Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
File: YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft (raw, json)
Hash identifier: ZDdRzAV4aIkw29Sta7SJAagwXqTiwcRkj9O9Bd+Nc0Y=
Subject key identifier: 34:72:E6:6B:DB:A3:E8:4C:EB:9F:5E:9D:DE:43:F9:4C:33:18:F2:7D
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Certificate issuer: /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial: 01A0E92E82D460296B19A5A62F283725A7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:02:14 +0000
Manifest this update: Mon 28 Sep 2026 18:02:14 +0000
Manifest next update: Tue 29 Sep 2026 18:02:14 +0000
Files and hashes: 1: YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl (hash: eYkzxsokDfmpfbz7CRMBWFcckqAYYELrsSnNFZfKDhM=)
2: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (hash: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:82:d4:60:29:6b:19:a5:a6:2f:28:37:25:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Validity
Not Before: Sep 28 18:02:14 2026 GMT
Not After : Sep 29 18:02:14 2026 GMT
Subject: CN=3472e66bdba3e84ceb9f5e9dde43f94c3318f27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:50:79:7a:a6:ac:69:2e:0b:6c:71:68:ca:
f9:9b:ff:d4:8b:36:ef:92:05:f8:6d:48:6e:4f:4d:
3e:43:ce:ea:f6:68:6a:03:de:e3:fb:da:42:44:d7:
e7:43:21:63:eb:26:f7:08:8a:66:54:35:41:16:e1:
74:d6:ae:8a:9c:99:71:9a:f0:ec:81:1c:fc:35:cc:
23:a9:2a:5d:6c:54:bb:39:9f:b2:50:9f:65:8c:07:
ab:bb:2c:2d:47:8e:93:77:3c:e7:94:98:26:7d:21:
91:31:46:d4:7e:8f:23:fa:96:6a:aa:b1:97:72:fd:
c1:e6:91:eb:d9:1c:3b:ce:7b:72:b5:92:fe:5c:bc:
2c:16:c3:13:13:62:e0:84:a2:ab:6a:51:5f:92:73:
2b:a2:16:3f:a1:98:1f:ad:93:e5:a1:32:8e:cf:37:
55:73:f5:be:34:00:ab:9f:e7:89:c5:1a:bc:51:06:
a3:54:58:92:c0:1f:1b:8b:2c:c0:b6:ef:29:2b:2c:
51:ba:1e:14:69:e4:ef:74:1f:85:9d:67:f8:86:f5:
94:8b:f6:09:8e:a0:99:3d:6d:71:d8:48:bc:e9:39:
20:12:ca:ec:99:f4:09:b3:be:cc:4d:6e:45:0f:e2:
07:e1:f1:c6:72:02:d3:78:0b:9a:e3:1d:8f:9a:6c:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:E6:6B:DB:A3:E8:4C:EB:9F:5E:9D:DE:43:F9:4C:33:18:F2:7D
X509v3 Authority Key Identifier:
keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:7a:dd:ba:b3:df:40:a9:d2:81:7e:0d:f2:0c:3e:e2:0b:
e8:d8:21:4f:6e:f2:e4:59:dd:7d:d2:cf:6f:d6:68:99:6a:81:
88:ef:3d:33:60:96:a5:6d:44:05:dd:65:53:36:ed:19:1d:cc:
f2:96:26:a2:6b:5b:ea:79:18:1a:84:fc:b3:d3:55:a8:0a:69:
be:56:50:ea:53:38:c5:b7:c4:24:fe:18:52:57:09:ab:2b:67:
3e:61:11:b5:77:4c:b5:e3:6c:cb:18:e3:33:e0:d2:ed:10:2e:
7a:5b:2c:d3:d9:20:52:e8:8a:46:b4:44:41:05:15:f9:00:3e:
2f:64:db:19:8b:3d:cc:0e:7b:ac:bf:60:b6:93:62:50:00:08:
bc:14:f3:f6:68:68:74:06:94:f2:93:d1:d2:d9:53:b7:f4:44:
52:15:ba:12:61:19:2b:64:7f:da:bf:a9:e1:5a:e9:2e:37:c4:
f6:bc:01:d6:9d:a0:8b:cb:15:49:86:d3:d2:95:8a:e2:e1:dd:
88:f1:ea:7a:d8:b5:4a:19:03:42:c0:10:70:f3:b9:4b:2a:24:
a5:32:c0:ed:be:14:1f:78:b0:de:49:f1:ed:11:ee:8f:fa:10:
8b:7f:bb:4a:be:5c:cf:7b:47:4e:e7:84:68:e1:2e:65:0f:76:
5d:ee:62:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLoLUYClrGaWmLyg3JafVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmNjYzc0YjRmZDE0ZGExN2JkNmI2OWJhOWUxOWMyNDg5
N2YzM2QwHhcNMjYwOTI4MTgwMjE0WhcNMjYwOTI5MTgwMjE0WjAzMTEwLwYDVQQD
EygzNDcyZTY2YmRiYTNlODRjZWI5ZjVlOWRkZTQzZjk0YzMzMThmMjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwdQeXqmrGkuC2xxaMr5m//Uizbv
kgX4bUhuT00+Q87q9mhqA97j+9pCRNfnQyFj6yb3CIpmVDVBFuF01q6KnJlxmvDs
gRz8NcwjqSpdbFS7OZ+yUJ9ljAeruywtR46TdzznlJgmfSGRMUbUfo8j+pZqqrGX
cv3B5pHr2Rw7zntytZL+XLwsFsMTE2LghKKralFfknMrohY/oZgfrZPloTKOzzdV
c/W+NACrn+eJxRq8UQajVFiSwB8biyzAtu8pKyxRuh4UaeTvdB+FnWf4hvWUi/YJ
jqCZPW1x2Ei86TkgEsrsmfQJs77MTW5FD+IH4fHGcgLTeAua4x2Pmmz4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRy5mvbo+hM659end5D+UwzGPJ9MB8GA1UdIwQY
MBaAFGAszHS0/RTaF71rabqeGcJIl/M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQt
YTExNDkzOWNkYWE1LzEvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQtYTExNDkzOWNkYWE1
LzEvWUN6TWRMVDlGTm9Ydld0cHVwNFp3a2lYOHowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX163bqz
30Cp0oF+DfIMPuIL6NghT27y5FndfdLPb9ZomWqBiO89M2CWpW1EBd1lUzbtGR3M
8pYmomtb6nkYGoT8s9NVqAppvlZQ6lM4xbfEJP4YUlcJqytnPmERtXdMteNsyxjj
M+DS7RAuelss09kgUuiKRrREQQUV+QA+L2TbGYs9zA57rL9gtpNiUAAIvBTz9mho
dAaU8pPR0tlTt/REUhW6EmEZK2R/2r+p4VrpLjfE9rwB1p2gi8sVSYbT0pWK4uHd
iPHqeti1ShkDQsAQcPO5SyokpTLA7b4UH3iw3knx7RHuj/oQi3+7Sr5cz3tHTueE
aOEuZQ92Xe5iYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:31 2026 by rpki-client