Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: ZT9XiBGyO7OSsdAfvkTjS0EQbdt5vBlw2QLyKSwNCEo=
Subject key identifier: 58:9C:62:80:67:28:7F:31:97:FB:BB:27:EC:BB:F1:F7:69:A6:A5:7E
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019FA93E47A2CAA3024945A3105E09DE8D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 1057
Signing time: Tue 28 Jul 2026 15:00:58 +0000
Manifest this update: Tue 28 Jul 2026 15:00:58 +0000
Manifest next update: Wed 29 Jul 2026 15:00:58 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: Dh25HjUnJNmejpfqOtxoPP7hCdXj6INKYVkrx4bh40g=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:47:a2:ca:a3:02:49:45:a3:10:5e:09:de:8d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jul 28 15:00:58 2026 GMT
Not After : Jul 29 15:00:58 2026 GMT
Subject: CN=589c628067287f3197fbbb27ecbbf1f769a6a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:aa:b8:81:d2:5d:06:36:2a:00:92:93:86:
55:9f:4a:6e:fc:65:dc:93:83:d1:b0:cb:a3:7b:c6:
c1:ff:e2:e5:15:a4:2a:4c:88:bf:49:68:d3:d4:16:
ad:07:31:ce:db:a6:d2:31:7e:ee:3e:fe:c5:4c:2d:
a4:ef:de:5c:57:c8:48:62:a2:99:0c:e1:ba:13:6b:
9b:ea:fd:e9:4a:d6:a3:87:4d:ce:a7:80:bc:4b:33:
8a:f5:95:bc:54:cb:76:fd:cb:b5:99:5e:24:a0:62:
51:2f:49:8a:31:94:ed:5f:35:54:08:57:ad:7f:20:
8c:91:2d:37:f3:97:9f:50:44:3c:3d:4a:87:ed:d5:
74:3f:36:68:5d:73:a2:75:e9:29:09:48:ef:c0:f7:
1d:3e:b5:94:4b:e5:a9:bd:8d:7c:93:33:20:87:0e:
de:d7:37:a7:78:c7:a9:16:ee:c4:df:73:79:a4:a9:
84:62:f9:eb:d4:43:b7:d9:7e:6c:f4:44:50:42:e8:
5c:ad:4b:67:e0:29:71:90:da:60:b7:d4:a4:9b:21:
33:a5:87:43:a5:25:d4:f6:95:1e:32:06:36:89:87:
c5:8f:04:02:34:71:d7:f2:a6:b8:d5:44:07:90:c3:
18:0a:a0:bb:60:0b:ea:1d:fa:ac:aa:99:6d:3c:1d:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:62:80:67:28:7F:31:97:FB:BB:27:EC:BB:F1:F7:69:A6:A5:7E
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:98:2c:b1:c9:1f:c6:4e:77:5e:12:e9:99:5a:02:9d:50:
7a:e9:1f:ec:17:7a:bb:5f:af:72:6d:f0:bd:6c:32:8d:c3:3a:
09:36:12:6d:07:5c:75:d2:ae:7e:56:70:06:74:4f:b5:b5:fd:
cb:2e:62:81:ab:15:2e:4f:d2:64:9f:53:c9:7d:19:a2:e1:91:
51:eb:1a:3a:03:e0:5f:50:c7:77:9f:0d:b6:2e:1c:51:af:fc:
72:b1:6d:59:3f:48:85:30:42:35:da:fe:37:50:2f:20:46:0a:
36:25:6b:5e:5c:99:44:d7:d4:e1:4b:46:c8:cf:a3:f1:65:6e:
09:5b:94:db:03:7f:34:d8:fd:97:3a:c7:68:d4:69:b8:a2:19:
f3:75:19:0e:f5:b6:96:6a:3a:69:39:5d:ff:de:45:04:30:47:
e8:3f:23:9b:91:b0:a9:f2:80:92:fb:f4:79:9e:97:f0:ad:69:
34:2f:99:67:e9:cf:86:ce:ae:0b:23:d8:78:49:47:ee:a6:45:
d8:32:1e:c5:96:b5:26:21:33:3e:bd:9c:b9:79:63:38:74:94:
f2:3b:00:56:b2:17:ad:32:c1:cb:2a:90:bb:09:f0:a6:70:fb:
26:cc:bb:c2:30:32:05:1b:ef:4e:c3:91:ed:1c:69:7b:90:0d:
c9:bf:60:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPkeiyqMCSUWjEF4J3o0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjYwNzI4MTUwMDU4WhcNMjYwNzI5MTUwMDU4WjAzMTEwLwYDVQQD
Eyg1ODljNjI4MDY3Mjg3ZjMxOTdmYmJiMjdlY2JiZjFmNzY5YTZhNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOquIHSXQY2KgCSk4ZVn0pu/GXc
k4PRsMuje8bB/+LlFaQqTIi/SWjT1BatBzHO26bSMX7uPv7FTC2k795cV8hIYqKZ
DOG6E2ub6v3pStajh03Op4C8SzOK9ZW8VMt2/cu1mV4koGJRL0mKMZTtXzVUCFet
fyCMkS0385efUEQ8PUqH7dV0PzZoXXOidekpCUjvwPcdPrWUS+WpvY18kzMghw7e
1zeneMepFu7E33N5pKmEYvnr1EO32X5s9ERQQuhcrUtn4ClxkNpgt9SkmyEzpYdD
pSXU9pUeMgY2iYfFjwQCNHHX8qa41UQHkMMYCqC7YAvqHfqsqpltPB2b2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFicYoBnKH8xl/u7J+y78fdppqV+MB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6GYLLHJ
H8ZOd14S6ZlaAp1Qeukf7Bd6u1+vcm3wvWwyjcM6CTYSbQdcddKuflZwBnRPtbX9
yy5igasVLk/SZJ9TyX0ZouGRUesaOgPgX1DHd58Nti4cUa/8crFtWT9IhTBCNdr+
N1AvIEYKNiVrXlyZRNfU4UtGyM+j8WVuCVuU2wN/NNj9lzrHaNRpuKIZ83UZDvW2
lmo6aTld/95FBDBH6D8jm5GwqfKAkvv0eZ6X8K1pNC+ZZ+nPhs6uCyPYeElH7qZF
2DIexZa1JiEzPr2cuXljOHSU8jsAVrIXrTLByyqQuwnwpnD7Jsy7wjAyBRvvTsOR
7Rxpe5ANyb9gmA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:33 2026 by rpki-client