Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
File: YBtLoTPyON1qs-CprIh1yNgL9rc.mft (raw, json)
Hash identifier: Jm87K6AS243VWcN6xoZBd9ubqFU4EFh28RvCpZ2Rhrc=
Subject key identifier: 7E:FB:A9:72:E2:69:6B:4F:E2:33:FC:12:53:5C:63:AF:D1:EF:43:7E
Authority key identifier: 60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
Certificate issuer: /CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Certificate serial: 01A13591703D3407502FA8319091AFA08ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
Manifest number: 01E0
Signing time: Tue 13 Oct 2026 14:01:26 +0000
Manifest this update: Tue 13 Oct 2026 14:01:26 +0000
Manifest next update: Wed 14 Oct 2026 14:01:26 +0000
Files and hashes: 1: WwDOvongC1_X8P9dsP5SDAx3pIw.roa (hash: OvjUCdki/Xpiry32DFBQzx/CWIybLt/kwDkvEQjTH6I=)
2: YBtLoTPyON1qs-CprIh1yNgL9rc.crl (hash: UEDU3zye0hma8IMbtItiAdhO9FdOr0t5gdRB+F9BtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:70:3d:34:07:50:2f:a8:31:90:91:af:a0:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601b4ba133f238dd6ab3e0a9ac8875c8d80bf6b7
Validity
Not Before: Oct 13 14:01:26 2026 GMT
Not After : Oct 14 14:01:26 2026 GMT
Subject: CN=7efba972e2696b4fe233fc12535c63afd1ef437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:ef:dd:45:06:28:af:64:3d:cc:00:97:8a:
f7:ff:9d:80:9f:c5:4c:0d:05:5b:d5:4c:09:0f:53:
08:8e:12:c5:e7:9b:e3:7e:63:ce:f9:03:d7:5a:d7:
d2:3e:14:c4:da:a8:77:23:2e:1d:20:bf:6f:81:e1:
63:aa:f4:f8:13:f8:d5:3a:7d:f4:e0:80:92:8c:13:
9f:b8:6c:63:54:db:9f:14:57:31:8a:3a:24:35:79:
36:38:9e:60:80:32:0c:39:81:a3:ae:85:5b:50:2b:
e1:0d:50:46:72:37:2f:3a:a2:f7:08:db:c4:88:a1:
b2:34:7c:c3:c7:29:e5:04:d7:46:76:78:0c:c4:1a:
96:02:fe:dc:52:31:81:df:05:52:ef:e2:f1:c5:7a:
5a:e9:68:e8:4e:72:92:c1:de:80:49:24:e2:88:9e:
5f:c9:9c:ba:f6:0e:bb:d7:9a:0b:40:44:81:78:c3:
74:42:f9:1e:f3:d7:f0:70:ff:ba:01:73:a0:10:49:
bd:4c:02:f4:7e:39:03:9d:42:df:8c:c7:70:e6:77:
43:ae:37:1f:c5:4c:e4:4e:1f:a2:f2:aa:fc:27:33:
dc:b0:ba:82:c0:91:02:a9:f4:05:92:8f:a0:fa:16:
23:18:5b:2f:ec:53:08:75:a9:fa:89:18:ec:e8:20:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FB:A9:72:E2:69:6B:4F:E2:33:FC:12:53:5C:63:AF:D1:EF:43:7E
X509v3 Authority Key Identifier:
keyid:60:1B:4B:A1:33:F2:38:DD:6A:B3:E0:A9:AC:88:75:C8:D8:0B:F6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBtLoTPyON1qs-CprIh1yNgL9rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e3f23-5897-48f2-a888-7d242fcab170/1/YBtLoTPyON1qs-CprIh1yNgL9rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:fa:5b:6f:0c:29:11:f0:8d:40:74:26:3f:39:38:47:91:
35:57:ac:6d:fc:5b:ba:c5:33:7a:f4:60:ef:51:cc:6a:e1:67:
8b:9f:d4:03:f0:de:ca:b0:48:1d:55:2e:a7:64:83:a9:c7:a2:
99:2e:15:5b:57:12:9a:10:5e:49:84:20:56:b6:2c:bc:ff:e0:
bd:af:7c:35:7e:20:40:56:42:36:9e:80:d5:8a:aa:0e:2e:5b:
8f:64:26:12:84:c0:c1:1b:2e:a5:03:45:71:22:fb:17:07:36:
b7:be:a5:8c:6e:9c:f6:3e:57:a8:1e:f5:79:3f:a6:da:46:87:
77:96:05:17:09:d6:d6:42:13:ea:da:4c:cf:c2:ab:6b:1b:b4:
ec:76:52:47:d7:58:eb:d0:d6:c2:5a:46:d9:e9:e9:72:02:a1:
f3:f1:48:77:d8:32:49:78:2b:24:dd:cc:1f:02:e1:d4:61:4e:
69:ef:0a:fd:68:07:fc:87:38:8e:2f:0c:df:ed:4d:91:02:e7:
9d:02:4b:67:74:b5:2f:b5:4a:14:7b:f7:e9:ee:84:9d:74:11:
d7:ee:be:b5:7f:8e:7f:be:dc:4d:c4:64:69:0c:b5:5e:29:df:
b4:2e:0f:e2:8e:38:ae:09:9b:38:78:80:6f:a7:0f:ec:74:33:
44:02:f5:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kXA9NAdQL6gxkJGvoI7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWI0YmExMzNmMjM4ZGQ2YWIzZTBhOWFjODg3NWM4ZDgw
YmY2YjcwHhcNMjYxMDEzMTQwMTI2WhcNMjYxMDE0MTQwMTI2WjAzMTEwLwYDVQQD
Eyg3ZWZiYTk3MmUyNjk2YjRmZTIzM2ZjMTI1MzVjNjNhZmQxZWY0MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNrv3UUGKK9kPcwAl4r3/52An8VM
DQVb1UwJD1MIjhLF55vjfmPO+QPXWtfSPhTE2qh3Iy4dIL9vgeFjqvT4E/jVOn30
4ICSjBOfuGxjVNufFFcxijokNXk2OJ5ggDIMOYGjroVbUCvhDVBGcjcvOqL3CNvE
iKGyNHzDxynlBNdGdngMxBqWAv7cUjGB3wVS7+LxxXpa6WjoTnKSwd6ASSTiiJ5f
yZy69g6715oLQESBeMN0Qvke89fwcP+6AXOgEEm9TAL0fjkDnULfjMdw5ndDrjcf
xUzkTh+i8qr8JzPcsLqCwJECqfQFko+g+hYjGFsv7FMIdan6iRjs6CDAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH77qXLiaWtP4jP8ElNcY6/R70N+MB8GA1UdIwQY
MBaAFGAbS6Ez8jjdarPgqayIdcjYC/a3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgt
N2QyNDJmY2FiMTcwLzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTNmMjMtNTg5Ny00OGYyLWE4ODgtN2QyNDJmY2FiMTcw
LzEvWUJ0TG9UUHlPTjFxcy1DcHJJaDF5TmdMOXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0n6W28M
KRHwjUB0Jj85OEeRNVesbfxbusUzevRg71HMauFni5/UA/DeyrBIHVUup2SDqcei
mS4VW1cSmhBeSYQgVrYsvP/gva98NX4gQFZCNp6A1YqqDi5bj2QmEoTAwRsupQNF
cSL7Fwc2t76ljG6c9j5XqB71eT+m2kaHd5YFFwnW1kIT6tpMz8Kraxu07HZSR9dY
69DWwlpG2enpcgKh8/FId9gySXgrJN3MHwLh1GFOae8K/WgH/Ic4ji8M3+1NkQLn
nQJLZ3S1L7VKFHv36e6EnXQR1+6+tX+Of77cTcRkaQy1XinftC4P4o44rgmbOHiA
b6cP7HQzRAL10w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:48:15 2026 by rpki-client