Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: uz01LID0Y3WuN4czgFhYW3nH36rUoDw4MtuMjKgSUQc=
Subject key identifier: 5D:AF:A2:54:41:D5:C8:28:63:8B:02:EE:42:A9:A1:DB:3B:B3:FF:21
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 019FAA875DC9753668045D7CE109939523CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:25 +0000
Manifest this update: Tue 28 Jul 2026 21:00:25 +0000
Manifest next update: Wed 29 Jul 2026 21:00:25 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: /3MGpfAdUsSgdahyovlE+bprxvbNNiZuUu5qxVBzwDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:5d:c9:75:36:68:04:5d:7c:e1:09:93:95:23:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Jul 28 21:00:25 2026 GMT
Not After : Jul 29 21:00:25 2026 GMT
Subject: CN=5dafa25441d5c828638b02ee42a9a1db3bb3ff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:8d:94:f5:ea:9b:e0:d2:d7:f1:8d:af:84:
df:75:24:3b:40:22:20:27:a4:dc:16:ff:60:d7:dc:
9c:73:a6:8b:74:22:06:30:80:4b:aa:b4:57:f1:74:
dd:ee:ed:99:9e:40:cc:b6:dd:4c:3f:89:be:d9:96:
1c:ef:4d:3a:6a:a4:63:89:19:cd:25:e0:69:f2:77:
e1:08:92:6d:22:83:cc:39:36:f4:c9:c4:b3:d0:b5:
f0:18:fb:aa:aa:bf:ae:ed:d4:39:cf:8b:32:6c:aa:
12:a9:7e:0c:e1:8a:9c:c6:6c:c1:a8:b9:3c:8d:cd:
bc:c9:64:e6:e8:48:d1:86:08:06:56:f0:61:12:bc:
25:73:1f:cd:7f:3e:d9:39:36:bf:15:99:47:38:c5:
89:6b:bf:9e:c0:70:cb:aa:8d:a0:69:25:a6:17:eb:
da:6e:f2:58:f7:a2:eb:c3:71:37:05:62:c5:8e:6e:
d1:21:d6:89:6b:ad:05:39:06:a1:cf:0d:30:48:13:
04:fb:af:c3:22:61:e4:83:ac:be:8b:8a:85:5a:71:
23:a7:21:78:e0:24:9f:8f:aa:44:dc:27:20:8a:15:
a6:85:a2:fa:61:f7:1f:99:ee:87:2c:7c:8b:03:ce:
c8:80:78:99:40:d8:3c:6d:98:c5:30:1f:54:d8:f9:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:A2:54:41:D5:C8:28:63:8B:02:EE:42:A9:A1:DB:3B:B3:FF:21
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:94:e3:20:04:9a:06:17:4b:24:ef:21:4e:90:77:5d:d5:
95:62:fd:89:69:e5:27:e9:0d:6d:0f:05:25:84:bb:e6:ef:1b:
a2:99:77:33:a1:08:e3:64:b4:79:4b:a0:56:ae:90:86:b0:d6:
b0:84:9d:7b:24:d6:01:05:d3:de:b8:f1:3c:c6:09:81:7d:e4:
bf:4f:02:e8:31:2a:8c:af:87:6d:0f:96:0e:2c:80:8a:46:08:
74:de:15:e8:42:09:df:15:f9:c4:20:fc:f3:36:9e:a6:c6:8d:
d4:f9:7f:e9:3c:9d:13:4d:a3:c1:4e:d5:04:0b:c2:dd:a5:1f:
75:b8:36:7b:fd:64:a7:8e:d1:7f:dc:f4:6c:e4:51:06:fe:8e:
b7:cf:06:c8:e3:e5:4d:f8:4f:f2:3b:31:36:a1:87:af:0e:70:
87:37:7e:4d:17:f1:7d:a4:e2:d6:0a:fb:5d:82:38:3e:0a:e2:
e8:9e:60:89:17:2b:8b:cc:14:68:c7:20:22:14:aa:d7:7f:4a:
11:5b:2f:13:a6:a0:8d:73:09:cb:b4:de:5a:7f:1c:f0:8b:75:
78:d5:65:d4:a6:ee:a3:85:a1:ed:82:28:c0:81:66:85:f9:8c:
4f:93:01:77:58:10:d5:9b:3d:2e:f6:15:14:e8:7f:db:d6:67:
23:53:8f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh13JdTZoBF184QmTlSPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWNhM2MxZGQ4YTU1MmUzNjdhNDlhMDIxOTkwNjk3MjI5
NGE2N2MwHhcNMjYwNzI4MjEwMDI1WhcNMjYwNzI5MjEwMDI1WjAzMTEwLwYDVQQD
Eyg1ZGFmYTI1NDQxZDVjODI4NjM4YjAyZWU0MmE5YTFkYjNiYjNmZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJONlPXqm+DS1/GNr4TfdSQ7QCIg
J6TcFv9g19ycc6aLdCIGMIBLqrRX8XTd7u2ZnkDMtt1MP4m+2ZYc7006aqRjiRnN
JeBp8nfhCJJtIoPMOTb0ycSz0LXwGPuqqr+u7dQ5z4sybKoSqX4M4YqcxmzBqLk8
jc28yWTm6EjRhggGVvBhErwlcx/Nfz7ZOTa/FZlHOMWJa7+ewHDLqo2gaSWmF+va
bvJY96Lrw3E3BWLFjm7RIdaJa60FOQahzw0wSBME+6/DImHkg6y+i4qFWnEjpyF4
4CSfj6pE3CcgihWmhaL6Yfcfme6HLHyLA87IgHiZQNg8bZjFMB9U2Pk27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2volRB1cgoY4sC7kKpods7s/8hMB8GA1UdIwQY
MBaAFMsco8HdilUuNnpJoCGZBpcilKZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt
ZmU0NDc3MmQ1YWUxLzEveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx
LzEveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAOU4yAE
mgYXSyTvIU6Qd13VlWL9iWnlJ+kNbQ8FJYS75u8bopl3M6EI42S0eUugVq6QhrDW
sISdeyTWAQXT3rjxPMYJgX3kv08C6DEqjK+HbQ+WDiyAikYIdN4V6EIJ3xX5xCD8
8zaepsaN1Pl/6TydE02jwU7VBAvC3aUfdbg2e/1kp47Rf9z0bORRBv6Ot88GyOPl
TfhP8jsxNqGHrw5whzd+TRfxfaTi1gr7XYI4Pgri6J5giRcri8wUaMcgIhSq139K
EVsvE6agjXMJy7TeWn8c8It1eNVl1Kbuo4Wh7YIowIFmhfmMT5MBd1gQ1Zs9LvYV
FOh/29ZnI1OPaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:16:36 2026 by rpki-client