Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: KMP7i4CAunT0eJ2ziYa4oUFC1RlcEJvRq6kxot/Y4t0=
Subject key identifier: A2:2A:58:DA:09:50:E7:95:78:29:6B:D7:C9:A2:EB:A1:3C:8E:5E:46
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 01A0DCF30FA2DCE548D61189A890E963959A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1A17
Signing time: Sat 26 Sep 2026 09:01:51 +0000
Manifest this update: Sat 26 Sep 2026 09:01:51 +0000
Manifest next update: Sun 27 Sep 2026 09:01:51 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: /vbp+octea1m7vvH0O+PRf28SRB1Ujs+W1AcpWKkOew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:0f:a2:dc:e5:48:d6:11:89:a8:90:e9:63:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Sep 26 09:01:51 2026 GMT
Not After : Sep 27 09:01:51 2026 GMT
Subject: CN=a22a58da0950e79578296bd7c9a2eba13c8e5e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:12:c0:48:c8:b7:52:51:d1:42:5f:9f:2c:
4a:4a:39:60:bf:bf:4f:9a:c3:24:4d:48:1d:18:30:
fa:2b:86:2a:64:48:43:1a:60:7f:b5:73:27:98:51:
fa:d0:e9:79:a8:98:35:be:02:8f:bc:04:17:89:95:
58:d7:ae:eb:6a:7b:8a:98:89:9c:5b:fa:5d:70:68:
ba:c9:fa:31:b6:c9:d2:f3:3b:c6:14:4c:5e:99:db:
f1:83:c0:7d:bb:9d:ac:c4:b7:a0:4f:0d:4d:5b:68:
e5:42:7e:88:43:9e:92:0e:1e:6e:75:e8:7f:1d:43:
97:cd:24:0e:97:11:7f:12:86:19:af:73:23:7b:a3:
8f:fd:e0:72:88:de:fd:1b:31:0c:39:7e:5c:6f:f5:
59:91:bf:dc:31:95:c9:ea:1a:db:65:a5:c8:03:f3:
50:42:83:81:e3:78:75:06:f3:b0:48:b1:66:e1:f4:
30:a6:a0:f8:e7:5d:20:0a:ad:d3:b7:9c:ee:ed:8a:
dd:dc:c7:2a:81:8c:13:bd:ea:c9:cc:05:0a:b9:61:
45:f8:a5:85:24:13:46:66:76:d1:ce:d9:5a:87:e1:
16:06:3d:aa:60:af:e7:8f:69:68:0f:f8:a1:50:44:
3a:16:06:50:a4:87:49:36:04:f4:52:6b:03:53:a4:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:58:DA:09:50:E7:95:78:29:6B:D7:C9:A2:EB:A1:3C:8E:5E:46
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1c:bd:a0:8e:ec:4c:a0:30:4a:1e:07:14:57:a7:ea:77:87:
ab:5e:88:8a:3d:e6:25:03:66:b4:27:87:1a:6f:c6:03:d8:b3:
11:73:cf:9f:87:77:d5:2c:d8:7f:fa:e1:1f:48:d4:7c:b4:f6:
91:8b:99:6e:c2:1c:74:ba:23:68:0f:b8:e3:56:4e:ff:d6:36:
8f:58:1b:3a:d9:b2:89:6f:3c:e6:c3:82:58:76:3e:7e:af:cf:
6e:58:d5:b3:85:93:4e:87:b3:4e:7c:ca:01:28:b4:ff:76:c4:
3a:a8:af:e8:82:2f:bf:a3:f4:ac:d0:45:77:b3:1c:f8:80:0e:
db:f6:d2:63:e3:17:6a:91:40:0d:84:4a:3c:96:44:7d:8d:33:
c5:10:e5:4a:9b:e0:2b:3b:fc:0c:f6:a6:e5:5a:c0:f3:bb:9c:
4b:01:85:35:8c:49:bf:02:16:8c:f8:c6:01:be:52:31:db:3d:
35:a5:7c:9d:6d:d8:6f:b9:e8:e4:0c:0a:52:e8:c7:3d:2c:51:
87:05:90:14:3d:1d:ed:81:90:a9:f5:cc:21:63:2d:10:77:e2:
41:10:b0:1e:8f:ec:e9:2d:3f:4d:f4:81:aa:d3:d4:36:5f:7c:
49:a5:27:d2:1d:39:9d:f2:71:05:c2:ea:33:2b:1e:15:ca:c1:
63:64:43:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8w+i3OVI1hGJqJDpY5WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNmRjZGFkOTkyOTA0NTZjNmQ3YzE4ZWIxYzA1OGQ5NDEw
ODg4MDEwHhcNMjYwOTI2MDkwMTUxWhcNMjYwOTI3MDkwMTUxWjAzMTEwLwYDVQQD
EyhhMjJhNThkYTA5NTBlNzk1NzgyOTZiZDdjOWEyZWJhMTNjOGU1ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7sSwEjIt1JR0UJfnyxKSjlgv79P
msMkTUgdGDD6K4YqZEhDGmB/tXMnmFH60Ol5qJg1vgKPvAQXiZVY167ranuKmImc
W/pdcGi6yfoxtsnS8zvGFExemdvxg8B9u52sxLegTw1NW2jlQn6IQ56SDh5udeh/
HUOXzSQOlxF/EoYZr3Mje6OP/eByiN79GzEMOX5cb/VZkb/cMZXJ6hrbZaXIA/NQ
QoOB43h1BvOwSLFm4fQwpqD4510gCq3Tt5zu7Yrd3McqgYwTverJzAUKuWFF+KWF
JBNGZnbRztlah+EWBj2qYK/nj2loD/ihUEQ6FgZQpIdJNgT0UmsDU6R3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIqWNoJUOeVeClr18mi66E8jl5GMB8GA1UdIwQY
MBaAFMptza2ZKQRWxtfBjrHAWNlBCIgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmIt
YmM0NzVkMDA4ODY5LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmItYmM0NzVkMDA4ODY5
LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBy9oI7s
TKAwSh4HFFen6neHq16Iij3mJQNmtCeHGm/GA9izEXPPn4d31SzYf/rhH0jUfLT2
kYuZbsIcdLojaA+441ZO/9Y2j1gbOtmyiW885sOCWHY+fq/PbljVs4WTToezTnzK
ASi0/3bEOqiv6IIvv6P0rNBFd7Mc+IAO2/bSY+MXapFADYRKPJZEfY0zxRDlSpvg
Kzv8DPam5VrA87ucSwGFNYxJvwIWjPjGAb5SMds9NaV8nW3Yb7no5AwKUujHPSxR
hwWQFD0d7YGQqfXMIWMtEHfiQRCwHo/s6S0/TfSBqtPUNl98SaUn0h05nfJxBcLq
MyseFcrBY2RDag==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:09:04 2026 by rpki-client