Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: RGKmTr8NZneodGHb7MJo0Fyj47MGHgoTiCw0wgBw9C8=
Subject key identifier: F5:B6:BD:31:2F:CF:41:AA:69:84:7E:BA:D0:70:B3:75:42:1A:C8:B9
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019FAC07DB1AF35F1F5D2DB6DCCF02CE4C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 16BC
Signing time: Wed 29 Jul 2026 04:00:23 +0000
Manifest this update: Wed 29 Jul 2026 04:00:23 +0000
Manifest next update: Thu 30 Jul 2026 04:00:23 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: oQUhOfXeQLkhKL+a+LxhKvvPmSZ3uzOOcmUaZNkHIlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:db:1a:f3:5f:1f:5d:2d:b6:dc:cf:02:ce:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jul 29 04:00:23 2026 GMT
Not After : Jul 30 04:00:23 2026 GMT
Subject: CN=f5b6bd312fcf41aa69847ebad070b375421ac8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:77:61:97:65:a0:d9:83:dc:16:de:37:df:
7e:dc:90:71:54:c5:25:b6:db:b0:46:7d:79:2b:5b:
4c:0c:17:6b:a8:f0:f8:ad:4c:73:f7:f9:f1:35:82:
f6:73:c3:13:dc:5c:29:8b:e1:03:8f:b6:b3:26:a0:
cb:bd:bd:ef:cf:f8:16:cd:1b:57:07:a9:3a:da:ad:
61:30:bd:ee:ea:85:65:68:99:c1:10:cd:f5:73:8f:
56:49:7a:ce:ec:a5:f7:67:7a:6b:26:8b:fc:a7:51:
29:0b:7e:f5:71:7b:b2:e1:d3:ea:05:5c:66:ae:4e:
d6:e7:a9:8e:55:dc:9a:48:45:4d:85:62:48:ee:3b:
19:ca:e4:1c:a1:3b:d0:80:59:bb:c3:26:a7:b7:db:
b1:48:d3:38:de:f0:36:7f:43:2a:cc:ed:e5:44:76:
0b:26:b8:71:1d:4e:7b:0d:22:9d:79:c8:db:09:d6:
a3:cb:c3:52:ed:cc:3d:1f:f5:10:70:a9:4e:e8:cf:
b0:6b:e5:bc:dd:c2:95:ff:1d:44:fc:f0:33:bd:bc:
7c:af:3b:53:1e:87:f4:1a:bb:78:2c:52:fa:5b:73:
03:5e:af:24:8c:ca:17:3c:b5:dd:0b:7b:60:75:09:
87:ea:fe:bb:02:83:13:13:ff:85:0a:22:e4:61:e9:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:BD:31:2F:CF:41:AA:69:84:7E:BA:D0:70:B3:75:42:1A:C8:B9
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:61:6e:6c:48:22:85:0d:02:9d:72:75:1a:6a:eb:44:ba:17:
3f:c1:63:15:74:26:0f:ba:50:ad:3e:6c:02:9a:ae:16:c0:cd:
0f:29:08:76:a5:82:47:13:fe:e3:b1:bc:1d:8e:99:f1:cd:ca:
ca:9d:0f:e7:cc:74:f9:c7:96:7c:55:2e:17:4b:e1:f6:10:b2:
c3:63:0b:05:b1:01:c6:5e:82:78:a9:2c:45:97:b6:10:0e:40:
42:86:e9:db:06:b9:2f:c1:2f:56:d9:5f:9f:ca:92:4f:4e:53:
94:fe:ad:f3:3e:14:0e:73:52:cb:2a:12:d1:de:fd:23:c8:02:
7c:73:db:a4:71:11:95:39:5b:4e:7b:82:76:e5:86:b2:35:4d:
40:a5:ff:7a:1a:5d:58:ba:82:d6:53:2c:8a:41:44:74:8c:bb:
66:61:54:86:ef:0b:a9:d1:cd:69:0f:e3:1a:77:d0:08:42:a0:
d0:86:6c:18:54:2c:f5:2e:4e:b3:b2:39:4e:7a:8b:f5:f7:2e:
b7:9b:3c:37:73:cd:a4:40:04:6d:51:26:7d:af:b3:f6:70:4d:
8e:b3:ce:51:45:9b:ee:c0:4d:09:fb:fd:3b:5e:8c:ba:7d:4e:
a2:4d:0a:af:7a:a3:a7:7b:9d:b2:4c:75:69:05:4d:5b:b1:7b:
03:40:c9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sB9sa818fXS223M8CzkwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk
NTE5ZGEwHhcNMjYwNzI5MDQwMDIzWhcNMjYwNzMwMDQwMDIzWjAzMTEwLwYDVQQD
EyhmNWI2YmQzMTJmY2Y0MWFhNjk4NDdlYmFkMDcwYjM3NTQyMWFjOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fR3YZdloNmD3BbeN99+3JBxVMUl
ttuwRn15K1tMDBdrqPD4rUxz9/nxNYL2c8MT3Fwpi+EDj7azJqDLvb3vz/gWzRtX
B6k62q1hML3u6oVlaJnBEM31c49WSXrO7KX3Z3prJov8p1EpC371cXuy4dPqBVxm
rk7W56mOVdyaSEVNhWJI7jsZyuQcoTvQgFm7wyant9uxSNM43vA2f0MqzO3lRHYL
JrhxHU57DSKdecjbCdajy8NS7cw9H/UQcKlO6M+wa+W83cKV/x1E/PAzvbx8rztT
Hof0Grt4LFL6W3MDXq8kjMoXPLXdC3tgdQmH6v67AoMTE/+FCiLkYelBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW2vTEvz0GqaYR+utBws3VCGsi5MB8GA1UdIwQY
MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt
Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw
LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmFubEgi
hQ0CnXJ1GmrrRLoXP8FjFXQmD7pQrT5sApquFsDNDykIdqWCRxP+47G8HY6Z8c3K
yp0P58x0+ceWfFUuF0vh9hCyw2MLBbEBxl6CeKksRZe2EA5AQobp2wa5L8EvVtlf
n8qST05TlP6t8z4UDnNSyyoS0d79I8gCfHPbpHERlTlbTnuCduWGsjVNQKX/ehpd
WLqC1lMsikFEdIy7ZmFUhu8LqdHNaQ/jGnfQCEKg0IZsGFQs9S5Os7I5TnqL9fcu
t5s8N3PNpEAEbVEmfa+z9nBNjrPOUUWb7sBNCfv9O16Mun1Ook0Kr3qjp3udskx1
aQVNW7F7A0DJUw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:26:54 2026 by rpki-client