Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: FRxjXclmTNmOqcOgmxuOPVbOrgnuwArFlInGdsdUkDk=
Subject key identifier: ED:43:8D:C1:F5:87:05:1E:6D:55:A6:05:55:71:78:1B:92:E6:E8:66
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019EC06DE186253AD957587894D339723FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0A8E
Signing time: Sat 13 Jun 2026 10:01:27 +0000
Manifest this update: Sat 13 Jun 2026 10:01:27 +0000
Manifest next update: Sun 14 Jun 2026 10:01:27 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: eW18qCntN/bhtDPIalYcOV3+78gNnp0wfNywmNvPSGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:e1:86:25:3a:d9:57:58:78:94:d3:39:72:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jun 13 10:01:27 2026 GMT
Not After : Jun 14 10:01:27 2026 GMT
Subject: CN=ed438dc1f587051e6d55a6055571781b92e6e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:33:d3:07:ba:9c:35:58:17:a7:57:d8:48:
b4:0d:7a:01:40:33:fe:ab:ee:f3:67:c2:71:48:bc:
75:50:af:e1:47:41:8a:0b:54:6b:43:25:fc:eb:99:
ce:c4:54:19:33:41:80:40:92:9b:5e:9d:a4:b4:f0:
b4:05:46:2d:75:e6:55:91:38:ff:f1:94:7b:c2:fc:
12:b5:1d:bf:08:cf:ce:60:db:7a:c5:7b:73:f8:72:
97:48:ea:d5:5b:f7:1b:37:37:f8:3f:9d:76:fd:4c:
8a:3d:69:7b:10:a3:e5:72:59:7f:94:89:de:bd:79:
35:24:2a:8d:d6:c8:02:c8:92:0d:f4:04:2f:32:ce:
59:89:6f:27:72:1f:6d:db:5b:48:13:68:6d:1a:09:
bc:b7:a0:10:4e:de:47:75:a0:3b:9f:56:8f:cd:84:
38:1b:7a:66:c3:e3:a3:b8:30:c3:36:4a:e4:d1:48:
c7:7f:19:d5:90:d0:57:36:18:82:96:a2:e2:39:12:
55:e7:da:6f:d2:76:ab:9c:75:26:93:b1:e8:3c:65:
9f:77:ad:90:19:e0:4a:29:87:54:32:90:3a:b5:78:
0f:cc:60:08:b2:a6:3f:35:6f:56:4b:f4:c4:b9:f8:
70:4c:fe:46:80:cc:4b:88:92:7f:f5:fe:77:ba:b0:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:8D:C1:F5:87:05:1E:6D:55:A6:05:55:71:78:1B:92:E6:E8:66
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d4:e9:31:82:62:77:b4:3f:99:19:15:9f:e2:4e:96:37:08:
84:36:82:88:93:f7:94:b2:cc:8b:d0:3a:ba:66:00:3e:fb:53:
85:f6:fa:62:b3:82:07:b7:db:f4:3c:99:d1:b0:ce:4b:26:3d:
c4:17:d4:47:92:95:8a:7c:6a:07:e2:cb:c9:b8:7f:04:8a:5d:
86:f5:e0:9f:aa:cb:7a:90:5f:23:43:eb:c9:3e:10:cc:ca:9e:
01:8d:be:71:6e:30:75:4f:79:cb:c8:3c:3e:58:3c:d9:94:43:
03:39:5b:d4:dd:b9:d8:fc:69:7d:0b:23:22:40:fb:25:19:8d:
d0:0e:bd:32:37:f3:f5:1e:31:00:9f:ac:84:99:51:33:98:92:
1e:63:14:84:14:a8:13:3e:10:e9:b1:f0:91:71:ad:08:cd:96:
80:ac:55:55:0e:00:1a:1d:c1:e7:b3:b8:d0:98:1a:6f:f8:7e:
bf:dd:67:11:30:66:e8:89:12:30:c2:3d:c1:24:a0:55:97:e0:
55:d6:f1:af:b4:4d:59:a9:c6:0a:b6:37:93:c9:a8:e7:51:84:
d8:3b:fd:04:62:c0:72:bd:21:9a:a4:31:0a:30:f8:73:8a:34:
77:a6:6c:9e:77:0e:d3:d6:a9:2c:94:1a:04:3f:a5:bf:38:ae:
0b:c6:60:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbeGGJTrZV1h4lNM5cj/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi
ODBkYmQwHhcNMjYwNjEzMTAwMTI3WhcNMjYwNjE0MTAwMTI3WjAzMTEwLwYDVQQD
EyhlZDQzOGRjMWY1ODcwNTFlNmQ1NWE2MDU1NTcxNzgxYjkyZTZlODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Uz0we6nDVYF6dX2Ei0DXoBQDP+
q+7zZ8JxSLx1UK/hR0GKC1RrQyX865nOxFQZM0GAQJKbXp2ktPC0BUYtdeZVkTj/
8ZR7wvwStR2/CM/OYNt6xXtz+HKXSOrVW/cbNzf4P512/UyKPWl7EKPlcll/lIne
vXk1JCqN1sgCyJIN9AQvMs5ZiW8nch9t21tIE2htGgm8t6AQTt5HdaA7n1aPzYQ4
G3pmw+OjuDDDNkrk0UjHfxnVkNBXNhiClqLiORJV59pv0narnHUmk7HoPGWfd62Q
GeBKKYdUMpA6tXgPzGAIsqY/NW9WS/TEufhwTP5GgMxLiJJ/9f53urDYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1DjcH1hwUebVWmBVVxeBuS5uhmMB8GA1UdIwQY
MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt
YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk
LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNTpMYJi
d7Q/mRkVn+JOljcIhDaCiJP3lLLMi9A6umYAPvtThfb6YrOCB7fb9DyZ0bDOSyY9
xBfUR5KVinxqB+LLybh/BIpdhvXgn6rLepBfI0PryT4QzMqeAY2+cW4wdU95y8g8
Plg82ZRDAzlb1N252PxpfQsjIkD7JRmN0A69Mjfz9R4xAJ+shJlRM5iSHmMUhBSo
Ez4Q6bHwkXGtCM2WgKxVVQ4AGh3B57O40Jgab/h+v91nETBm6IkSMMI9wSSgVZfg
Vdbxr7RNWanGCrY3k8mo51GE2Dv9BGLAcr0hmqQxCjD4c4o0d6ZsnncO09apLJQa
BD+lvziuC8Zgag==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:23 2026 by rpki-client