Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: qWX1VZ7GYDbQnirKhKUnONK+rk3eF9uMOAJX2Qeqe+A=
Subject key identifier: F0:36:0D:FC:6E:76:FF:54:44:64:2D:4E:86:FE:84:E2:D5:F4:E4:21
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019FA89A4DDBFB2CD48B04391B945091AD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 12:01:52 +0000
Manifest this update: Tue 28 Jul 2026 12:01:52 +0000
Manifest next update: Wed 29 Jul 2026 12:01:52 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: XjT9wZrlyEr8668Ir5QEsEwnQq83SBscb9RFQCTlhnM=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:4d:db:fb:2c:d4:8b:04:39:1b:94:50:91:ad:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Jul 28 12:01:52 2026 GMT
Not After : Jul 29 12:01:52 2026 GMT
Subject: CN=f0360dfc6e76ff5444642d4e86fe84e2d5f4e421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:4a:e2:1f:85:8b:61:17:78:97:61:2d:87:
4e:30:01:03:ea:9f:28:a6:29:ed:b3:29:19:c1:ed:
c2:fb:b3:62:9c:76:80:e2:33:82:e7:ab:6c:13:41:
1d:26:b0:7b:03:ad:5e:c1:be:64:7c:06:c3:d6:60:
e8:39:67:a7:5a:52:db:75:b1:72:84:42:0b:ab:15:
f5:42:d7:76:d1:21:aa:a1:35:e1:54:41:a3:08:d0:
27:85:7e:7c:ac:3a:09:10:6a:0f:0b:64:64:dc:94:
94:b9:ef:20:97:cf:13:f3:6c:e4:c2:94:9d:5f:71:
bb:99:7a:24:1c:1c:1e:25:c5:2d:b6:b9:dc:d7:38:
23:43:0d:9f:37:56:7e:c0:a1:26:4d:65:ac:03:be:
5c:c9:fd:a3:8d:77:5f:21:fa:e4:fc:d7:db:b3:e7:
fa:b9:2f:54:b6:22:ad:51:d4:6c:20:5b:e3:86:50:
49:60:7d:90:5a:b7:4b:c8:ea:4f:a7:65:d2:c3:48:
dd:e6:70:a3:51:14:02:04:ce:be:4a:85:40:07:a8:
11:a6:9d:24:a4:c4:d2:ac:b1:b0:7c:f3:41:61:60:
ae:01:2a:7f:49:7b:04:88:01:30:40:f4:a0:85:77:
af:9a:4a:37:61:40:37:46:21:79:a6:3c:04:b4:a8:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:0D:FC:6E:76:FF:54:44:64:2D:4E:86:FE:84:E2:D5:F4:E4:21
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:01:ce:e8:0c:da:68:b3:19:46:14:79:57:06:a5:ad:17:
75:2b:37:e0:36:cc:b2:e1:4b:6c:ab:01:ba:15:aa:f0:77:5d:
bb:07:7b:63:e0:ec:20:c0:07:b6:9e:91:a4:07:14:da:8f:4b:
eb:e8:8f:df:b5:d5:56:c8:58:ec:06:df:4a:ef:46:1b:94:fb:
6e:e1:3c:1c:95:ac:ab:9a:dd:1a:78:c8:f5:12:c8:82:fe:e9:
65:63:15:8c:5b:48:2b:c7:98:6b:49:e6:98:90:95:89:ce:79:
13:bb:09:f2:de:06:bd:ed:4f:29:4c:bf:d6:f8:85:ea:8e:ca:
d6:44:0b:80:79:21:3c:18:13:fd:04:f8:6f:00:5f:52:c3:99:
97:45:18:9f:fa:b0:c6:04:6a:13:b0:af:51:52:bf:fa:fc:f4:
7c:91:c5:bf:8d:88:eb:92:5c:d9:31:d3:e7:58:b3:12:8f:8b:
19:86:6c:bd:72:67:84:a8:c3:5d:f2:f5:e4:34:46:3f:be:dd:
12:a6:6f:2b:cb:86:f6:42:3f:c4:20:6c:af:c0:8e:2a:cd:99:
15:8a:9f:0e:e7:d7:86:cf:41:55:4a:b1:ff:a1:c7:18:ee:97:
12:bf:2a:5d:fb:52:55:d8:ee:be:ce:21:59:79:5a:ca:b8:4b:
f7:e8:a5:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omk3b+yzUiwQ5G5RQka1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjYwNzI4MTIwMTUyWhcNMjYwNzI5MTIwMTUyWjAzMTEwLwYDVQQD
EyhmMDM2MGRmYzZlNzZmZjU0NDQ2NDJkNGU4NmZlODRlMmQ1ZjRlNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneVK4h+Fi2EXeJdhLYdOMAED6p8o
pintsykZwe3C+7NinHaA4jOC56tsE0EdJrB7A61ewb5kfAbD1mDoOWenWlLbdbFy
hEILqxX1Qtd20SGqoTXhVEGjCNAnhX58rDoJEGoPC2Rk3JSUue8gl88T82zkwpSd
X3G7mXokHBweJcUttrnc1zgjQw2fN1Z+wKEmTWWsA75cyf2jjXdfIfrk/Nfbs+f6
uS9UtiKtUdRsIFvjhlBJYH2QWrdLyOpPp2XSw0jd5nCjURQCBM6+SoVAB6gRpp0k
pMTSrLGwfPNBYWCuASp/SXsEiAEwQPSghXevmko3YUA3RiF5pjwEtKgArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA2Dfxudv9URGQtTob+hOLV9OQhMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWwBzugM
2mizGUYUeVcGpa0XdSs34DbMsuFLbKsBuhWq8Hdduwd7Y+DsIMAHtp6RpAcU2o9L
6+iP37XVVshY7AbfSu9GG5T7buE8HJWsq5rdGnjI9RLIgv7pZWMVjFtIK8eYa0nm
mJCVic55E7sJ8t4Gve1PKUy/1viF6o7K1kQLgHkhPBgT/QT4bwBfUsOZl0UYn/qw
xgRqE7CvUVK/+vz0fJHFv42I65Jc2THT51izEo+LGYZsvXJnhKjDXfL15DRGP77d
EqZvK8uG9kI/xCBsr8COKs2ZFYqfDufXhs9BVUqx/6HHGO6XEr8qXftSVdjuvs4h
WXlayrhL9+iltw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:34 2026 by rpki-client