Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: ibcbNyV4tT4IOgC8oW6Q5krL+WjP1YDL2trHS8tFNVM=
Subject key identifier: 44:71:A1:31:69:27:F0:54:A7:E3:1D:55:CC:23:DA:DA:6C:B1:B9:FB
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019EC292AB3E141B7D00E86BFA5891866AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 20:00:52 +0000
Manifest this update: Sat 13 Jun 2026 20:00:52 +0000
Manifest next update: Sun 14 Jun 2026 20:00:52 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: gw8+H4QLdA+78nkjpEfWS9UTmPMvaHcH9GKy8J8mpt0=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:ab:3e:14:1b:7d:00:e8:6b:fa:58:91:86:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jun 13 20:00:52 2026 GMT
Not After : Jun 14 20:00:52 2026 GMT
Subject: CN=4471a1316927f054a7e31d55cc23dada6cb1b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:23:1c:65:52:5d:28:77:1c:17:a7:ae:e9:
b0:e3:67:e7:18:08:a4:52:c6:d7:fc:39:59:54:70:
ce:6e:51:e2:66:1a:76:19:7e:ee:66:25:aa:0f:c1:
23:92:86:79:ef:f9:0c:79:09:d7:76:3a:f8:28:d6:
a3:94:76:6f:05:6d:70:7b:d6:43:b5:ed:d8:87:1a:
34:56:fa:d5:41:90:06:14:fd:67:45:11:34:06:3d:
ec:b6:cb:26:dc:f1:58:97:80:a1:d7:d8:85:de:3d:
6f:7d:06:c4:03:25:93:d0:a1:d7:ce:8d:f2:f1:18:
8b:69:fb:93:d4:5e:62:d8:18:71:14:57:04:53:9c:
09:e9:71:4d:56:26:34:03:b8:7e:dc:c3:f1:45:bd:
4e:51:3f:5e:7e:33:06:9b:ec:4d:25:69:56:5c:c7:
a6:b8:8f:84:39:02:b7:fb:41:65:3e:73:cc:bd:30:
96:ac:3e:c4:4f:42:96:98:85:20:00:af:b6:f4:46:
61:9f:9d:d6:ab:0a:1f:bb:0e:7d:37:9d:e7:69:85:
f9:10:50:18:dd:27:76:61:1d:be:74:68:f9:0d:7b:
86:1f:cf:34:68:f7:87:21:a2:d0:4c:5a:aa:3e:35:
09:c5:7f:db:d2:7d:e6:69:92:02:3a:b0:f4:7e:c8:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:71:A1:31:69:27:F0:54:A7:E3:1D:55:CC:23:DA:DA:6C:B1:B9:FB
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:b4:d7:04:ad:52:54:79:60:5a:54:04:17:f8:25:b2:12:
d5:7e:9e:e1:db:5a:bb:4e:8b:37:b5:39:67:c8:85:fc:36:d2:
d2:37:c7:6e:b6:22:01:0b:73:11:92:4c:e3:51:8e:7b:62:ee:
b1:d3:4e:12:4d:ea:a6:8d:d7:df:8a:31:6c:2a:ef:5c:5d:64:
f6:b3:dd:55:fd:72:62:a5:68:41:3d:d4:30:de:88:32:63:dd:
56:2e:fc:34:cf:0a:bc:a6:e5:15:08:d8:fc:c3:13:d7:f2:7e:
51:03:c7:4d:2f:d4:cf:2f:fb:50:fe:e4:9d:30:ac:10:30:9b:
10:19:8c:23:94:af:23:80:23:6c:04:d4:d5:21:6e:a6:0d:49:
83:c2:e6:46:3e:28:cb:89:e7:93:9f:f7:73:84:04:41:71:9b:
e8:57:8c:d8:1e:63:44:3a:ed:51:f3:04:19:91:3b:7b:5a:b9:
e3:1c:7b:59:6d:85:0a:e5:df:d2:a4:20:b8:d3:64:c7:62:0e:
b3:f0:cd:81:60:1c:4b:79:ba:a0:7e:84:81:ae:9a:73:cb:12:
87:61:77:45:0f:06:d7:0c:cd:4f:59:28:e1:2b:ea:b9:2e:64:
6e:61:28:1f:c6:1f:0c:ac:54:05:e5:5a:c7:c6:b5:7e:b9:30:
8c:45:34:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ckqs+FBt9AOhr+liRhmriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0
Y2YxNmYwHhcNMjYwNjEzMjAwMDUyWhcNMjYwNjE0MjAwMDUyWjAzMTEwLwYDVQQD
Eyg0NDcxYTEzMTY5MjdmMDU0YTdlMzFkNTVjYzIzZGFkYTZjYjFiOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwjHGVSXSh3HBenrumw42fnGAik
UsbX/DlZVHDOblHiZhp2GX7uZiWqD8EjkoZ57/kMeQnXdjr4KNajlHZvBW1we9ZD
te3Yhxo0VvrVQZAGFP1nRRE0Bj3stssm3PFYl4Ch19iF3j1vfQbEAyWT0KHXzo3y
8RiLafuT1F5i2BhxFFcEU5wJ6XFNViY0A7h+3MPxRb1OUT9efjMGm+xNJWlWXMem
uI+EOQK3+0FlPnPMvTCWrD7ET0KWmIUgAK+29EZhn53Wqwofuw59N53naYX5EFAY
3Sd2YR2+dGj5DXuGH880aPeHIaLQTFqqPjUJxX/b0n3maZICOrD0fsgdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERxoTFpJ/BUp+MdVcwj2tpssbn7MB8GA1UdIwQY
MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt
ZjE1N2MzMjk0ZDQwLzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw
LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI+01wSt
UlR5YFpUBBf4JbIS1X6e4dtau06LN7U5Z8iF/DbS0jfHbrYiAQtzEZJM41GOe2Lu
sdNOEk3qpo3X34oxbCrvXF1k9rPdVf1yYqVoQT3UMN6IMmPdVi78NM8KvKblFQjY
/MMT1/J+UQPHTS/Uzy/7UP7knTCsEDCbEBmMI5SvI4AjbATU1SFupg1Jg8LmRj4o
y4nnk5/3c4QEQXGb6FeM2B5jRDrtUfMEGZE7e1q54xx7WW2FCuXf0qQguNNkx2IO
s/DNgWAcS3m6oH6Ega6ac8sSh2F3RQ8G1wzNT1ko4SvquS5kbmEoH8YfDKxUBeVa
x8a1frkwjEU0Ow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:31:27 2026 by rpki-client