Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
File: Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft (raw, json)
Hash identifier: EJ3fI9ddIa6KUXHAu2vbitb/3kaDaMFmNFzUEdMPTxc=
Subject key identifier: 3A:6D:04:5D:56:08:DD:3B:B9:7F:D6:79:19:E3:35:F2:8E:E6:E1:BC
Authority key identifier: 63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
Certificate issuer: /CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Certificate serial: 01A0C5205D4E9F08D0A3557A4D8E4B606EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
Manifest number: 014D
Signing time: Mon 21 Sep 2026 18:00:27 +0000
Manifest this update: Mon 21 Sep 2026 18:00:27 +0000
Manifest next update: Tue 22 Sep 2026 18:00:27 +0000
Files and hashes: 1: KpSiFlpQT5dMSWFR8bhyaB5lV0E.roa (hash: b+M/pWTjrzDu/kT2jGIzR1Dtt5OUtfCqD8vNrO/FXP8=)
2: Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl (hash: Wfb3PVmER+heRT1hW/HDX9NtsfQorG38YKHO/nUuhRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:5d:4e:9f:08:d0:a3:55:7a:4d:8e:4b:60:6e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Validity
Not Before: Sep 21 18:00:27 2026 GMT
Not After : Sep 22 18:00:27 2026 GMT
Subject: CN=3a6d045d5608dd3bb97fd67919e335f28ee6e1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:88:a9:30:06:86:41:7a:ec:3b:89:1d:34:
a9:3b:39:b6:10:ae:e8:b6:58:b8:d6:25:ab:f1:67:
4e:86:9b:36:cf:d7:86:66:7d:98:00:f6:32:a5:97:
55:b2:a3:90:1a:27:12:b6:5b:d4:3d:35:03:61:78:
06:e3:09:05:46:94:05:55:23:8d:3e:53:fc:4c:50:
c5:59:08:ef:53:15:99:e3:dc:d4:00:dc:35:a8:a3:
fb:eb:cf:04:f0:57:23:d8:bb:8a:03:0f:94:83:d4:
2c:dc:33:b9:24:d6:47:de:89:7f:7d:a8:20:d0:e3:
a8:12:ba:60:f9:e7:17:49:67:a2:68:77:cc:62:06:
79:8a:3a:f4:80:32:74:01:ef:cd:2c:40:71:d1:94:
c3:a2:08:29:45:2a:98:10:8d:40:a6:63:24:5c:1e:
c3:59:53:dd:91:b4:25:2c:3c:55:9e:f5:fa:a2:cd:
bf:7d:45:06:4c:9f:22:bf:ba:63:f9:2f:44:89:f2:
85:a4:96:40:e1:4d:8c:65:9e:65:2c:3e:e8:d5:6e:
88:44:f1:b3:bc:ed:68:c5:18:4a:1e:5d:d7:59:87:
1f:28:4c:60:fa:d2:69:c6:9b:15:ff:c6:37:79:df:
f2:92:f2:96:ef:34:84:d5:01:2c:24:6e:68:2d:d1:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:04:5D:56:08:DD:3B:B9:7F:D6:79:19:E3:35:F2:8E:E6:E1:BC
X509v3 Authority Key Identifier:
keyid:63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7a:bb:a2:82:e6:01:58:88:c2:d2:83:4a:15:31:39:33:c1:
2f:e4:15:34:ec:78:45:df:0e:10:3c:59:af:76:6e:98:9f:dc:
c2:5a:af:c8:43:6d:89:ac:6b:04:ed:62:a0:d6:24:0a:c6:5a:
3b:3b:a5:4d:06:95:3d:d4:07:97:67:65:13:d8:16:21:d3:53:
a6:0f:4f:86:83:5c:8d:02:34:34:8b:cd:e6:1f:72:12:20:2d:
8a:41:77:77:5f:e5:d4:7f:6a:1f:53:f7:a0:24:ef:66:62:f1:
73:86:59:ae:27:46:33:68:bb:62:6e:59:da:37:19:9b:20:18:
3d:d8:33:c2:5e:24:71:40:a8:9d:0f:ff:00:76:ea:65:a8:c0:
48:ee:ee:6f:e3:37:3d:01:55:1b:94:aa:15:f9:cc:83:26:c7:
88:8f:13:ad:05:6a:2d:c5:40:b7:60:f7:37:a8:08:9c:82:47:
aa:eb:2a:f4:72:f4:88:e6:12:83:57:66:b8:dd:38:7d:e4:24:
2c:22:77:c2:f0:48:1b:ad:09:14:ef:5d:52:f5:13:f9:86:19:
d7:c4:14:38:66:08:12:ce:38:11:a8:48:96:65:b1:ab:e9:27:
e0:1e:39:36:dc:b9:b2:6f:68:08:46:86:62:70:a9:cc:f4:f7:
27:0d:aa:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFIF1OnwjQo1V6TY5LYG7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWY3ZjIwMDU0YzRmYmRhMmRlNGVkODdmNWY2NDFmOTM1
YjAzODYwHhcNMjYwOTIxMTgwMDI3WhcNMjYwOTIyMTgwMDI3WjAzMTEwLwYDVQQD
EygzYTZkMDQ1ZDU2MDhkZDNiYjk3ZmQ2NzkxOWUzMzVmMjhlZTZlMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ+IqTAGhkF67DuJHTSpOzm2EK7o
tli41iWr8WdOhps2z9eGZn2YAPYypZdVsqOQGicStlvUPTUDYXgG4wkFRpQFVSON
PlP8TFDFWQjvUxWZ49zUANw1qKP7688E8Fcj2LuKAw+Ug9Qs3DO5JNZH3ol/fagg
0OOoErpg+ecXSWeiaHfMYgZ5ijr0gDJ0Ae/NLEBx0ZTDoggpRSqYEI1ApmMkXB7D
WVPdkbQlLDxVnvX6os2/fUUGTJ8iv7pj+S9EifKFpJZA4U2MZZ5lLD7o1W6IRPGz
vO1oxRhKHl3XWYcfKExg+tJpxpsV/8Y3ed/ykvKW7zSE1QEsJG5oLdGsuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDptBF1WCN07uX/WeRnjNfKO5uG8MB8GA1UdIwQY
MBaAFGNffyAFTE+9ot5O2H9fZB+TWwOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTE5X0lBVk1UNzJpM2s3WWYxOWtINU5iQTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yZmYxODgtNjdkZS00MmEwLThiY2Qt
MzRkMjliYjFjZDg1LzEvWTE5X0lBVk1UNzJpM2s3WWYxOWtINU5iQTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yZmYxODgtNjdkZS00MmEwLThiY2QtMzRkMjliYjFjZDg1
LzEvWTE5X0lBVk1UNzJpM2s3WWYxOWtINU5iQTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInq7ooLm
AViIwtKDShUxOTPBL+QVNOx4Rd8OEDxZr3ZumJ/cwlqvyENtiaxrBO1ioNYkCsZa
OzulTQaVPdQHl2dlE9gWIdNTpg9PhoNcjQI0NIvN5h9yEiAtikF3d1/l1H9qH1P3
oCTvZmLxc4ZZridGM2i7Ym5Z2jcZmyAYPdgzwl4kcUConQ//AHbqZajASO7ub+M3
PQFVG5SqFfnMgybHiI8TrQVqLcVAt2D3N6gInIJHqusq9HL0iOYSg1dmuN04feQk
LCJ3wvBIG60JFO9dUvUT+YYZ18QUOGYIEs44EahIlmWxq+kn4B45Nty5sm9oCEaG
YnCpzPT3Jw2qkw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:30 2026 by rpki-client