Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
File: YiEr2gPikIllk3hQroSRo3O6h9Y.mft (raw, json)
Hash identifier: ODtY3LkO/OhgzSoIbk2rcauDWiTH42Bvr5tuMk1vhzM=
Subject key identifier: 94:18:DF:C8:C3:94:CA:E9:9E:7B:AA:C5:21:34:1D:CA:68:87:D5:D7
Authority key identifier: 62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
Certificate issuer: /CN=62212bda03e2908965937850ae8491a373ba87d6
Certificate serial: 01A13E25D63D1545C1F3378ABC2061F3F22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
Manifest number: 011E
Signing time: Thu 15 Oct 2026 06:00:29 +0000
Manifest this update: Thu 15 Oct 2026 06:00:29 +0000
Manifest next update: Fri 16 Oct 2026 06:00:29 +0000
Files and hashes: 1: J5ndYN47GulHNdd8j26GfEdBb4o.roa (hash: iuNL8Ztc0MFggBQFipuWLLh7iLuDAe58bhFd6SGPtXk=)
2: YiEr2gPikIllk3hQroSRo3O6h9Y.crl (hash: jtI0GKCOyw5cvI2747a+o3iDw4Lk/lZh2oA7YBnvkIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:d6:3d:15:45:c1:f3:37:8a:bc:20:61:f3:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62212bda03e2908965937850ae8491a373ba87d6
Validity
Not Before: Oct 15 06:00:29 2026 GMT
Not After : Oct 16 06:00:29 2026 GMT
Subject: CN=9418dfc8c394cae99e7baac521341dca6887d5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:3e:af:c5:32:5e:8a:e9:98:8e:09:9e:68:
63:a6:14:e8:66:0c:c6:c6:05:6c:a1:c9:63:0d:41:
0e:50:ed:d9:41:c4:f4:fb:db:84:0b:93:c0:7d:71:
4b:5d:fb:fd:44:ac:4e:00:69:07:bd:8c:56:4c:13:
d9:e0:f9:ea:47:90:fc:96:3f:b4:d6:2d:ba:0a:43:
29:0a:3f:e7:4e:31:d6:a6:bb:11:61:4e:53:89:38:
d4:d5:c7:d6:a4:6c:94:1e:2d:42:65:7b:52:85:f6:
25:54:6b:b4:b2:c4:77:d0:80:67:29:c6:98:c9:df:
ca:ef:47:27:2b:14:5e:56:00:5e:77:df:b9:8a:02:
d7:9c:8f:50:82:ab:e6:f7:78:2f:21:cb:fd:0d:53:
47:3c:3d:f8:42:07:4c:68:97:fe:ba:3a:8a:dc:97:
e9:33:79:66:ad:f2:b4:4e:81:27:1d:b9:e2:71:fc:
b7:59:76:61:b6:12:97:11:92:48:94:74:9c:04:f6:
f5:03:da:0f:b1:d2:e1:a0:f9:6d:4e:f3:57:c6:65:
ce:24:e7:8a:17:77:03:1a:8e:bf:bb:42:ba:0e:a9:
ba:b9:44:c1:3a:d4:ef:22:1f:c0:13:e8:56:d8:1f:
8f:c0:0e:66:46:40:0c:7c:84:ee:15:5e:ad:85:60:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:DF:C8:C3:94:CA:E9:9E:7B:AA:C5:21:34:1D:CA:68:87:D5:D7
X509v3 Authority Key Identifier:
keyid:62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:68:3a:b4:41:ea:42:63:b4:08:6e:64:72:16:61:77:e8:
c7:f0:96:80:b1:49:ef:a1:ef:48:15:09:dd:cb:47:c3:73:73:
ae:a0:a8:7e:ce:ee:41:d6:c0:c2:b9:48:ae:77:3b:22:c5:b2:
a0:c2:1d:4b:d9:ce:38:a7:be:b0:df:12:06:36:09:cd:71:ca:
0c:31:53:70:d8:d9:f1:2f:0e:da:53:dd:cd:02:e5:68:bd:3a:
43:ae:31:a7:b9:ae:ed:61:32:e3:5d:65:6f:2d:48:c7:1f:8f:
68:cd:14:e0:61:e9:48:c1:10:a8:28:ef:e1:57:f2:08:d8:62:
30:5c:af:2c:6f:a4:cc:e4:b5:4a:6a:a6:24:cd:f5:c3:25:7d:
2b:df:9f:b7:22:13:a7:f0:e3:b6:17:59:57:dc:ab:5b:a9:fe:
17:7a:8c:f1:cb:b6:2e:af:b2:3e:fe:5d:8f:5d:8a:00:eb:3e:
37:43:1d:7e:41:a3:7b:fd:b7:f5:21:6c:81:3b:7d:d2:28:a7:
eb:69:52:a5:d5:25:f5:cf:f6:f7:4f:82:a9:da:16:2f:f8:3c:
8e:1c:cb:6b:64:e5:3b:cf:97:dc:a7:48:ca:bd:a4:39:49:1f:
38:d0:a4:fa:b0:80:9e:d3:f6:07:ce:e1:a3:19:1e:1f:e7:a9:
3e:f5:08:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JdY9FUXB8zeKvCBh8/IqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjEyYmRhMDNlMjkwODk2NTkzNzg1MGFlODQ5MWEzNzNi
YTg3ZDYwHhcNMjYxMDE1MDYwMDI5WhcNMjYxMDE2MDYwMDI5WjAzMTEwLwYDVQQD
Eyg5NDE4ZGZjOGMzOTRjYWU5OWU3YmFhYzUyMTM0MWRjYTY4ODdkNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxs+r8UyXorpmI4JnmhjphToZgzG
xgVsocljDUEOUO3ZQcT0+9uEC5PAfXFLXfv9RKxOAGkHvYxWTBPZ4PnqR5D8lj+0
1i26CkMpCj/nTjHWprsRYU5TiTjU1cfWpGyUHi1CZXtShfYlVGu0ssR30IBnKcaY
yd/K70cnKxReVgBed9+5igLXnI9Qgqvm93gvIcv9DVNHPD34QgdMaJf+ujqK3Jfp
M3lmrfK0ToEnHbnicfy3WXZhthKXEZJIlHScBPb1A9oPsdLhoPltTvNXxmXOJOeK
F3cDGo6/u0K6Dqm6uUTBOtTvIh/AE+hW2B+PwA5mRkAMfITuFV6thWB0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQY38jDlMrpnnuqxSE0Hcpoh9XXMB8GA1UdIwQY
MBaAFGIhK9oD4pCJZZN4UK6EkaNzuofWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQt
Mjg5ZmRjNjM5OTZlLzEvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQtMjg5ZmRjNjM5OTZl
LzEvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr1oOrRB
6kJjtAhuZHIWYXfox/CWgLFJ76HvSBUJ3ctHw3NzrqCofs7uQdbAwrlIrnc7IsWy
oMIdS9nOOKe+sN8SBjYJzXHKDDFTcNjZ8S8O2lPdzQLlaL06Q64xp7mu7WEy411l
by1Ixx+PaM0U4GHpSMEQqCjv4VfyCNhiMFyvLG+kzOS1SmqmJM31wyV9K9+ftyIT
p/DjthdZV9yrW6n+F3qM8cu2Lq+yPv5dj12KAOs+N0MdfkGje/239SFsgTt90iin
62lSpdUl9c/290+CqdoWL/g8jhzLa2TlO8+X3KdIyr2kOUkfONCk+rCAntP2B87h
oxkeH+epPvUIng==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:41:22 2026 by rpki-client