Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: RtwKT5wElSMsEw0cG994qqjRyP0MM1yLmfPkf5kpvnA=
Subject key identifier: BD:71:7A:F7:3D:5D:B1:F8:4C:84:5D:94:A0:69:92:AE:1E:46:DE:B0
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 019FAD1B2A025D8739AF869A391D08423238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 99
Signing time: Wed 29 Jul 2026 09:01:06 +0000
Manifest this update: Wed 29 Jul 2026 09:01:06 +0000
Manifest next update: Thu 30 Jul 2026 09:01:06 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: nSqNiTweYpJE1nBF5Rlg/Zqv2OLZpbP6kBkvlWtMYME=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:2a:02:5d:87:39:af:86:9a:39:1d:08:42:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Jul 29 09:01:06 2026 GMT
Not After : Jul 30 09:01:06 2026 GMT
Subject: CN=bd717af73d5db1f84c845d94a06992ae1e46deb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:ca:c2:02:45:98:f0:39:ba:61:dc:7c:b2:
47:b7:f0:30:7f:dc:da:18:ef:d1:5b:66:20:2e:23:
75:60:60:0b:0c:ac:dd:c6:87:cb:9d:09:58:8b:31:
05:33:08:6f:7d:a2:77:f8:20:c1:67:cd:65:cd:01:
58:76:cc:0a:6d:96:bb:7b:05:53:47:ed:84:5b:fa:
24:17:aa:aa:c4:9a:95:b8:25:30:a2:4b:11:69:c3:
72:dc:60:b8:cb:1a:51:ae:30:0d:61:fa:77:17:e4:
c1:50:73:49:34:2a:4c:15:42:49:5e:f9:e0:6c:9f:
d0:98:a0:70:2c:9e:b7:c6:f4:70:5f:9e:bb:e5:cd:
33:50:3d:9a:bf:3f:5c:9a:e6:09:d0:7f:55:4e:ce:
3f:63:b3:eb:87:5f:eb:bf:93:57:4f:19:66:25:bb:
1b:8f:8e:22:0c:60:3b:09:4c:24:b3:1a:c3:82:b2:
12:36:7c:e5:00:a8:59:76:3b:21:a1:c9:e6:32:3a:
0d:f9:1f:02:e9:4c:7e:d4:7e:16:1b:14:16:e2:13:
aa:a7:1e:63:42:cb:0f:1a:0e:b6:cc:a7:4d:f0:e6:
48:c4:c0:75:e6:82:c7:55:05:ef:d3:40:a6:ad:f2:
c2:e5:09:59:ad:27:08:4e:f4:d5:b8:61:d4:7b:6b:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:7A:F7:3D:5D:B1:F8:4C:84:5D:94:A0:69:92:AE:1E:46:DE:B0
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:c8:69:d5:06:27:c5:2f:42:63:cb:d8:1e:d9:d2:e6:b6:
d0:3d:3d:ef:92:69:e9:c5:00:74:b0:1f:5e:02:c0:a5:d1:6c:
23:cd:80:30:bb:56:fa:20:be:61:71:4b:6f:ce:92:cc:f9:e7:
83:78:9c:aa:7d:f7:4d:12:14:4b:03:68:01:19:ef:3d:4e:49:
2a:3f:ca:c3:28:1b:74:0f:82:f2:e4:c7:c6:45:0f:85:5c:b5:
79:a4:a0:85:eb:0a:3f:9b:54:a2:86:53:ff:af:80:a1:d8:f9:
ba:27:41:c0:79:89:98:67:4a:54:66:74:9f:a9:d8:d9:cc:f8:
fe:26:42:2f:65:2b:7d:96:68:36:5b:57:ef:3c:27:49:cc:d1:
22:a4:3e:21:05:4d:42:0d:b4:7b:9e:5b:aa:fa:53:30:75:50:
9e:a2:ba:fe:26:22:20:04:0b:85:94:87:fe:0e:bf:08:91:76:
71:81:09:05:4f:91:ed:a9:e4:3b:b5:89:5b:39:fa:39:c9:dc:
90:a2:00:cd:60:17:e5:55:1f:cb:25:b6:23:84:09:3d:65:b9:
22:d9:36:7a:40:94:33:98:46:f9:72:0e:9d:f2:45:65:be:c4:
60:7f:75:93:3d:c4:4e:66:56:6a:e5:b3:c7:b6:4d:0f:c8:b1:
3e:0b:33:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGyoCXYc5r4aaOR0IQjI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZjVmYjgzZGE0NTU4NDZlYTY0MWFhNzIxMTFjNWZjMmM3
YzQ2ODMwHhcNMjYwNzI5MDkwMTA2WhcNMjYwNzMwMDkwMTA2WjAzMTEwLwYDVQQD
EyhiZDcxN2FmNzNkNWRiMWY4NGM4NDVkOTRhMDY5OTJhZTFlNDZkZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f3KwgJFmPA5umHcfLJHt/Awf9za
GO/RW2YgLiN1YGALDKzdxofLnQlYizEFMwhvfaJ3+CDBZ81lzQFYdswKbZa7ewVT
R+2EW/okF6qqxJqVuCUwoksRacNy3GC4yxpRrjANYfp3F+TBUHNJNCpMFUJJXvng
bJ/QmKBwLJ63xvRwX5675c0zUD2avz9cmuYJ0H9VTs4/Y7Prh1/rv5NXTxlmJbsb
j44iDGA7CUwksxrDgrISNnzlAKhZdjshocnmMjoN+R8C6Ux+1H4WGxQW4hOqpx5j
QssPGg62zKdN8OZIxMB15oLHVQXv00CmrfLC5QlZrScITvTVuGHUe2ucgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1xevc9XbH4TIRdlKBpkq4eRt6wMB8GA1UdIwQY
MBaAFGH1+4PaRVhG6mQapyERxfwsfEaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84ZTU4ZGItMzk4OS00N2U3LWJlMDQt
N2FhNmFkZTFhZjA3LzEvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84ZTU4ZGItMzk4OS00N2U3LWJlMDQtN2FhNmFkZTFhZjA3
LzEvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMrIadUG
J8UvQmPL2B7Z0ua20D0975Jp6cUAdLAfXgLApdFsI82AMLtW+iC+YXFLb86SzPnn
g3icqn33TRIUSwNoARnvPU5JKj/KwygbdA+C8uTHxkUPhVy1eaSghesKP5tUooZT
/6+Aodj5uidBwHmJmGdKVGZ0n6nY2cz4/iZCL2UrfZZoNltX7zwnSczRIqQ+IQVN
Qg20e55bqvpTMHVQnqK6/iYiIAQLhZSH/g6/CJF2cYEJBU+R7ankO7WJWzn6Ocnc
kKIAzWAX5VUfyyW2I4QJPWW5Itk2ekCUM5hG+XIOnfJFZb7EYH91kz3ETmZWauWz
x7ZND8ixPgszjA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:21 2026 by rpki-client