Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: CXnGBW2vKt+7TJuWN3dmQH00z695SB8ovLQfRpqWvAg=
Subject key identifier: 54:62:5E:66:73:57:20:EF:65:94:5A:6C:C4:76:AC:20:10:EA:E0:23
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019EC0369937E39A162003F7FAFFFF037182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 09:01:03 +0000
Manifest this update: Sat 13 Jun 2026 09:01:03 +0000
Manifest next update: Sun 14 Jun 2026 09:01:03 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: LLEWoVJXap9Q9Ijs7pBbIfNCP4ZJOGaPKjtLjXTqtco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:99:37:e3:9a:16:20:03:f7:fa:ff:ff:03:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jun 13 09:01:03 2026 GMT
Not After : Jun 14 09:01:03 2026 GMT
Subject: CN=54625e66735720ef65945a6cc476ac2010eae023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:19:33:f8:e8:27:f7:d3:f7:63:7e:1b:1b:
86:91:36:99:1e:f2:c4:30:5a:b4:f7:b6:49:b6:dc:
77:9b:0b:0e:48:fe:39:0b:90:28:e4:f5:2d:bb:f2:
67:88:af:ac:68:be:8e:5d:d3:e1:69:2c:42:53:3b:
0e:06:15:59:0e:9b:0a:f8:f0:4c:7b:a1:24:ab:4b:
ef:42:41:a8:b9:92:e0:31:20:0f:76:f6:53:e0:b0:
22:52:db:1b:d2:cb:47:98:fb:3d:16:32:f6:78:f1:
47:d3:22:eb:57:8c:f4:28:9f:dd:87:70:85:b8:57:
96:12:4c:01:f9:17:59:00:86:0b:a6:bf:6b:bd:ff:
82:49:9a:77:a2:03:44:00:1a:0e:60:20:2b:5f:ab:
2b:e6:18:29:f9:de:e6:e4:85:ce:58:f6:d4:b8:82:
59:63:f1:a1:c9:e9:64:8a:5f:76:f1:77:b9:eb:83:
42:73:48:f5:a3:a9:2f:bf:bb:a8:51:5e:9f:f2:86:
b5:3a:f1:10:28:c3:b9:cd:73:9b:19:da:18:66:dc:
4f:ca:68:0b:1b:0e:db:ed:9b:19:81:c0:6d:db:1f:
7e:46:ee:5c:dc:e2:aa:3d:9c:7d:4d:bc:07:58:05:
50:e2:3f:d3:52:d4:4c:8f:16:5b:84:18:ae:0c:ba:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:62:5E:66:73:57:20:EF:65:94:5A:6C:C4:76:AC:20:10:EA:E0:23
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:59:af:46:69:01:77:d7:1d:d9:d9:c7:94:02:e0:66:bf:
6f:66:94:a8:ac:3b:ed:09:58:41:0e:d9:ae:ce:8e:87:ba:cd:
e3:65:80:f0:71:f7:a9:b9:a2:87:86:f6:91:ff:22:49:c5:51:
08:bf:a9:77:9e:7d:d7:93:2f:62:77:a3:c1:b4:dc:6c:e0:d4:
90:81:aa:bb:79:d3:2e:ac:4d:ee:9e:95:4c:81:fc:db:d3:83:
83:31:6c:50:e4:4b:52:92:41:4f:ed:70:fb:ea:18:22:8e:b3:
98:38:d6:59:52:ce:b0:31:2e:22:98:2d:9a:e3:97:df:82:e3:
54:5a:2e:34:51:bd:4b:dd:0c:cf:ff:19:53:2f:df:a7:e4:80:
4a:14:f9:3a:73:0c:bb:fd:35:c6:75:be:cf:db:ea:3b:67:81:
8d:39:7d:e8:37:77:80:94:ee:73:94:0c:48:8e:b3:37:4c:5b:
eb:e8:60:52:93:3f:6a:3f:12:c3:f1:9c:9b:e2:02:b3:bf:25:
39:64:57:e9:77:77:70:24:d7:84:b9:02:25:5f:dc:b5:33:80:
58:d9:f5:7f:e7:f4:62:41:ed:25:55:7b:0b:d3:51:98:dc:d3:
56:31:60:3b:5f:c8:91:7e:83:68:10:24:f4:7d:1b:3c:ea:1a:
7a:42:1c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANpk345oWIAP3+v//A3GCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjYwNjEzMDkwMTAzWhcNMjYwNjE0MDkwMTAzWjAzMTEwLwYDVQQD
Eyg1NDYyNWU2NjczNTcyMGVmNjU5NDVhNmNjNDc2YWMyMDEwZWFlMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1UZM/joJ/fT92N+GxuGkTaZHvLE
MFq097ZJttx3mwsOSP45C5Ao5PUtu/JniK+saL6OXdPhaSxCUzsOBhVZDpsK+PBM
e6Ekq0vvQkGouZLgMSAPdvZT4LAiUtsb0stHmPs9FjL2ePFH0yLrV4z0KJ/dh3CF
uFeWEkwB+RdZAIYLpr9rvf+CSZp3ogNEABoOYCArX6sr5hgp+d7m5IXOWPbUuIJZ
Y/Ghyelkil928Xe564NCc0j1o6kvv7uoUV6f8oa1OvEQKMO5zXObGdoYZtxPymgL
Gw7b7ZsZgcBt2x9+Ru5c3OKqPZx9TbwHWAVQ4j/TUtRMjxZbhBiuDLqK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRiXmZzVyDvZZRabMR2rCAQ6uAjMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3ZZr0Zp
AXfXHdnZx5QC4Ga/b2aUqKw77QlYQQ7Zrs6Oh7rN42WA8HH3qbmih4b2kf8iScVR
CL+pd55915MvYnejwbTcbODUkIGqu3nTLqxN7p6VTIH829ODgzFsUORLUpJBT+1w
++oYIo6zmDjWWVLOsDEuIpgtmuOX34LjVFouNFG9S90Mz/8ZUy/fp+SAShT5OnMM
u/01xnW+z9vqO2eBjTl96Dd3gJTuc5QMSI6zN0xb6+hgUpM/aj8Sw/Gcm+ICs78l
OWRX6Xd3cCTXhLkCJV/ctTOAWNn1f+f0YkHtJVV7C9NRmNzTVjFgO1/IkX6DaBAk
9H0bPOoaekIcPw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:50 2026 by rpki-client