Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: Vf29AOpMehur30qK4x/W0lvjU6U3KGYDyb3xpjgn6XQ=
Subject key identifier: 96:FB:0A:52:F9:66:4D:C3:7E:B8:36:41:4C:5D:44:E6:CE:62:C9:53
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019EC2C9C796268D231610E4960EE9406107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 0136
Signing time: Sat 13 Jun 2026 21:01:04 +0000
Manifest this update: Sat 13 Jun 2026 21:01:04 +0000
Manifest next update: Sun 14 Jun 2026 21:01:04 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: O1MlcqY5Bm6KuHQGNVx4jI5aQylDUWyNdmmpTPfHQfM=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:c7:96:26:8d:23:16:10:e4:96:0e:e9:40:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Jun 13 21:01:04 2026 GMT
Not After : Jun 14 21:01:04 2026 GMT
Subject: CN=96fb0a52f9664dc37eb836414c5d44e6ce62c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:f3:d4:e1:f9:81:88:40:f0:4a:cb:08:b8:
76:d9:f1:44:08:5b:f1:b2:5d:c8:7f:99:45:e5:5f:
2c:d1:b0:f2:ef:a9:90:62:e8:2f:7c:b7:67:83:b4:
c8:55:b4:56:dc:52:18:c3:e5:52:14:74:3a:21:42:
0a:87:d6:33:50:30:81:2c:a0:ad:e5:84:19:17:f5:
08:b0:9a:a0:5d:4d:d1:ff:59:1f:e5:54:f1:67:d6:
99:02:85:a1:32:c0:be:2d:84:e0:d5:a5:d3:40:89:
45:85:59:2c:fe:10:af:58:51:27:66:03:af:8b:8c:
dc:4b:f3:91:ec:d6:9b:db:12:31:bc:f9:16:b7:3b:
c1:b5:a3:45:7a:f3:d6:c0:10:42:7e:7a:ff:5a:a0:
c3:56:1b:0f:45:a6:98:11:2f:0c:0d:20:0d:90:03:
36:13:cf:d1:7e:93:2d:e0:e9:7a:b1:7f:44:44:d6:
ce:3e:57:84:3d:e6:c0:0a:98:f0:da:e5:06:9b:aa:
73:7a:95:80:de:43:a3:63:d3:30:17:4d:71:41:ce:
70:9c:d9:7b:07:10:cb:7c:9f:dc:a5:57:8c:78:18:
38:b7:49:b1:0a:95:cc:20:2b:ad:42:38:2b:8f:b9:
e3:08:05:4a:d5:d2:a6:74:d3:6e:00:01:18:ef:43:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:0A:52:F9:66:4D:C3:7E:B8:36:41:4C:5D:44:E6:CE:62:C9:53
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:f2:83:ce:71:d4:0d:bc:62:f4:2f:8c:c9:e1:ea:df:cd:
75:ec:23:8c:c6:29:c8:c8:59:d4:be:70:33:06:23:93:53:62:
bd:d6:e8:16:e0:d5:c3:5f:c4:5a:db:5b:6a:0e:30:6a:75:ab:
51:e6:f5:c1:19:2d:6f:b4:f1:a5:53:27:26:c7:2c:03:2b:6b:
03:7d:56:b7:ba:03:6a:39:02:6d:f8:34:62:2e:ea:53:67:07:
94:f6:93:21:7b:c9:72:4b:d2:ae:f9:0f:45:d4:d8:fb:d1:b1:
e1:8c:eb:ca:3f:9a:21:e6:60:5c:5c:f0:77:b3:4b:66:a1:77:
86:b3:e0:3b:f5:10:a1:fb:e3:ee:6e:e8:9b:d8:2b:dd:c0:83:
1e:98:b7:8c:c0:7f:28:83:75:29:57:78:28:3a:b2:f2:55:b8:
bf:b3:13:e8:83:30:bc:6b:95:73:8c:d0:01:a8:26:5c:21:18:
0d:f8:25:15:fc:ef:d2:cd:5f:1f:7e:9f:3a:58:89:bc:38:68:
b2:bc:b2:ba:58:fb:fd:c8:f1:7b:79:4f:e6:2e:ac:d3:17:c7:
76:42:a7:23:1c:6a:3d:4c:48:71:58:26:a7:67:b0:12:36:f0:
ce:c4:1c:64:5a:7f:56:95:40:bd:75:4b:10:f9:cf:f1:c0:07:
45:17:a3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyceWJo0jFhDklg7pQGEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2JjNjNkM2JlNWY3YzAyY2NjNGE5OWZjMmYyZjU1Mjg4
YTJkNjcwHhcNMjYwNjEzMjEwMTA0WhcNMjYwNjE0MjEwMTA0WjAzMTEwLwYDVQQD
Eyg5NmZiMGE1MmY5NjY0ZGMzN2ViODM2NDE0YzVkNDRlNmNlNjJjOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ivz1OH5gYhA8ErLCLh22fFECFvx
sl3If5lF5V8s0bDy76mQYugvfLdng7TIVbRW3FIYw+VSFHQ6IUIKh9YzUDCBLKCt
5YQZF/UIsJqgXU3R/1kf5VTxZ9aZAoWhMsC+LYTg1aXTQIlFhVks/hCvWFEnZgOv
i4zcS/OR7Nab2xIxvPkWtzvBtaNFevPWwBBCfnr/WqDDVhsPRaaYES8MDSANkAM2
E8/RfpMt4Ol6sX9ERNbOPleEPebACpjw2uUGm6pzepWA3kOjY9MwF01xQc5wnNl7
BxDLfJ/cpVeMeBg4t0mxCpXMICutQjgrj7njCAVK1dKmdNNuAAEY70NwbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb7ClL5Zk3Dfrg2QUxdRObOYslTMB8GA1UdIwQY
MBaAFGF7xj075ffALMxKmfwvL1Uoii1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVh2R1BUdmw5OEFzekVxWl9DOHZWU2lLTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hOTc2YmUtOTY3My00NDU3LTkzN2Ut
NTJlN2Y2YTc1MDEzLzEvWVh2R1BUdmw5OEFzekVxWl9DOHZWU2lLTFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hOTc2YmUtOTY3My00NDU3LTkzN2UtNTJlN2Y2YTc1MDEz
LzEvWVh2R1BUdmw5OEFzekVxWl9DOHZWU2lLTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbnyg85x
1A28YvQvjMnh6t/NdewjjMYpyMhZ1L5wMwYjk1NivdboFuDVw1/EWttbag4wanWr
Ueb1wRktb7TxpVMnJscsAytrA31Wt7oDajkCbfg0Yi7qU2cHlPaTIXvJckvSrvkP
RdTY+9Gx4Yzryj+aIeZgXFzwd7NLZqF3hrPgO/UQofvj7m7om9gr3cCDHpi3jMB/
KIN1KVd4KDqy8lW4v7MT6IMwvGuVc4zQAagmXCEYDfglFfzv0s1fH36fOliJvDho
sryyulj7/cjxe3lP5i6s0xfHdkKnIxxqPUxIcVgmp2ewEjbwzsQcZFp/VpVAvXVL
EPnP8cAHRRejsA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:59 2026 by rpki-client