Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier: 5an0taKOP8c6aUBo9pS8p0QBwocKYSrkS0F4ZSx2HSE=
Subject key identifier: 96:1A:74:56:11:CC:27:1C:7C:78:2C:2F:4F:30:70:10:FE:65:83:AC
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019FAAF62D9CACB28361F2FED4720D61DAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number: 0854
Signing time: Tue 28 Jul 2026 23:01:27 +0000
Manifest this update: Tue 28 Jul 2026 23:01:27 +0000
Manifest next update: Wed 29 Jul 2026 23:01:27 +0000
Files and hashes: 1: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (hash: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A=)
2: 7hNT6aWpNmqplaBo3KoesTfxY78.roa (hash: HsnDzmhqGmnh/ZVxmNwmNc6rCmF6A3shjZVm3dawEEk=)
3: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=)
4: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: cvEIaBfXra0FdUKQSaMf/zSnwVtm4gN8H8qENE9mEMk=)
5: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=)
6: avi7DMJKeOctm2dYd02bLrCit3I.roa (hash: nFZFKEEyrubZa1X0U5AMhYHfVMMCE2ecKi32d2MPqUU=)
7: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (hash: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2d:9c:ac:b2:83:61:f2:fe:d4:72:0d:61:da:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jul 28 23:01:27 2026 GMT
Not After : Jul 29 23:01:27 2026 GMT
Subject: CN=961a745611cc271c7c782c2f4f307010fe6583ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:15:a0:16:ea:26:40:90:91:51:c7:9a:a6:
66:01:2f:41:55:a4:e4:7b:42:18:b2:b6:46:e4:5f:
6f:fe:e2:f2:2b:b4:95:5e:75:bd:c6:d4:3a:d1:06:
6a:3e:6f:a2:26:53:13:2c:78:b0:48:22:4e:3c:0a:
74:24:44:88:40:0b:df:39:2b:d4:3c:28:4a:a7:00:
21:8f:f4:10:6c:09:43:ec:fb:05:bb:03:9c:21:d2:
ed:57:19:40:f4:5b:77:36:a7:c0:37:f3:df:da:ff:
c3:b8:da:41:83:3c:3e:21:e5:33:fa:4a:be:dc:17:
30:51:ea:12:7e:44:7a:a0:8c:b1:b7:05:eb:42:a2:
f9:76:f9:3b:8e:7d:c0:26:a0:d8:ca:1c:22:19:cf:
fe:3c:c9:11:b1:52:3d:2b:04:9a:d1:c2:ab:f6:17:
93:99:c7:3c:52:4f:af:02:cf:ed:21:e1:78:66:23:
aa:36:51:70:31:76:07:96:d9:e3:c3:7b:9f:c6:ea:
ee:55:48:ee:94:2b:52:21:cd:5f:b9:bc:a5:ee:f2:
ce:83:b8:26:f1:7b:83:b9:7a:ca:c6:0a:4c:1c:71:
f4:a1:f4:05:1c:4a:5f:7e:56:90:c6:2c:11:f7:cd:
e5:62:f9:b5:a5:11:cb:2d:33:24:2f:fc:34:8d:29:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:74:56:11:CC:27:1C:7C:78:2C:2F:4F:30:70:10:FE:65:83:AC
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:f6:44:f2:85:44:3a:3f:43:8d:3d:cf:84:0c:48:f8:81:
9d:94:65:a3:af:c1:7f:fc:ec:08:a8:8d:e4:c3:04:4d:c5:41:
00:22:57:71:e9:b0:a9:26:e8:ce:89:5a:53:bb:fd:43:72:66:
b6:3a:4c:a0:fe:fa:e1:a5:11:42:8f:fe:49:72:86:63:98:4b:
b6:7a:49:34:20:2c:c0:d6:aa:c2:b9:3f:ab:72:2d:4a:da:10:
53:1f:71:e7:da:38:4a:58:59:bc:d1:57:09:15:c4:77:9d:39:
c5:c5:0a:c2:f8:21:08:c7:31:a0:33:c7:5f:ce:09:3d:10:14:
ce:0e:64:d4:51:b4:2f:62:b5:b5:08:c2:99:4e:2e:42:2a:2c:
92:e5:4a:b8:4b:4e:70:59:72:d8:57:b8:3a:d9:87:1a:d6:09:
79:9d:48:d3:1a:70:54:33:b9:e0:c8:ac:08:73:9d:46:ae:3c:
51:af:7d:55:bf:52:d7:4c:33:ef:8a:86:37:47:7d:5f:98:75:
72:69:63:53:0a:c8:27:06:6e:6c:9c:ce:c6:fd:27:ee:a6:d8:
10:ed:b4:28:ea:0d:9b:68:dc:19:c8:ef:99:e4:27:7c:4a:05:
96:cb:61:18:70:0e:4c:59:c8:30:57:ae:27:9b:42:ff:28:04:
5d:53:ca:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9i2crLKDYfL+1HINYdrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjYwNzI4MjMwMTI3WhcNMjYwNzI5MjMwMTI3WjAzMTEwLwYDVQQD
Eyg5NjFhNzQ1NjExY2MyNzFjN2M3ODJjMmY0ZjMwNzAxMGZlNjU4M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspIVoBbqJkCQkVHHmqZmAS9BVaTk
e0IYsrZG5F9v/uLyK7SVXnW9xtQ60QZqPm+iJlMTLHiwSCJOPAp0JESIQAvfOSvU
PChKpwAhj/QQbAlD7PsFuwOcIdLtVxlA9Ft3NqfAN/Pf2v/DuNpBgzw+IeUz+kq+
3BcwUeoSfkR6oIyxtwXrQqL5dvk7jn3AJqDYyhwiGc/+PMkRsVI9KwSa0cKr9heT
mcc8Uk+vAs/tIeF4ZiOqNlFwMXYHltnjw3ufxuruVUjulCtSIc1fubyl7vLOg7gm
8XuDuXrKxgpMHHH0ofQFHEpfflaQxiwR983lYvm1pRHLLTMkL/w0jSkaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYadFYRzCccfHgsL08wcBD+ZYOsMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+r2RPKF
RDo/Q409z4QMSPiBnZRlo6/Bf/zsCKiN5MMETcVBACJXcemwqSbozolaU7v9Q3Jm
tjpMoP764aURQo/+SXKGY5hLtnpJNCAswNaqwrk/q3ItStoQUx9x59o4SlhZvNFX
CRXEd505xcUKwvghCMcxoDPHX84JPRAUzg5k1FG0L2K1tQjCmU4uQioskuVKuEtO
cFly2Fe4OtmHGtYJeZ1I0xpwVDO54MisCHOdRq48Ua99Vb9S10wz74qGN0d9X5h1
cmljUwrIJwZubJzOxv0n7qbYEO20KOoNm2jcGcjvmeQnfEoFlsthGHAOTFnIMFeu
J5tC/ygEXVPKtQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:30 2026 by rpki-client