Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: 6YP9WbWeeSIVaSy81/ilSkIOWDaZ0UCBNJnMEwc5OvY=
Subject key identifier: 19:B1:05:2D:EF:A6:F5:E2:5A:4B:4C:C5:96:1D:A5:1A:2C:AF:3D:CE
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019FA907454ADC15B0D9F96251899789E62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0D66
Signing time: Tue 28 Jul 2026 14:00:53 +0000
Manifest this update: Tue 28 Jul 2026 14:00:53 +0000
Manifest next update: Wed 29 Jul 2026 14:00:53 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: MDKm5uHPyvunOzT6hCcnvf8LFJ2//bsnSUA8mdd7LI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:45:4a:dc:15:b0:d9:f9:62:51:89:97:89:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jul 28 14:00:53 2026 GMT
Not After : Jul 29 14:00:53 2026 GMT
Subject: CN=19b1052defa6f5e25a4b4cc5961da51a2caf3dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:a9:90:94:10:fb:68:ac:04:20:b6:6c:77:
42:46:55:51:f8:5a:56:11:2d:5f:4e:b7:1e:7d:38:
6d:a1:44:a4:9b:b9:53:92:18:e4:8c:3f:4e:31:95:
e7:6b:fc:33:a3:a8:63:13:af:4f:85:b4:4c:15:87:
6d:05:74:54:b4:68:bf:1f:b5:0e:36:79:00:b4:8a:
3f:68:67:06:e1:be:73:73:b8:40:90:44:d9:f7:09:
fd:e1:21:72:ab:be:1b:8a:dd:ac:a8:f6:da:da:74:
bc:ea:be:9b:ea:8a:b6:9c:0b:c4:a0:f2:bf:14:bc:
19:aa:61:96:b5:86:44:b7:bf:f5:01:a4:bf:80:7c:
9b:64:ee:ab:24:9c:32:9d:1c:2a:50:79:9a:0a:1d:
e7:19:26:86:11:03:0d:83:7e:14:c3:f7:19:be:d9:
65:af:d7:2f:a1:2d:e6:37:bf:15:ad:c2:8f:85:33:
47:7f:c6:c8:85:a4:ab:31:7e:6d:e0:8a:14:bd:71:
52:87:65:eb:d0:90:31:dd:09:22:35:26:e0:fd:27:
43:b3:1d:98:57:18:51:6b:fa:05:5d:2e:59:1f:f8:
81:7f:df:ff:37:e4:87:3f:76:2d:de:99:ca:f9:bd:
01:50:e8:48:e9:8e:a0:c7:0f:52:38:a7:6a:fd:61:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:05:2D:EF:A6:F5:E2:5A:4B:4C:C5:96:1D:A5:1A:2C:AF:3D:CE
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c8:f7:23:bb:15:aa:be:90:97:a6:a8:d7:32:c2:05:83:fc:
1e:cb:7c:a7:27:ab:dc:c1:7c:20:f6:c1:d4:80:57:d0:29:c7:
06:96:87:5c:a0:3d:b9:db:97:fe:ac:e4:1c:d4:83:37:9a:45:
2c:86:a5:ed:e1:5d:e0:c9:60:1f:b5:d0:cd:2a:4b:96:3b:a5:
b8:55:6e:92:36:77:6e:39:83:f8:5a:fc:df:48:59:de:9e:a7:
f1:50:c4:32:5c:4e:69:3e:af:8c:2a:9e:44:cf:e1:48:88:fb:
63:97:28:e4:8b:85:cb:27:64:5a:5f:0b:71:b2:ca:25:8f:63:
7a:6a:53:8f:1d:c3:b8:79:c8:22:ba:f1:14:b6:48:5b:fe:eb:
32:ee:b7:d4:d0:d6:e0:54:cc:3a:45:8a:dc:70:b7:84:3d:4c:
3c:5e:dd:7b:32:03:80:b4:f0:22:9f:5a:4f:cb:fd:4d:1c:21:
8c:53:c5:3f:f4:16:7f:8d:e6:af:87:aa:39:c4:be:3b:7b:31:
03:fd:5e:4c:aa:97:8d:30:48:df:c6:ed:0f:a7:e2:92:ef:f2:
68:48:58:2c:fe:ba:8f:74:5b:02:b0:46:0c:c6:4f:1d:d4:dc:
10:82:0c:d1:12:57:32:cc:e0:17:90:62:e7:8e:0b:c0:df:d0:
6c:09:11:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB0VK3BWw2fliUYmXieYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4
OTA1YmUwHhcNMjYwNzI4MTQwMDUzWhcNMjYwNzI5MTQwMDUzWjAzMTEwLwYDVQQD
EygxOWIxMDUyZGVmYTZmNWUyNWE0YjRjYzU5NjFkYTUxYTJjYWYzZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKipkJQQ+2isBCC2bHdCRlVR+FpW
ES1fTrcefThtoUSkm7lTkhjkjD9OMZXna/wzo6hjE69PhbRMFYdtBXRUtGi/H7UO
NnkAtIo/aGcG4b5zc7hAkETZ9wn94SFyq74bit2sqPba2nS86r6b6oq2nAvEoPK/
FLwZqmGWtYZEt7/1AaS/gHybZO6rJJwynRwqUHmaCh3nGSaGEQMNg34Uw/cZvtll
r9cvoS3mN78VrcKPhTNHf8bIhaSrMX5t4IoUvXFSh2Xr0JAx3QkiNSbg/SdDsx2Y
VxhRa/oFXS5ZH/iBf9//N+SHP3Yt3pnK+b0BUOhI6Y6gxw9SOKdq/WHODQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmxBS3vpvXiWktMxZYdpRosrz3OMB8GA1UdIwQY
MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt
ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0
LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscj3I7sV
qr6Ql6ao1zLCBYP8Hst8pyer3MF8IPbB1IBX0CnHBpaHXKA9uduX/qzkHNSDN5pF
LIal7eFd4MlgH7XQzSpLljuluFVukjZ3bjmD+Fr830hZ3p6n8VDEMlxOaT6vjCqe
RM/hSIj7Y5co5IuFyydkWl8LcbLKJY9jempTjx3DuHnIIrrxFLZIW/7rMu631NDW
4FTMOkWK3HC3hD1MPF7dezIDgLTwIp9aT8v9TRwhjFPFP/QWf43mr4eqOcS+O3sx
A/1eTKqXjTBI38btD6fiku/yaEhYLP66j3RbArBGDMZPHdTcEIIM0RJXMszgF5Bi
544LwN/QbAkR8w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:47 2026 by rpki-client