Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
File: YT1iXtVQfkgOTUPcl45x6IHmIic.mft (raw, json)
Hash identifier: hJN95IyxD5zQQvP+u2HvimykUmJfwm16X73yWSTfOLg=
Subject key identifier: 89:70:2E:D9:BF:58:31:EB:24:CB:FB:9D:2A:5C:66:87:02:3E:09:12
Authority key identifier: 61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
Certificate issuer: /CN=613d625ed5507e480e4d43dc978e71e881e62227
Certificate serial: 019FA899EFA21C2E17188441558C2974E23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:28 +0000
Manifest this update: Tue 28 Jul 2026 12:01:28 +0000
Manifest next update: Wed 29 Jul 2026 12:01:28 +0000
Files and hashes: 1: FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa (hash: E+Ndns34wiS59u4o367M86KWyuekLi03oafxk6qO++c=)
2: YT1iXtVQfkgOTUPcl45x6IHmIic.crl (hash: NcPNR7hAYRg5KN7ERbWmlRXPSQRHu1iD5rqsVMGQxW4=)
3: kSpW6w_RI8cHoJwPPES6uFJxrFs.roa (hash: PkH8DgRX6ZznesT2KjH8tRRwLjLMw49bu5CbwIvnoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ef:a2:1c:2e:17:18:84:41:55:8c:29:74:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d625ed5507e480e4d43dc978e71e881e62227
Validity
Not Before: Jul 28 12:01:28 2026 GMT
Not After : Jul 29 12:01:28 2026 GMT
Subject: CN=89702ed9bf5831eb24cbfb9d2a5c6687023e0912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:6b:9e:19:59:1f:06:91:e6:47:7d:4e:62:
ef:81:51:a1:be:64:af:2e:78:a6:e2:4b:fa:b5:45:
45:d2:e2:ce:44:f1:37:52:0e:f7:60:cc:8d:19:09:
8c:d1:c0:2a:bf:80:a1:cc:a3:a6:2f:b8:32:f9:af:
53:97:dd:86:db:a9:d1:27:47:d2:ff:a0:4e:6f:22:
06:d7:d9:c9:b7:58:ec:39:84:6e:e9:f3:84:b7:1c:
76:14:3c:25:9e:ed:8f:78:a3:02:68:4d:47:35:c0:
11:91:be:d8:93:d0:29:81:03:1d:08:d5:87:58:5f:
79:d7:bd:b9:47:3d:60:44:b1:63:ec:03:0b:84:99:
49:49:79:c0:8a:45:52:1b:9b:b2:4f:44:13:1f:48:
98:28:b8:90:4f:4f:1a:11:f0:05:c7:97:d2:bd:1d:
16:f9:96:0e:90:a7:37:3d:0f:17:d5:a8:e8:71:80:
25:11:95:15:20:cd:f4:f1:79:32:78:11:5a:fc:45:
1a:79:fb:44:38:b4:6d:b4:be:8c:be:9e:5a:00:7d:
b3:b2:36:34:0a:d8:1c:a3:2c:81:90:80:86:8b:32:
a4:a7:78:54:ce:bb:87:72:1b:d6:92:08:45:9f:1d:
ca:6b:24:6e:a1:4e:53:d1:aa:c1:d2:ea:bd:5e:c9:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:2E:D9:BF:58:31:EB:24:CB:FB:9D:2A:5C:66:87:02:3E:09:12
X509v3 Authority Key Identifier:
keyid:61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f6:b8:ae:09:6e:8b:96:8d:28:c5:e4:6d:11:fd:0d:4f:2b:
65:1b:9e:e6:03:59:54:9d:fc:2f:71:c1:0b:9d:f1:c0:27:12:
5c:17:83:d9:a0:37:50:26:03:f5:f0:a2:9d:4a:f2:e0:f0:39:
72:5a:18:c4:f7:11:de:65:1f:18:4f:6f:5e:11:49:84:d9:2c:
84:5b:07:14:a8:26:65:19:e4:bf:9c:5a:79:0a:09:61:33:31:
a9:2f:2d:e9:41:70:22:83:50:42:83:6d:1b:69:f0:2e:dc:96:
9c:46:9a:d6:20:f6:46:ba:4c:73:e5:99:7c:d0:91:5a:d7:90:
b9:06:ee:c6:f7:f2:34:3c:84:3c:a8:2d:96:d0:27:9d:a7:12:
cc:01:f8:f0:9c:d2:23:28:ba:c7:83:7c:fc:42:c4:10:74:64:
7c:bb:f0:03:56:3d:3c:34:02:3f:1a:ce:16:c4:50:9d:24:fe:
81:2b:78:4e:5a:36:1b:c3:ba:c6:44:7f:7c:c1:e7:87:f7:7f:
78:ce:13:61:c5:4e:a7:c0:7d:c2:fe:8b:76:58:91:11:4d:3a:
36:d8:ae:41:c9:04:37:ef:79:6d:e2:82:9c:2d:e5:db:21:27:
e5:54:32:33:71:c9:19:b2:bf:e9:d9:50:f5:c3:21:f7:d7:2f:
f8:57:bb:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ome+iHC4XGIRBVYwpdOI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2Q2MjVlZDU1MDdlNDgwZTRkNDNkYzk3OGU3MWU4ODFl
NjIyMjcwHhcNMjYwNzI4MTIwMTI4WhcNMjYwNzI5MTIwMTI4WjAzMTEwLwYDVQQD
Eyg4OTcwMmVkOWJmNTgzMWViMjRjYmZiOWQyYTVjNjY4NzAyM2UwOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq29rnhlZHwaR5kd9TmLvgVGhvmSv
Lnim4kv6tUVF0uLORPE3Ug73YMyNGQmM0cAqv4ChzKOmL7gy+a9Tl92G26nRJ0fS
/6BObyIG19nJt1jsOYRu6fOEtxx2FDwlnu2PeKMCaE1HNcARkb7Yk9ApgQMdCNWH
WF951725Rz1gRLFj7AMLhJlJSXnAikVSG5uyT0QTH0iYKLiQT08aEfAFx5fSvR0W
+ZYOkKc3PQ8X1ajocYAlEZUVIM308XkyeBFa/EUaeftEOLRttL6Mvp5aAH2zsjY0
CtgcoyyBkICGizKkp3hUzruHchvWkghFnx3KayRuoU5T0arB0uq9Xsm70wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlwLtm/WDHrJMv7nSpcZocCPgkSMB8GA1UdIwQY
MBaAFGE9Yl7VUH5IDk1D3JeOceiB5iInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQxaVh0VlFma2dPVFVQY2w0NXg2SUhtSWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvWVQxaVh0VlFma2dPVFVQY2w0NXg2SUhtSWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvWVQxaVh0VlFma2dPVFVQY2w0NXg2SUhtSWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASva4rglu
i5aNKMXkbRH9DU8rZRue5gNZVJ38L3HBC53xwCcSXBeD2aA3UCYD9fCinUry4PA5
cloYxPcR3mUfGE9vXhFJhNkshFsHFKgmZRnkv5xaeQoJYTMxqS8t6UFwIoNQQoNt
G2nwLtyWnEaa1iD2RrpMc+WZfNCRWteQuQbuxvfyNDyEPKgtltAnnacSzAH48JzS
Iyi6x4N8/ELEEHRkfLvwA1Y9PDQCPxrOFsRQnST+gSt4Tlo2G8O6xkR/fMHnh/d/
eM4TYcVOp8B9wv6LdliREU06NtiuQckEN+95beKCnC3l2yEn5VQyM3HJGbK/6dlQ
9cMh99cv+Fe7vQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:39 2026 by rpki-client