Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: 52/xSvH7WzdYeePxWBMFujOk0p3K7TAtTP7t28/HlPE=
Subject key identifier: 33:06:18:AF:55:09:D4:9F:9F:AE:2B:EE:0D:E1:44:DB:20:91:A5:42
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 01A0DC1750766AFAD0DF7852D2EB14928770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:50 +0000
Manifest this update: Sat 26 Sep 2026 05:01:50 +0000
Manifest next update: Sun 27 Sep 2026 05:01:50 +0000
Files and hashes: 1: NkhNpoa7Mava_QXc8cJpKFD-6x0.roa (hash: NHb2sZxdiKyxH3v4fGC8EWYo7uPMfDDnkonpIAR9yAY=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: AEbpmEcgFNWA1gc9Sn5NAdnWEDKU4im2MKledJH4mmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:50:76:6a:fa:d0:df:78:52:d2:eb:14:92:87:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Sep 26 05:01:50 2026 GMT
Not After : Sep 27 05:01:50 2026 GMT
Subject: CN=330618af5509d49f9fae2bee0de144db2091a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:37:7a:97:96:e1:7d:53:60:52:8d:0c:ad:
db:fc:f1:fe:a1:f0:8d:68:ab:c4:54:ae:35:8f:bb:
28:24:a6:43:3d:29:3f:49:34:21:a7:41:fb:00:0a:
3f:59:81:07:03:a6:2d:05:38:88:ce:23:c3:c4:26:
b3:48:dc:6f:08:37:fb:22:07:d4:89:55:36:3a:df:
a9:55:80:2b:94:85:30:da:76:f6:6e:70:d4:9c:4e:
35:4e:45:94:b0:d6:b3:6f:82:aa:16:e2:a7:e7:88:
36:83:f2:5b:b1:4f:f7:d6:c0:65:89:bb:4e:ff:6c:
a3:af:d3:61:4b:96:0d:ac:ee:82:f2:4f:35:58:14:
01:46:9d:ca:2c:bc:9c:9f:5c:4b:07:a2:8d:9a:2e:
0e:d3:4c:81:64:9f:04:cd:62:ed:75:67:07:6f:d2:
f2:a0:67:79:c7:38:cb:77:90:eb:37:d4:54:2b:40:
d6:46:e3:59:78:3c:ab:66:e0:ab:80:ce:54:59:78:
0e:cb:86:04:40:5b:48:9f:9e:21:05:14:f1:aa:d0:
dd:ce:7c:30:59:12:64:80:9a:fc:5f:5a:86:20:2b:
86:09:ea:07:f3:b3:38:68:cc:23:93:eb:d7:2e:84:
cf:29:4e:c5:15:de:d7:71:cd:35:30:73:b4:83:21:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:18:AF:55:09:D4:9F:9F:AE:2B:EE:0D:E1:44:DB:20:91:A5:42
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c2:d8:d7:e0:fb:65:06:0d:06:51:20:4b:f9:55:f9:3b:c8:
49:be:eb:ac:59:ad:1b:cd:73:9c:ce:99:de:68:8c:9b:d4:bb:
8c:22:89:4b:4c:4b:e7:0f:c2:c4:cd:21:9d:3f:bb:82:2b:6b:
e4:8a:fe:5d:44:31:e5:c5:94:67:73:9d:20:d3:3c:0b:f5:64:
b3:1f:97:60:ba:93:5f:1c:be:f3:4d:1f:57:2c:7c:83:28:05:
f6:75:2a:64:b8:bf:c8:20:5c:78:50:b9:6f:d7:9b:1e:2e:dd:
4a:a3:5f:47:4d:91:6a:a1:ea:1c:0d:79:c1:be:76:de:18:d9:
ee:e2:5c:36:e6:33:a0:ce:b5:dd:8a:01:fa:c6:07:3f:45:58:
44:6f:d3:aa:af:a8:c1:7f:88:12:f4:79:2e:b2:53:30:f0:d7:
12:27:71:5c:ea:32:6d:0c:92:8a:59:8b:c0:45:07:b1:53:42:
09:b1:ae:59:35:d0:59:45:46:05:03:6c:a4:65:1b:83:79:b7:
0d:97:9e:ce:9f:1d:95:3f:56:e4:46:13:12:76:2d:d6:4c:3a:
e3:c0:32:b3:ea:cf:df:38:16:37:07:a4:62:bf:8a:d3:06:ce:
13:3e:6a:57:32:89:2e:c3:59:c7:34:a4:28:f9:cf:9e:7b:62:
a3:86:ef:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF1B2avrQ33hS0usUkodwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjRkYWJkOWJjNDY0ODVmNmE5MTYzNmVkZTc1M2RhMzhj
OGYzNjQwHhcNMjYwOTI2MDUwMTUwWhcNMjYwOTI3MDUwMTUwWjAzMTEwLwYDVQQD
EygzMzA2MThhZjU1MDlkNDlmOWZhZTJiZWUwZGUxNDRkYjIwOTFhNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZM3epeW4X1TYFKNDK3b/PH+ofCN
aKvEVK41j7soJKZDPSk/STQhp0H7AAo/WYEHA6YtBTiIziPDxCazSNxvCDf7IgfU
iVU2Ot+pVYArlIUw2nb2bnDUnE41TkWUsNazb4KqFuKn54g2g/JbsU/31sBlibtO
/2yjr9NhS5YNrO6C8k81WBQBRp3KLLycn1xLB6KNmi4O00yBZJ8EzWLtdWcHb9Ly
oGd5xzjLd5DrN9RUK0DWRuNZeDyrZuCrgM5UWXgOy4YEQFtIn54hBRTxqtDdznww
WRJkgJr8X1qGICuGCeoH87M4aMwjk+vXLoTPKU7FFd7Xcc01MHO0gyGjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMGGK9VCdSfn64r7g3hRNsgkaVCMB8GA1UdIwQY
MBaAFMpk2r2bxGSF9qkWNu3nU9o4yPNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUt
NTAyOGMyNTliMjY3LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUtNTAyOGMyNTliMjY3
LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8LY1+D7
ZQYNBlEgS/lV+TvISb7rrFmtG81znM6Z3miMm9S7jCKJS0xL5w/CxM0hnT+7gitr
5Ir+XUQx5cWUZ3OdINM8C/Vksx+XYLqTXxy+800fVyx8gygF9nUqZLi/yCBceFC5
b9ebHi7dSqNfR02RaqHqHA15wb523hjZ7uJcNuYzoM613YoB+sYHP0VYRG/Tqq+o
wX+IEvR5LrJTMPDXEidxXOoybQySilmLwEUHsVNCCbGuWTXQWUVGBQNspGUbg3m3
DZeezp8dlT9W5EYTEnYt1kw648Ays+rP3zgWNwekYr+K0wbOEz5qVzKJLsNZxzSk
KPnPnntio4bvNw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:07 2026 by rpki-client