Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: lJYscSA6Hj0ISJIqH4JJx5EH0adbvVBUjVbSV+YRFrc=
Subject key identifier: C8:36:BA:DD:BE:70:9A:2B:CA:91:97:D1:BF:7A:83:DB:C0:57:AA:CD
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 01A0BE7950BC0BB6CE766C7F7680798026AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 0458
Signing time: Sun 20 Sep 2026 11:00:16 +0000
Manifest this update: Sun 20 Sep 2026 11:00:16 +0000
Manifest next update: Mon 21 Sep 2026 11:00:16 +0000
Files and hashes: 1: Vx87YxHA-7meaIkhnN1x3tZeAC4.asa (hash: zZpxTKgALrpqRT44gkUfvltbIqTMiL/2H9KqVeHZxmM=)
2: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: MoMY6RaiZsD9e09DiBGKuggFn025UXu7mMONhN0eBl8=)
3: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:50:bc:0b:b6:ce:76:6c:7f:76:80:79:80:26:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Sep 20 11:00:16 2026 GMT
Not After : Sep 21 11:00:16 2026 GMT
Subject: CN=c836baddbe709a2bca9197d1bf7a83dbc057aacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:86:78:68:24:dd:a0:bd:6e:d1:ae:c6:cf:
55:bb:02:3c:34:eb:f9:15:e3:d6:79:75:aa:40:b3:
ea:16:08:47:c1:f6:51:25:28:d5:4b:1e:4d:6a:6c:
ac:ef:07:11:0e:df:d9:5a:a6:41:b9:fb:02:f6:98:
a8:4a:1d:b1:de:82:47:0c:8a:7d:8f:8e:36:e3:a1:
43:00:ea:b6:f2:38:20:7b:0d:2d:e6:ab:0f:f0:d0:
b0:e1:04:0e:40:6f:46:f1:c3:4c:d8:cd:44:32:ac:
f7:d6:8e:62:b2:de:d9:3a:a3:20:14:4b:d1:ae:55:
b7:e7:92:fe:9d:af:53:94:d1:93:e5:4b:58:26:5e:
8e:3b:d4:d2:52:f5:74:60:db:36:57:b8:10:ac:7b:
e9:c2:f6:2c:4b:53:78:7f:40:8b:f9:59:23:3e:92:
d6:5c:6f:fa:22:e3:7f:fc:75:85:1b:16:12:cb:ae:
8a:18:08:3b:98:86:d4:37:55:9e:98:f0:48:8a:85:
f7:76:da:69:ee:19:3d:16:5c:a7:7c:5c:42:a7:9f:
9d:4d:0e:97:ec:af:df:f0:ea:14:c4:cf:f7:3f:f8:
c9:cf:dc:73:10:be:14:df:bb:3d:7d:b7:97:32:e8:
93:98:dc:00:eb:b8:4a:54:64:31:41:c1:cb:73:c4:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:BA:DD:BE:70:9A:2B:CA:91:97:D1:BF:7A:83:DB:C0:57:AA:CD
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5d:99:f0:57:1c:eb:05:6f:8e:d9:29:c7:9b:f8:05:fd:a4:
9c:ca:f5:16:19:08:3b:1c:d5:4f:15:4d:0a:12:07:32:ef:b5:
d5:dc:e3:af:db:5f:c6:90:d9:7e:f6:6d:9d:bc:29:f7:24:50:
56:7c:79:81:da:21:31:f1:51:eb:3a:6f:cb:a1:ee:52:1a:7a:
8c:97:4a:66:c0:60:ff:40:eb:0e:11:65:d0:37:b3:28:cd:57:
ab:76:be:fc:63:2c:15:7c:fb:e2:5f:76:65:26:5a:92:1a:fd:
74:d2:c0:6d:64:fd:cd:1a:59:e0:e8:10:95:da:f6:1b:42:c1:
17:bc:a3:da:bd:75:a6:ca:bb:cb:e6:eb:c1:c9:4e:58:42:d2:
28:7b:74:f7:3a:b2:49:e3:e2:9c:0e:af:be:5f:48:51:a9:b0:
f9:a5:e4:0f:a7:4e:b4:9f:97:42:8b:ef:a1:e1:24:a2:9e:7e:
39:59:85:26:06:c9:fe:cf:60:56:e0:46:f2:7a:22:2b:1a:45:
e5:32:66:a6:bf:58:9f:ac:37:76:0a:92:a6:6e:4f:e9:5e:28:
9d:78:73:cd:73:5c:fe:ef:5c:f7:35:01:b3:02:58:ef:f3:9e:
59:92:71:06:3c:da:b8:da:d2:6e:fe:fd:81:f8:9e:29:2b:38:
52:0d:59:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+eVC8C7bOdmx/doB5gCasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODcxNjllMDMwZTM3MjVkNmViNDc4YTMyN2U2YmRmMzZi
ZThkMmYwHhcNMjYwOTIwMTEwMDE2WhcNMjYwOTIxMTEwMDE2WjAzMTEwLwYDVQQD
EyhjODM2YmFkZGJlNzA5YTJiY2E5MTk3ZDFiZjdhODNkYmMwNTdhYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS+GeGgk3aC9btGuxs9VuwI8NOv5
FePWeXWqQLPqFghHwfZRJSjVSx5Namys7wcRDt/ZWqZBufsC9pioSh2x3oJHDIp9
j44246FDAOq28jggew0t5qsP8NCw4QQOQG9G8cNM2M1EMqz31o5ist7ZOqMgFEvR
rlW355L+na9TlNGT5UtYJl6OO9TSUvV0YNs2V7gQrHvpwvYsS1N4f0CL+VkjPpLW
XG/6IuN//HWFGxYSy66KGAg7mIbUN1WemPBIioX3dtpp7hk9FlynfFxCp5+dTQ6X
7K/f8OoUxM/3P/jJz9xzEL4U37s9fbeXMuiTmNwA67hKVGQxQcHLc8TMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg2ut2+cJorypGX0b96g9vAV6rNMB8GA1UdIwQY
MBaAFGGHFp4DDjcl1utHijJ+a982vo0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWIt
NDgwZGY4ZjQxZTQ0LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWItNDgwZGY4ZjQxZTQ0
LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWF2Z8Fcc
6wVvjtkpx5v4Bf2knMr1FhkIOxzVTxVNChIHMu+11dzjr9tfxpDZfvZtnbwp9yRQ
Vnx5gdohMfFR6zpvy6HuUhp6jJdKZsBg/0DrDhFl0DezKM1Xq3a+/GMsFXz74l92
ZSZakhr9dNLAbWT9zRpZ4OgQldr2G0LBF7yj2r11psq7y+brwclOWELSKHt09zqy
SePinA6vvl9IUamw+aXkD6dOtJ+XQovvoeEkop5+OVmFJgbJ/s9gVuBG8noiKxpF
5TJmpr9Yn6w3dgqSpm5P6V4onXhzzXNc/u9c9zUBswJY7/OeWZJxBjzauNrSbv79
gfieKSs4Ug1ZnA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:16:51 2026 by rpki-client