Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: LKFpnDcVhY/RwDBUiiJb7xMJoadXps0PYj9uXx5vdYo=
Subject key identifier: DA:08:7B:12:1C:A2:D3:8A:2E:F5:1A:EE:DF:91:5B:D3:F9:EE:A6:54
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01A13CA513EFD5AF8514181196DEFF68411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1AAF
Signing time: Wed 14 Oct 2026 23:00:13 +0000
Manifest this update: Wed 14 Oct 2026 23:00:13 +0000
Manifest next update: Thu 15 Oct 2026 23:00:13 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: vcseUuWF+YQI7IfbMGffCqiFmsoPNbly0dfegYCXSdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:13:ef:d5:af:85:14:18:11:96:de:ff:68:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Oct 14 23:00:13 2026 GMT
Not After : Oct 15 23:00:13 2026 GMT
Subject: CN=da087b121ca2d38a2ef51aeedf915bd3f9eea654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:cb:c8:f6:4c:d1:fc:aa:fc:0d:fa:a1:d7:
23:ed:5d:66:8f:56:a8:18:30:9e:b0:2e:95:af:97:
c4:a2:e5:00:f2:4c:df:b6:50:0e:26:12:e2:11:d7:
d3:62:92:ee:54:c4:93:28:3c:fa:b2:79:c3:b8:ba:
f7:ea:9d:2c:90:d1:b8:47:61:f1:ef:64:59:85:77:
81:83:38:7d:0a:15:c5:b7:e2:77:83:69:84:9b:85:
30:4c:5b:47:89:02:81:a3:3c:97:f9:65:3e:30:dd:
3b:69:be:d5:15:f4:c2:41:12:80:e7:d0:7e:c4:8c:
41:0b:bd:5e:a6:04:65:7b:78:fa:2a:db:9a:e9:b7:
d7:b7:af:9b:bd:9f:97:43:c5:1c:4d:b4:f4:55:23:
c7:e9:cb:76:42:2b:b8:57:2d:b8:d0:01:62:a7:3c:
7f:e2:b2:14:54:28:a1:94:57:22:60:1e:14:0b:a6:
1c:c6:c2:16:d3:e7:7e:1d:e6:66:33:a5:18:6b:8d:
88:bf:8d:11:4d:30:26:31:ba:2b:d5:37:3a:3f:a6:
73:77:9f:8f:89:c0:45:80:91:f5:34:9d:cc:e1:57:
6c:7a:af:24:b0:61:4a:e0:e6:6a:53:64:4f:1d:8e:
7b:2a:c1:91:2f:50:5d:b1:d8:63:6f:fd:c6:22:fa:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:7B:12:1C:A2:D3:8A:2E:F5:1A:EE:DF:91:5B:D3:F9:EE:A6:54
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bf:c4:56:25:53:69:cc:74:4b:11:28:29:29:04:2a:53:18:
72:0f:a4:f7:eb:45:ec:88:69:04:de:8b:c6:76:30:38:0a:a1:
a1:1e:4a:25:88:cc:b4:64:1f:14:4c:8f:e6:e2:8e:73:a8:91:
88:84:7b:6f:11:55:e1:6d:3e:aa:34:43:75:5f:9b:ec:7d:31:
67:97:25:dc:45:01:89:98:db:30:de:5e:a9:5f:69:97:75:7f:
2e:39:af:43:9c:fb:5e:4e:80:46:a3:a8:6a:2f:47:77:f9:85:
bb:71:fa:38:b3:a8:19:93:93:0a:dd:2e:f1:09:98:8b:16:2c:
cf:12:c4:67:a7:52:32:bd:f9:b7:88:cb:0a:83:f7:e9:58:9d:
51:cf:a2:b0:6d:f7:1c:51:e3:dd:bb:9d:31:60:71:27:76:6b:
94:b7:74:b6:d7:d0:23:dc:52:4b:72:00:b9:6b:e9:6f:e5:da:
64:bf:ba:30:c6:76:e5:b3:dd:63:48:b4:b4:5f:cd:74:05:ab:
97:cc:cf:cd:36:0c:93:79:a7:81:3e:0b:dd:c9:f5:4a:d3:93:
90:07:87:73:d2:b6:11:f4:ce:54:3d:ee:ec:c8:48:74:70:32:
de:b6:61:59:4b:ba:1d:3e:74:33:96:9c:ad:a3:e2:dd:25:ff:
9a:2d:a7:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8pRPv1a+FFBgRlt7/aEEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjYxMDE0MjMwMDEzWhcNMjYxMDE1MjMwMDEzWjAzMTEwLwYDVQQD
EyhkYTA4N2IxMjFjYTJkMzhhMmVmNTFhZWVkZjkxNWJkM2Y5ZWVhNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjibLyPZM0fyq/A36odcj7V1mj1ao
GDCesC6Vr5fEouUA8kzftlAOJhLiEdfTYpLuVMSTKDz6snnDuLr36p0skNG4R2Hx
72RZhXeBgzh9ChXFt+J3g2mEm4UwTFtHiQKBozyX+WU+MN07ab7VFfTCQRKA59B+
xIxBC71epgRle3j6Ktua6bfXt6+bvZ+XQ8UcTbT0VSPH6ct2Qiu4Vy240AFipzx/
4rIUVCihlFciYB4UC6YcxsIW0+d+HeZmM6UYa42Iv40RTTAmMbor1Tc6P6Zzd5+P
icBFgJH1NJ3M4Vdseq8ksGFK4OZqU2RPHY57KsGRL1Bdsdhjb/3GIvqLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoIexIcotOKLvUa7t+RW9P57qZUMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL/EViVT
acx0SxEoKSkEKlMYcg+k9+tF7IhpBN6LxnYwOAqhoR5KJYjMtGQfFEyP5uKOc6iR
iIR7bxFV4W0+qjRDdV+b7H0xZ5cl3EUBiZjbMN5eqV9pl3V/LjmvQ5z7Xk6ARqOo
ai9Hd/mFu3H6OLOoGZOTCt0u8QmYixYszxLEZ6dSMr35t4jLCoP36VidUc+isG33
HFHj3budMWBxJ3ZrlLd0ttfQI9xSS3IAuWvpb+XaZL+6MMZ25bPdY0i0tF/NdAWr
l8zPzTYMk3mngT4L3cn1StOTkAeHc9K2EfTOVD3u7MhIdHAy3rZhWUu6HT50M5ac
raPi3SX/mi2nbQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:42 2026 by rpki-client