Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: c5YpxFxu5KYPR3p4EtB7u6YWamtbTJHGM6IE7tOCwcs=
Subject key identifier: 3C:84:83:57:C7:13:01:46:EA:C8:CF:7A:A6:04:D8:2F:7A:F8:BE:AA
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019EC0DB0A85E7D2AFAF01D1AD8F9F2D79AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1886
Signing time: Sat 13 Jun 2026 12:00:40 +0000
Manifest this update: Sat 13 Jun 2026 12:00:40 +0000
Manifest next update: Sun 14 Jun 2026 12:00:40 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: 1bgzpGJpIoh21quNhdpbySsKZsRqi8ZRBApIgdxTJgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:0a:85:e7:d2:af:af:01:d1:ad:8f:9f:2d:79:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jun 13 12:00:40 2026 GMT
Not After : Jun 14 12:00:40 2026 GMT
Subject: CN=3c848357c7130146eac8cf7aa604d82f7af8beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:9e:90:85:fa:36:bb:a7:c2:8a:b7:92:23:
be:74:54:6b:48:c8:2d:17:5b:40:25:fa:c3:c1:44:
bc:3b:65:b2:37:38:46:a2:d8:f5:45:60:8c:ee:82:
c4:65:fd:43:cc:87:f4:dc:8e:c0:12:75:0b:4b:c5:
16:5d:0b:3f:48:aa:80:9b:f7:8a:b5:d3:4d:be:63:
b6:06:21:ab:61:a2:55:a0:a4:0e:2f:10:79:8f:b5:
4f:f4:58:bb:83:ac:f0:21:61:ab:fe:a8:14:ed:e7:
22:c3:06:a2:2e:91:29:d8:c5:74:dd:1b:4f:b5:e3:
5c:9e:bf:c3:69:cd:7c:04:60:60:a6:5f:51:c0:49:
6e:eb:94:c1:8b:58:3e:af:a1:f7:38:06:82:6b:3d:
2b:ce:80:c3:69:7a:e3:9d:dc:51:25:e3:8a:52:5f:
e0:46:82:14:24:8f:00:ce:91:42:94:3f:89:dd:69:
44:87:92:26:91:d4:7a:ad:2e:06:44:e2:08:f6:08:
b0:94:3f:df:8b:33:c0:60:77:1a:2c:74:23:a8:9b:
82:39:17:8e:17:4f:ce:3a:ab:ad:f3:0b:01:53:25:
05:8c:4a:d9:5d:80:68:77:a7:49:df:34:fa:73:0d:
73:b1:a6:40:4c:02:58:c7:7e:4f:da:d3:31:9d:a8:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:83:57:C7:13:01:46:EA:C8:CF:7A:A6:04:D8:2F:7A:F8:BE:AA
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:78:34:c7:4b:fe:b1:6b:69:d3:68:b6:85:86:f2:20:9d:
83:8e:bc:6e:5b:f9:d0:85:66:f9:55:35:5b:bc:68:11:ff:f9:
d8:15:88:1e:d9:12:65:2d:63:40:a0:94:de:da:44:dc:09:4a:
d1:e9:de:bd:4a:6d:6c:33:ec:a9:40:a2:fc:6b:69:e1:4a:ec:
f9:49:ef:2f:5d:00:ee:7c:10:ca:60:e1:0e:2b:d0:20:ec:7d:
3d:78:f1:48:ee:97:8e:3d:34:37:cb:4e:88:f9:c4:3a:d0:3f:
29:a0:bc:57:f3:2d:1d:5e:17:d5:37:c9:dc:5d:9b:f6:12:09:
6d:e2:57:3f:95:15:34:bf:98:12:1b:9d:24:93:be:ba:03:52:
6c:e2:94:98:64:7d:a0:aa:09:4c:02:46:0b:2b:1d:3b:8a:b7:
ee:bb:6b:e0:ad:cc:11:34:4d:bd:38:15:ed:0b:d7:f7:ab:ed:
57:c0:7f:62:a9:90:e4:37:6d:71:92:5d:b9:cb:53:ad:0b:a4:
0b:f3:5e:03:00:b3:5c:08:e5:a6:c7:5d:5c:32:b2:99:c8:86:
94:d4:b1:02:a3:c7:63:e7:ff:09:cf:cc:65:ae:dd:40:bc:43:
50:00:07:b8:bd:29:b8:3a:32:22:3f:f8:11:9c:6b:ee:dd:36:
d2:19:f8:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2wqF59KvrwHRrY+fLXmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjYwNjEzMTIwMDQwWhcNMjYwNjE0MTIwMDQwWjAzMTEwLwYDVQQD
EygzYzg0ODM1N2M3MTMwMTQ2ZWFjOGNmN2FhNjA0ZDgyZjdhZjhiZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhriekIX6Nrunwoq3kiO+dFRrSMgt
F1tAJfrDwUS8O2WyNzhGotj1RWCM7oLEZf1DzIf03I7AEnULS8UWXQs/SKqAm/eK
tdNNvmO2BiGrYaJVoKQOLxB5j7VP9Fi7g6zwIWGr/qgU7eciwwaiLpEp2MV03RtP
teNcnr/Dac18BGBgpl9RwElu65TBi1g+r6H3OAaCaz0rzoDDaXrjndxRJeOKUl/g
RoIUJI8AzpFClD+J3WlEh5ImkdR6rS4GROII9giwlD/fizPAYHcaLHQjqJuCOReO
F0/OOqut8wsBUyUFjErZXYBod6dJ3zT6cw1zsaZATAJYx35P2tMxnai9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyEg1fHEwFG6sjPeqYE2C96+L6qMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2p4NMdL
/rFradNotoWG8iCdg468blv50IVm+VU1W7xoEf/52BWIHtkSZS1jQKCU3tpE3AlK
0enevUptbDPsqUCi/Gtp4Urs+UnvL10A7nwQymDhDivQIOx9PXjxSO6Xjj00N8tO
iPnEOtA/KaC8V/MtHV4X1TfJ3F2b9hIJbeJXP5UVNL+YEhudJJO+ugNSbOKUmGR9
oKoJTAJGCysdO4q37rtr4K3METRNvTgV7QvX96vtV8B/YqmQ5DdtcZJductTrQuk
C/NeAwCzXAjlpsddXDKymciGlNSxAqPHY+f/Cc/MZa7dQLxDUAAHuL0puDoyIj/4
EZxr7t020hn4XQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:10:53 2026 by rpki-client