Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: jLVEwe6LWyNoPFg9fEUttXOjTBj7SM56NG8dfyCN4CQ=
Subject key identifier: 2E:41:07:0D:0C:58:7F:14:58:50:37:3C:23:47:1E:3D:1C:BB:32:CF
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019FAD516E96C6D4CC6901B29AFD34241184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 10:00:22 +0000
Manifest this update: Wed 29 Jul 2026 10:00:22 +0000
Manifest next update: Thu 30 Jul 2026 10:00:22 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: 6ix2goR/HIYigvqkDVaRTxabMCBJbmuNMUiLRT4iIeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:6e:96:c6:d4:cc:69:01:b2:9a:fd:34:24:11:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Jul 29 10:00:22 2026 GMT
Not After : Jul 30 10:00:22 2026 GMT
Subject: CN=2e41070d0c587f145850373c23471e3d1cbb32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:da:63:9f:e4:9d:c5:9e:0a:61:f7:46:92:
1c:eb:19:2d:e3:68:a4:a4:e0:87:e5:6e:5d:c9:ed:
f2:7b:ca:1f:e5:fb:66:a3:45:34:a0:bb:f2:93:83:
7a:35:ec:0c:c8:08:46:0b:b3:4d:1c:77:49:35:ea:
b1:20:db:18:a2:27:e1:67:7d:90:d0:df:cd:76:15:
b8:fd:4a:64:20:fd:d0:80:65:a5:d2:75:08:83:a1:
5a:75:d7:47:84:9a:c8:d9:71:ac:1e:3c:ad:c8:2d:
ff:19:c1:71:4e:cf:2d:1e:34:9b:ea:bf:4a:77:51:
df:f0:77:e1:1b:60:4f:8e:f1:13:b6:43:07:c8:3d:
43:76:43:69:0b:7a:85:38:66:e9:cf:c3:e9:1a:27:
0e:b6:cc:d1:a2:7e:e3:37:c4:42:a8:98:78:91:b0:
ba:11:9a:7b:f6:9c:25:63:c4:74:51:28:ac:e7:a5:
56:50:02:f2:2f:18:5b:6c:a7:55:3c:28:57:f6:82:
91:bc:c4:10:9e:a2:95:bd:e4:cd:bd:b8:10:e4:00:
4e:13:4c:53:02:47:4f:0a:50:b7:71:12:f1:34:84:
53:a2:ce:52:a1:22:76:21:60:d0:8a:f3:45:13:0c:
d4:e3:2b:d0:53:63:83:fe:d1:8e:88:11:64:9e:9c:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:07:0D:0C:58:7F:14:58:50:37:3C:23:47:1E:3D:1C:BB:32:CF
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:99:6c:d8:1e:c3:30:b2:e2:f8:3c:fc:ce:e0:de:a4:b7:
72:62:a0:63:59:04:6d:f8:61:0f:33:18:01:b4:a4:51:ef:aa:
7d:6f:9c:d7:69:02:35:96:e5:ec:ef:e5:f3:f3:08:d0:59:fd:
a7:0a:bd:72:4b:d0:3b:16:61:8c:20:94:d4:6e:72:90:13:73:
bb:67:fd:38:6b:aa:5e:e2:c9:35:8e:a0:f8:87:f9:04:d2:02:
d5:55:5b:45:57:9a:f0:31:d7:c3:8e:c7:ab:0d:45:9f:46:21:
9b:69:c2:c6:62:58:c1:2a:29:8f:18:46:90:da:07:c2:1f:f2:
1d:d7:bd:32:9b:40:bb:22:2e:df:8a:9c:40:0a:9d:22:22:0d:
e2:16:be:42:e4:76:bb:3b:da:b9:34:09:24:2d:a2:66:83:91:
f5:d7:1d:8c:1d:e2:fe:8b:bd:4d:41:1a:da:ce:e8:22:ac:58:
7c:c7:f3:f1:2e:23:69:fd:c8:62:67:87:00:bf:39:c7:94:86:
fc:03:9e:34:a5:c9:26:2e:6a:a7:0b:b1:27:62:01:d8:57:46:
49:44:1f:ed:e6:e8:08:1d:70:cf:3a:84:d8:64:91:dd:95:60:
6a:29:41:db:0f:ab:af:c6:08:86:24:2f:6b:9f:04:56:54:80:
fb:bb:89:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUW6WxtTMaQGymv00JBGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmYzNzM2MjAxNDZlNmYyOThhZTgyZDJjOGE4MzcxY2Fj
YjdiMWIwHhcNMjYwNzI5MTAwMDIyWhcNMjYwNzMwMTAwMDIyWjAzMTEwLwYDVQQD
EygyZTQxMDcwZDBjNTg3ZjE0NTg1MDM3M2MyMzQ3MWUzZDFjYmIzMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTnaY5/kncWeCmH3RpIc6xkt42ik
pOCH5W5dye3ye8of5ftmo0U0oLvyk4N6NewMyAhGC7NNHHdJNeqxINsYoifhZ32Q
0N/NdhW4/UpkIP3QgGWl0nUIg6FadddHhJrI2XGsHjytyC3/GcFxTs8tHjSb6r9K
d1Hf8HfhG2BPjvETtkMHyD1DdkNpC3qFOGbpz8PpGicOtszRon7jN8RCqJh4kbC6
EZp79pwlY8R0USis56VWUALyLxhbbKdVPChX9oKRvMQQnqKVveTNvbgQ5ABOE0xT
AkdPClC3cRLxNIRTos5SoSJ2IWDQivNFEwzU4yvQU2OD/tGOiBFknpznkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5BBw0MWH8UWFA3PCNHHj0cuzLPMB8GA1UdIwQY
MBaAFGC/NzYgFG5vKYroLSyKg3HKy3sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTIt
ZjBhODEyM2U3MGY5LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTItZjBhODEyM2U3MGY5
LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ+ZbNge
wzCy4vg8/M7g3qS3cmKgY1kEbfhhDzMYAbSkUe+qfW+c12kCNZbl7O/l8/MI0Fn9
pwq9ckvQOxZhjCCU1G5ykBNzu2f9OGuqXuLJNY6g+If5BNIC1VVbRVea8DHXw47H
qw1Fn0Yhm2nCxmJYwSopjxhGkNoHwh/yHde9MptAuyIu34qcQAqdIiIN4ha+QuR2
uzvauTQJJC2iZoOR9dcdjB3i/ou9TUEa2s7oIqxYfMfz8S4jaf3IYmeHAL85x5SG
/AOeNKXJJi5qpwuxJ2IB2FdGSUQf7eboCB1wzzqE2GSR3ZVgailB2w+rr8YIhiQv
a58EVlSA+7uJTQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:51 2026 by rpki-client