026 05:00:58 +0000
Files and hashes: 1: CkAhU5a7YSBIG-o6BpREPmYhCGg.roa (hash: h2hbUWL0eiPGTV6yTSDgvXarG/Jxpy57N3mDxnUKoJA=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: Z7MXAQIdPHTxs5Hxcyf3k5CkhHB4ThhTCpVPsL4gHHk=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c9:36:a8:76:82:07:3a:b8:a6:c0:89:d8:f3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jun 13 05:00:58 2026 GMT
Not After : Jun 14 05:00:58 2026 GMT
Subject: CN=ec2af2a6a72d8b49c28e6205dbbcb949cd1db3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:a1:79:20:8b:d1:ed:e3:62:fd:c3:33:55:
1f:e1:60:bb:6f:97:8e:a4:78:ef:6b:4b:43:e7:60:
29:ce:eb:65:59:e6:e6:5b:1f:b2:7f:59:c6:83:92:
16:b4:e2:3a:08:0e:c0:97:5c:91:5b:da:64:e6:ac:
28:19:2d:19:59:fd:58:d8:3f:23:0f:8b:72:b0:7e:
ad:f0:8d:bc:ce:f4:3b:ee:ef:fc:55:97:d6:bf:25:
94:6c:f6:83:65:45:5d:60:56:ae:8f:d9:6e:dd:94:
01:0f:3d:f2:c4:75:d2:d2:c3:7a:8f:c1:2c:ab:08:
85:16:d1:16:6b:3a:76:b8:a9:6f:cd:47:01:95:11:
66:ff:5d:9f:7f:80:18:74:a7:e8:81:de:11:67:68:
98:cd:9a:63:7c:15:f1:a4:48:66:0f:49:2b:c9:32:
d3:7f:44:8a:40:82:26:8d:85:2a:03:23:4e:f8:f4:
d6:97:08:71:48:3d:08:b6:a7:eb:95:ac:bd:bf:31:
7e:85:65:9a:5a:de:6e:49:d6:ba:47:86:b6:aa:d6:
c6:a2:af:2e:db:a2:ec:0b:c9:42:d1:33:ad:0f:7b:
cf:68:5e:a9:02:e4:88:4f:de:a8:82:0a:ea:dd:d4:
9c:d7:a7:f1:40:3a:0a:5c:66:8f:a7:8d:5d:a0:a9:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:F2:A6:A7:2D:8B:49:C2:8E:62:05:DB:BC:B9:49:CD:1D:B3:D7
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:23:74:9c:3a:a3:94:6c:42:13:ea:78:e4:a5:57:37:b9:79:
18:e0:f9:af:c3:06:e1:38:eb:8d:cd:48:aa:f8:91:f6:f7:22:
0b:28:8d:bd:6a:93:29:be:64:48:9f:fa:8c:92:25:3a:e6:55:
49:68:12:f3:4c:6f:84:c1:9b:91:a9:83:83:01:74:2f:7e:3d:
a6:c3:7f:e1:3c:0a:2b:81:9a:5c:96:65:dc:70:4c:5c:e2:9c:
09:49:17:95:24:3f:ac:76:bd:73:24:ca:40:5e:86:91:13:c6:
09:45:98:69:dd:99:dd:b9:21:48:0d:67:c5:ca:aa:73:ae:1f:
7f:df:df:15:d4:68:6c:cd:e6:80:37:2b:06:a3:a8:33:8f:80:
ca:50:f0:b6:99:b2:a5:ce:34:66:6a:d7:de:b1:14:40:a2:7a:
e8:fa:f8:1b:0a:53:c0:62:f6:b7:c6:0f:b7:aa:7e:68:72:cf:
38:06:2f:a2:c2:35:dd:fc:f5:74:89:fe:fb:6f:8e:86:89:22:
55:60:15:ae:db:d6:7c:14:d3:0e:c7:eb:be:d3:ef:24:14:74:
0e:23:c4:7d:31:ae:14:3e:36:25:d5:3b:97:8a:8f:9e:69:b8:
fb:04:7e:6d:ef:ba:6c:dc:ba:1c:47:e3:dd:d8:98:49:dd:51:
09:60:50:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wsk2qHaCBzq4psCJ2PMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx
ZDc2NzQwHhcNMjYwNjEzMDUwMDU4WhcNMjYwNjE0MDUwMDU4WjAzMTEwLwYDVQQD
EyhlYzJhZjJhNmE3MmQ4YjQ5YzI4ZTYyMDVkYmJjYjk0OWNkMWRiM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RqheSCL0e3jYv3DM1Uf4WC7b5eO
pHjva0tD52ApzutlWebmWx+yf1nGg5IWtOI6CA7Al1yRW9pk5qwoGS0ZWf1Y2D8j
D4tysH6t8I28zvQ77u/8VZfWvyWUbPaDZUVdYFauj9lu3ZQBDz3yxHXS0sN6j8Es
qwiFFtEWazp2uKlvzUcBlRFm/12ff4AYdKfogd4RZ2iYzZpjfBXxpEhmD0kryTLT
f0SKQIImjYUqAyNO+PTWlwhxSD0Itqfrlay9vzF+hWWaWt5uSda6R4a2qtbGoq8u
26LsC8lC0TOtD3vPaF6pAuSIT96oggrq3dSc16fxQDoKXGaPp41doKkWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwq8qanLYtJwo5iBdu8uUnNHbPXMB8GA1UdIwQY
MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt
ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj
LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliN0nDqj
lGxCE+p45KVXN7l5GOD5r8MG4Tjrjc1IqviR9vciCyiNvWqTKb5kSJ/6jJIlOuZV
SWgS80xvhMGbkamDgwF0L349psN/4TwKK4GaXJZl3HBMXOKcCUkXlSQ/rHa9cyTK
QF6GkRPGCUWYad2Z3bkhSA1nxcqqc64ff9/fFdRobM3mgDcrBqOoM4+AylDwtpmy
pc40ZmrX3rEUQKJ66Pr4GwpTwGL2t8YPt6p+aHLPOAYvosI13fz1dIn++2+Ohoki
VWAVrtvWfBTTDsfrvtPvJBR0DiPEfTGuFD42JdU7l4qPnmm4+wR+be+6bNy6HEfj
3diYSd1RCWBQOg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:43 2026 by rpki-client