Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: QmDCI7OzihHgJGaDMZibXQQu3Ot6z29HyG14HW8SSt4=
Subject key identifier: 56:A0:B8:6B:BD:38:C1:6B:FB:0A:C3:F0:6D:57:70:2D:12:3B:04:DE
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01A0D64B7B7AD38020217FCC10F7D188734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 12E3
Signing time: Fri 25 Sep 2026 02:01:05 +0000
Manifest this update: Fri 25 Sep 2026 02:01:05 +0000
Manifest next update: Sat 26 Sep 2026 02:01:05 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: 5M5J+/bvY3KxFVHu89fnQvVMXhJMSGW4J0lSVmh33OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:7b:7a:d3:80:20:21:7f:cc:10:f7:d1:88:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Sep 25 02:01:05 2026 GMT
Not After : Sep 26 02:01:05 2026 GMT
Subject: CN=56a0b86bbd38c16bfb0ac3f06d57702d123b04de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:83:a7:8d:75:ef:1c:07:ba:0d:ca:94:ac:
fd:13:f2:7c:6f:b6:57:af:f9:aa:30:56:8f:d5:fc:
ba:4a:84:63:cf:95:f1:b0:ad:aa:4d:76:c9:06:d2:
42:04:c2:ef:cc:9b:d4:47:f5:96:85:b5:28:32:5a:
f4:19:ad:59:a2:4a:25:d3:22:c0:78:2f:42:10:59:
15:07:e2:b9:0e:50:b3:2b:d5:dc:ad:71:46:c5:cf:
c2:59:e1:4c:42:12:7b:e0:83:6e:91:89:16:96:2f:
75:b1:c4:23:a1:7c:d4:b2:fe:b1:df:6e:d7:4a:c7:
78:6c:cf:87:ea:c9:56:f0:22:96:23:f2:d9:0f:eb:
bc:29:ef:49:a9:13:51:28:86:23:54:ec:84:7c:79:
8f:e5:f1:c5:6d:96:48:02:0a:a3:93:bb:ee:3c:1f:
93:31:f9:e4:aa:38:22:6c:ee:cc:e2:66:91:6c:e9:
46:f1:dc:a9:b3:1c:3a:42:a5:94:76:d8:49:df:64:
22:bb:da:66:40:26:e4:e2:08:5a:9c:54:9a:8c:e6:
c4:58:67:f8:89:ea:d5:6b:c8:b3:81:66:ad:6c:de:
55:f3:67:38:2b:6f:9f:93:b7:3e:cb:e2:68:c1:79:
2c:d9:c5:7d:05:61:84:a3:7e:d3:7c:a2:e7:14:0c:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:B8:6B:BD:38:C1:6B:FB:0A:C3:F0:6D:57:70:2D:12:3B:04:DE
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:e0:af:c4:a6:c2:a9:a2:41:27:a4:c7:ae:35:a6:0b:2b:
60:e2:a9:c8:0f:43:35:2a:7c:79:bf:3c:09:c7:a4:6a:11:7f:
3a:78:3d:58:29:42:fa:4a:c7:56:ca:4c:8b:6a:3d:90:30:5c:
e2:85:f2:d1:86:8c:32:39:61:3b:07:e0:5f:dd:ed:1f:2a:86:
76:77:51:35:8e:5c:50:99:ca:0e:f6:94:9b:12:f2:34:09:b9:
5f:3c:4d:c5:a0:25:43:db:52:e1:e1:dd:bd:a0:9b:d3:13:35:
8d:82:71:2b:04:49:2b:b5:c6:51:d4:34:87:d2:50:63:73:a9:
b1:c7:26:f6:bb:39:20:f3:14:49:cf:5f:dc:e1:f4:72:4f:f2:
ff:14:12:8b:0f:56:7c:14:a2:00:fd:86:d1:b0:e6:eb:46:81:
d6:b9:a4:5d:a1:7f:bb:69:69:13:7f:80:78:fa:0a:69:c9:c7:
2d:c3:c1:b0:77:a1:3f:53:08:7b:cc:5f:b0:32:2a:16:6f:3e:
3a:c5:eb:0c:52:64:6c:5d:38:8e:85:76:04:bb:cf:f0:30:72:
2c:8b:ab:7e:7e:9c:2a:ac:9e:6e:6c:4f:cb:81:1c:a6:7d:93:
aa:1a:d6:50:9d:af:7c:3f:6c:a2:ed:3c:f6:15:5f:6f:c5:81:
86:a7:d4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS3t604AgIX/MEPfRiHNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjYwOTI1MDIwMTA1WhcNMjYwOTI2MDIwMTA1WjAzMTEwLwYDVQQD
Eyg1NmEwYjg2YmJkMzhjMTZiZmIwYWMzZjA2ZDU3NzAyZDEyM2IwNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4aDp4117xwHug3KlKz9E/J8b7ZX
r/mqMFaP1fy6SoRjz5XxsK2qTXbJBtJCBMLvzJvUR/WWhbUoMlr0Ga1Zokol0yLA
eC9CEFkVB+K5DlCzK9XcrXFGxc/CWeFMQhJ74INukYkWli91scQjoXzUsv6x327X
Ssd4bM+H6slW8CKWI/LZD+u8Ke9JqRNRKIYjVOyEfHmP5fHFbZZIAgqjk7vuPB+T
MfnkqjgibO7M4maRbOlG8dypsxw6QqWUdthJ32Qiu9pmQCbk4ghanFSajObEWGf4
ierVa8izgWatbN5V82c4K2+fk7c+y+JowXks2cV9BWGEo37TfKLnFAzhmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaguGu9OMFr+wrD8G1XcC0SOwTeMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6Xgr8Sm
wqmiQSekx641pgsrYOKpyA9DNSp8eb88CcekahF/Ong9WClC+krHVspMi2o9kDBc
4oXy0YaMMjlhOwfgX93tHyqGdndRNY5cUJnKDvaUmxLyNAm5XzxNxaAlQ9tS4eHd
vaCb0xM1jYJxKwRJK7XGUdQ0h9JQY3Opsccm9rs5IPMUSc9f3OH0ck/y/xQSiw9W
fBSiAP2G0bDm60aB1rmkXaF/u2lpE3+AePoKacnHLcPBsHehP1MIe8xfsDIqFm8+
OsXrDFJkbF04joV2BLvP8DByLIurfn6cKqyebmxPy4Ecpn2TqhrWUJ2vfD9sou08
9hVfb8WBhqfUqQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:38:54 2026 by rpki-client