
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File: yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier: HqmqJsoekjYdeIvuJgWglCdtBNvcTt2Bu3ObP7NEtWs=
Subject key identifier: 7B:9C:B0:D6:FD:08:96:6D:34:AA:82:52:4D:83:5C:C9:38:E3:5B:13
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 01A0C63341E9C80D99032A9BD89F29088A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number: 1A8D
Signing time: Mon 21 Sep 2026 23:00:42 +0000
Manifest this update: Mon 21 Sep 2026 23:00:42 +0000
Manifest next update: Tue 22 Sep 2026 23:00:42 +0000
Files and hashes: 1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: DyQO4KpZRSFcTicFKVs2JxjNj02c5LzSdRqMrpmJnWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:41:e9:c8:0d:99:03:2a:9b:d8:9f:29:08:8a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Sep 21 23:00:42 2026 GMT
Not After : Sep 22 23:00:42 2026 GMT
Subject: CN=7b9cb0d6fd08966d34aa82524d835cc938e35b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:c7:79:fd:55:8a:f6:77:51:bb:81:de:38:
f3:e0:bf:15:00:6a:42:a7:83:80:c0:cb:c1:72:85:
db:40:61:f8:62:38:7e:5f:f7:10:68:6c:57:97:93:
23:5e:fb:de:de:5a:62:af:73:15:e5:2c:df:d4:8b:
4f:c5:1a:b3:8e:26:82:e4:1c:f1:5f:35:e2:46:77:
e8:e9:9f:b2:fd:f7:7c:1e:7a:46:c4:6c:f1:d0:36:
af:ae:8d:af:6c:67:95:a3:76:0a:de:4c:78:88:9b:
5d:0a:0f:72:32:dd:c6:a3:8c:40:84:1e:44:de:73:
07:73:7e:7f:f3:4a:21:1a:4e:a2:84:30:c8:ec:6b:
b7:bf:ec:c2:cc:df:04:ec:e9:a1:e2:39:7e:64:00:
03:ee:d2:66:d6:96:fd:be:85:7a:a6:9c:c8:cd:bb:
b1:24:81:5b:52:ac:a2:ec:f2:7f:6c:6e:f0:5d:f7:
41:1e:11:4a:4a:c1:2c:3f:43:26:26:25:c0:9c:26:
b6:a2:b5:86:bd:bc:3f:5f:20:57:fe:07:a8:37:34:
c3:b8:3a:6f:0c:70:f3:79:8e:de:4c:d6:52:a6:90:
b4:e5:44:75:f0:c9:0f:94:82:dd:e7:b8:1d:40:11:
d9:bd:67:6d:9a:f1:ee:72:51:24:90:5e:34:19:51:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:B0:D6:FD:08:96:6D:34:AA:82:52:4D:83:5C:C9:38:E3:5B:13
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:04:d3:e9:11:51:28:5e:14:4c:88:7f:1d:b2:d3:80:ac:be:
99:c0:ff:dc:26:8c:ae:bd:f6:c7:2e:e8:54:9b:34:66:90:37:
12:35:d6:02:16:ab:c4:93:6e:c7:cf:c0:22:5b:05:4e:03:e2:
29:7c:f5:f7:3b:65:dc:ee:32:35:64:9f:37:1b:28:01:55:b9:
b3:b5:5e:e7:30:36:3b:e2:a5:b6:5e:ba:5d:0a:ae:5e:2c:dc:
3e:7f:77:69:50:c0:dd:21:77:41:2c:18:ba:3e:7c:2f:27:45:
25:df:8b:2d:08:64:9d:4f:6b:da:0d:8e:52:d9:1a:0f:ba:04:
eb:34:3d:3b:5e:75:e8:96:a7:73:db:2b:14:db:40:26:25:89:
5b:34:0c:5a:61:71:77:81:a5:9c:63:db:82:f6:a4:51:b5:02:
89:65:40:84:ea:ed:a6:2a:cd:21:9b:84:ef:e9:6b:47:2d:3f:
93:de:d8:49:a4:5c:e4:4b:f6:ab:d7:7c:fb:90:7a:b7:f4:1b:
49:03:fc:1d:1d:79:bd:91:66:4f:e4:09:4a:c3:49:80:29:c3:
c6:cf:a4:5f:fc:1b:ad:03:58:72:66:ea:a7:5c:07:e8:8b:2e:
cb:c9:be:de:72:d1:cc:b9:d2:c3:8f:38:68:3c:3d:56:99:6a:
3d:4f:38:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM0HpyA2ZAyqb2J8pCIpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjYwOTIxMjMwMDQyWhcNMjYwOTIyMjMwMDQyWjAzMTEwLwYDVQQD
Eyg3YjljYjBkNmZkMDg5NjZkMzRhYTgyNTI0ZDgzNWNjOTM4ZTM1YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsnHef1VivZ3UbuB3jjz4L8VAGpC
p4OAwMvBcoXbQGH4Yjh+X/cQaGxXl5MjXvve3lpir3MV5Szf1ItPxRqzjiaC5Bzx
XzXiRnfo6Z+y/fd8HnpGxGzx0Davro2vbGeVo3YK3kx4iJtdCg9yMt3Go4xAhB5E
3nMHc35/80ohGk6ihDDI7Gu3v+zCzN8E7Omh4jl+ZAAD7tJm1pb9voV6ppzIzbux
JIFbUqyi7PJ/bG7wXfdBHhFKSsEsP0MmJiXAnCa2orWGvbw/XyBX/geoNzTDuDpv
DHDzeY7eTNZSppC05UR18MkPlILd57gdQBHZvWdtmvHuclEkkF40GVFFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHucsNb9CJZtNKqCUk2DXMk441sTMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgTT6RFR
KF4UTIh/HbLTgKy+mcD/3CaMrr32xy7oVJs0ZpA3EjXWAharxJNux8/AIlsFTgPi
KXz19ztl3O4yNWSfNxsoAVW5s7Ve5zA2O+Kltl66XQquXizcPn93aVDA3SF3QSwY
uj58LydFJd+LLQhknU9r2g2OUtkaD7oE6zQ9O1516Janc9srFNtAJiWJWzQMWmFx
d4GlnGPbgvakUbUCiWVAhOrtpirNIZuE7+lrRy0/k97YSaRc5Ev2q9d8+5B6t/Qb
SQP8HR15vZFmT+QJSsNJgCnDxs+kX/wbrQNYcmbqp1wH6Isuy8m+3nLRzLnSw484
aDw9VplqPU846w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:52 2026 by rpki-client