Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: Km0/0gWP7z4QJn8umAFggglpKnuPCx6ZWLiClOO3FOM=
Subject key identifier: 25:17:24:0C:F9:E3:E0:A9:E8:F5:43:7E:D4:89:11:08:63:93:41:26
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019FA93DB7794D70D0DA522B7CB350EA2279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 0388
Signing time: Tue 28 Jul 2026 15:00:21 +0000
Manifest this update: Tue 28 Jul 2026 15:00:21 +0000
Manifest next update: Wed 29 Jul 2026 15:00:21 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: ujgnYXJT8fChOj6/Mr3VFahQjFthSjTBxFrgYmVTiQk=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b7:79:4d:70:d0:da:52:2b:7c:b3:50:ea:22:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Jul 28 15:00:21 2026 GMT
Not After : Jul 29 15:00:21 2026 GMT
Subject: CN=2517240cf9e3e0a9e8f5437ed489110863934126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:0c:37:66:10:a2:b7:ac:14:e5:ed:cb:ac:
6d:0b:a2:c1:04:96:13:f6:ef:c9:bc:f6:0b:32:1b:
c6:e5:a4:e9:9a:d4:48:a4:18:b3:44:95:bc:20:59:
a5:e5:e7:0f:48:10:95:ed:e4:e2:15:8e:73:71:4e:
0a:4d:8d:eb:7d:51:da:31:32:ab:51:7c:ed:f7:45:
ae:ab:c0:da:7e:99:5f:71:b9:b4:b9:83:09:1f:2d:
93:a8:15:28:1c:f9:b7:cd:3b:d0:7a:4e:6d:a3:11:
b8:74:96:4b:46:a7:bb:9f:a1:63:0e:2f:f8:49:7f:
32:17:29:28:4f:14:fe:5e:03:48:93:51:5b:bb:48:
86:de:dd:65:a8:f4:a4:08:55:38:02:26:b4:9f:33:
f1:8d:ee:13:a3:f8:97:af:d6:b6:f6:a4:d1:33:8f:
f7:a1:ea:bc:43:ca:e9:be:c2:dd:f3:85:ee:28:91:
90:f3:e5:74:1d:d4:d9:6f:9f:7e:90:82:66:8e:66:
54:bf:ce:54:01:09:e6:66:16:c1:08:7b:2c:87:e0:
d1:4f:57:a5:a9:94:24:ab:23:f9:4f:0e:aa:8e:68:
d0:1a:88:da:06:2d:41:b7:2d:d0:cf:9a:74:1e:ee:
a6:99:72:6e:a2:29:3d:38:4e:b4:b4:27:d2:8d:63:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:24:0C:F9:E3:E0:A9:E8:F5:43:7E:D4:89:11:08:63:93:41:26
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:5c:61:f5:a9:11:78:3c:29:1e:db:b8:48:9e:d9:7e:84:
5d:a0:7d:44:c3:27:f1:32:4e:e7:a6:dd:af:c7:40:96:0e:bc:
c5:86:7a:5f:d2:c4:ff:90:11:5e:9d:54:51:7b:ca:78:ca:45:
62:60:15:06:3e:cf:32:83:4b:a3:9e:19:38:3e:5c:d1:d2:f8:
37:79:83:8b:4e:94:92:5d:8a:57:30:34:97:bc:6e:75:53:51:
e9:8a:c9:6e:41:88:40:81:77:5e:aa:e1:b2:d8:8d:f8:92:69:
3f:24:62:46:54:cd:80:d0:7b:b8:81:13:49:14:d0:7e:f4:b1:
77:3b:22:fd:97:b6:d7:40:b3:b3:0c:59:07:c1:d2:1a:56:8c:
c5:f9:eb:64:b9:7d:ae:1d:5d:73:a7:5b:c5:94:c0:8c:7c:2a:
8e:21:cd:34:1f:42:2b:2a:77:f6:98:9f:41:bd:97:50:0f:86:
b2:5c:84:30:58:fa:79:10:3f:bc:82:68:5e:40:f3:b8:12:73:
ff:fa:b1:ef:4e:cc:47:9c:3f:81:02:b6:73:57:4c:e4:ed:a8:
6e:db:cc:57:a3:d7:15:ce:f3:5e:dc:5f:c4:f7:64:e6:ef:12:
d4:48:46:09:89:76:3f:f2:2e:b1:4e:9f:54:f2:65:8a:84:b4:
ba:55:3a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPbd5TXDQ2lIrfLNQ6iJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw
ZmJjN2YwHhcNMjYwNzI4MTUwMDIxWhcNMjYwNzI5MTUwMDIxWjAzMTEwLwYDVQQD
EygyNTE3MjQwY2Y5ZTNlMGE5ZThmNTQzN2VkNDg5MTEwODYzOTM0MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJkMN2YQoresFOXty6xtC6LBBJYT
9u/JvPYLMhvG5aTpmtRIpBizRJW8IFml5ecPSBCV7eTiFY5zcU4KTY3rfVHaMTKr
UXzt90Wuq8Dafplfcbm0uYMJHy2TqBUoHPm3zTvQek5toxG4dJZLRqe7n6FjDi/4
SX8yFykoTxT+XgNIk1Fbu0iG3t1lqPSkCFU4Aia0nzPxje4To/iXr9a29qTRM4/3
oeq8Q8rpvsLd84XuKJGQ8+V0HdTZb59+kIJmjmZUv85UAQnmZhbBCHssh+DRT1el
qZQkqyP5Tw6qjmjQGojaBi1Bty3Qz5p0Hu6mmXJuoik9OE60tCfSjWNojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUXJAz54+Cp6PVDftSJEQhjk0EmMB8GA1UdIwQY
MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt
N2VlNTMxMWEyYTNjLzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj
LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7hcYfWp
EXg8KR7buEie2X6EXaB9RMMn8TJO56bdr8dAlg68xYZ6X9LE/5ARXp1UUXvKeMpF
YmAVBj7PMoNLo54ZOD5c0dL4N3mDi06Ukl2KVzA0l7xudVNR6YrJbkGIQIF3Xqrh
stiN+JJpPyRiRlTNgNB7uIETSRTQfvSxdzsi/Ze210CzswxZB8HSGlaMxfnrZLl9
rh1dc6dbxZTAjHwqjiHNNB9CKyp39pifQb2XUA+GslyEMFj6eRA/vIJoXkDzuBJz
//qx707MR5w/gQK2c1dM5O2obtvMV6PXFc7zXtxfxPdk5u8S1EhGCYl2P/IusU6f
VPJlioS0ulU68Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:53 2026 by rpki-client