Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: HHf5Bs6AXLTU1LgpGC6iWPl/sBJRJfF9dwEwWwg0zXo=
Subject key identifier: 4E:88:A5:45:33:93:97:E4:6F:F0:14:3B:05:E2:76:50:08:C9:5C:6A
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019FAB9AD29C3841D366C83B262F1411B30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0EBC
Signing time: Wed 29 Jul 2026 02:01:18 +0000
Manifest this update: Wed 29 Jul 2026 02:01:18 +0000
Manifest next update: Thu 30 Jul 2026 02:01:18 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: m3eVoliSnVccH2WCzPE+3IbQqvyXG6fUgneqTIJjAGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:d2:9c:38:41:d3:66:c8:3b:26:2f:14:11:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jul 29 02:01:18 2026 GMT
Not After : Jul 30 02:01:18 2026 GMT
Subject: CN=4e88a545339397e46ff0143b05e2765008c95c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:cd:41:13:20:90:a3:4c:1c:94:16:52:2c:
a2:04:16:71:d2:81:d9:81:de:d3:75:ac:96:b7:14:
ff:97:04:3f:bf:a1:7e:43:75:4b:a3:95:db:22:3b:
ea:57:7e:76:ab:8f:5f:bd:b7:84:52:ee:29:c9:b5:
ed:83:30:63:f6:39:42:90:b4:5c:57:06:7a:55:37:
31:a4:c8:8e:a8:1a:33:58:2a:67:1a:71:3d:29:e0:
bf:3e:e5:9e:a8:45:6b:6a:1f:47:74:16:d3:b1:77:
d4:a1:7f:c5:0d:a0:21:e5:29:db:cf:84:21:57:8d:
1c:a1:dc:9c:e7:f9:8a:71:68:ea:9e:6d:b0:3b:a6:
0b:21:79:0e:58:d1:51:98:32:11:da:be:26:ff:65:
60:34:f7:ef:99:d3:07:04:59:b8:d7:34:48:51:8d:
46:6b:ee:47:77:f3:86:8a:94:81:62:27:4a:03:a4:
c0:a4:7a:cc:8a:32:05:9c:0d:30:4c:10:1b:18:82:
18:17:38:28:f1:00:47:9a:53:74:5f:e5:96:82:8e:
b8:61:6a:67:6a:12:7e:47:7d:a9:de:3e:02:22:ee:
4b:55:a5:88:5c:f3:8f:56:15:78:fe:39:85:83:45:
38:84:53:3b:c5:1e:ae:ec:59:7d:73:b8:55:55:9d:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:A5:45:33:93:97:E4:6F:F0:14:3B:05:E2:76:50:08:C9:5C:6A
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:13:a8:cc:62:a1:a1:1b:39:81:22:12:df:c6:bb:3a:f2:
7b:3c:a4:cc:47:55:7e:3b:d5:4a:12:49:ed:dd:47:95:59:0e:
a5:8f:63:3c:d1:36:2f:d9:68:fc:e3:63:0b:09:94:36:9d:f4:
8e:23:88:53:33:c5:e8:ec:4f:d2:b3:22:d9:a6:70:e1:e6:91:
64:06:34:8a:8d:88:76:aa:61:b1:49:99:1b:e4:c2:1a:49:8a:
a4:30:99:9d:9b:b3:a0:95:14:ef:c2:17:fd:55:6b:49:86:bf:
57:4b:e1:4c:2b:99:60:e1:00:57:5a:7c:70:49:ea:76:7a:25:
a8:bc:48:fa:be:09:1f:f4:92:f1:c6:f3:90:58:fd:31:1a:d7:
60:04:c2:d4:de:dc:f9:e3:cd:9f:ff:29:9c:7e:a9:08:2c:38:
da:c1:8b:01:61:e6:7c:6f:16:20:75:01:47:78:23:ea:2c:3c:
d5:5f:24:e7:23:07:44:1a:dc:ab:20:40:0a:37:89:6e:d2:93:
29:0a:82:ce:32:8b:9e:40:6d:df:5f:51:6e:f8:dc:0a:63:15:
10:21:79:1f:b6:91:b0:da:3a:a8:93:c4:3d:cb:d5:ce:14:f2:
ce:a0:75:16:a7:46:1b:d5:30:4f:d1:21:27:79:95:36:ea:7a:
cd:24:95:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmtKcOEHTZsg7Ji8UEbMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2
ZDcyMmQwHhcNMjYwNzI5MDIwMTE4WhcNMjYwNzMwMDIwMTE4WjAzMTEwLwYDVQQD
Eyg0ZTg4YTU0NTMzOTM5N2U0NmZmMDE0M2IwNWUyNzY1MDA4Yzk1YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+zNQRMgkKNMHJQWUiyiBBZx0oHZ
gd7TdayWtxT/lwQ/v6F+Q3VLo5XbIjvqV352q49fvbeEUu4pybXtgzBj9jlCkLRc
VwZ6VTcxpMiOqBozWCpnGnE9KeC/PuWeqEVrah9HdBbTsXfUoX/FDaAh5Snbz4Qh
V40codyc5/mKcWjqnm2wO6YLIXkOWNFRmDIR2r4m/2VgNPfvmdMHBFm41zRIUY1G
a+5Hd/OGipSBYidKA6TApHrMijIFnA0wTBAbGIIYFzgo8QBHmlN0X+WWgo64YWpn
ahJ+R32p3j4CIu5LVaWIXPOPVhV4/jmFg0U4hFM7xR6u7Fl9c7hVVZ1zDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6IpUUzk5fkb/AUOwXidlAIyVxqMB8GA1UdIwQY
MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt
YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2
LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5ETqMxi
oaEbOYEiEt/GuzryezykzEdVfjvVShJJ7d1HlVkOpY9jPNE2L9lo/ONjCwmUNp30
jiOIUzPF6OxP0rMi2aZw4eaRZAY0io2IdqphsUmZG+TCGkmKpDCZnZuzoJUU78IX
/VVrSYa/V0vhTCuZYOEAV1p8cEnqdnolqLxI+r4JH/SS8cbzkFj9MRrXYATC1N7c
+ePNn/8pnH6pCCw42sGLAWHmfG8WIHUBR3gj6iw81V8k5yMHRBrcqyBACjeJbtKT
KQqCzjKLnkBt319RbvjcCmMVECF5H7aRsNo6qJPEPcvVzhTyzqB1FqdGG9UwT9Eh
J3mVNup6zSSV8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:39 2026 by rpki-client