Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: 8a1wBKUW88SN+s3wV/Ernrwvw4f11xUMlgUTTxiTOzE=
Subject key identifier: 21:EB:AE:F9:1B:CC:63:D3:25:0C:6C:E3:B9:23:A3:3E:A5:E4:2F:29
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01A0C2C4960686939B4E4E784888B94E5EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 0493
Signing time: Mon 21 Sep 2026 07:00:58 +0000
Manifest this update: Mon 21 Sep 2026 07:00:58 +0000
Manifest next update: Tue 22 Sep 2026 07:00:58 +0000
Files and hashes: 1: OT57yXSbDNvvHun6s7sHVisvfQk.roa (hash: 3pa538tOYg66gGxDb3UhtAM2x4zp7Zx6CRCpsE/DupM=)
2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: fjWblY7SXCJJMZEflX9DqjSE1Ms9wGGlCGfXRiD4VKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:96:06:86:93:9b:4e:4e:78:48:88:b9:4e:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Sep 21 07:00:58 2026 GMT
Not After : Sep 22 07:00:58 2026 GMT
Subject: CN=21ebaef91bcc63d3250c6ce3b923a33ea5e42f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:ba:d7:3c:b4:df:0b:4b:64:c5:82:ce:42:
9d:01:36:c4:9e:18:5b:a0:c1:69:bf:e1:a6:1a:9b:
e8:56:e1:d8:50:08:fe:38:22:0c:e5:21:f2:ca:bc:
20:c8:9d:61:fe:2e:8d:43:71:2d:d1:d5:04:95:9f:
bb:f1:17:79:ed:73:7c:f2:c1:9b:08:b9:6b:90:c3:
c9:62:47:ad:12:8b:a0:b0:55:38:f4:cb:39:29:85:
75:a7:14:33:d0:47:25:6d:e2:cf:c6:52:d3:80:f7:
5a:79:5e:d8:d6:76:ff:76:f7:90:ca:a4:12:9b:71:
8c:64:f1:e7:5a:2e:0e:b5:3c:79:14:45:b3:f5:74:
9c:9f:42:2e:28:92:30:15:79:e2:d9:f2:ff:ba:39:
2c:02:5d:ab:ff:e0:77:2c:a1:01:66:21:2c:00:b1:
68:0b:ba:64:c5:31:12:7f:d3:d2:f9:b8:53:5e:1e:
fc:0d:0d:8f:96:d9:33:cd:b3:81:4d:b4:23:50:ca:
28:f8:bb:ae:2c:82:70:96:eb:b3:6c:bc:44:77:d7:
eb:6a:fb:83:67:0c:2f:a3:fe:b9:88:5e:7b:75:84:
34:d4:22:ba:a9:04:14:7c:9b:07:3c:90:5e:d9:f1:
de:57:34:66:a8:0b:c0:a3:02:5d:a4:28:00:ba:55:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:AE:F9:1B:CC:63:D3:25:0C:6C:E3:B9:23:A3:3E:A5:E4:2F:29
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:b8:38:a5:91:7a:9c:77:21:2f:8a:49:bb:cb:48:40:06:
0d:8f:17:1f:59:c1:87:35:5b:3d:b9:b9:54:47:e1:69:17:b2:
3d:ab:f1:ec:ad:aa:7a:2d:2f:e1:fd:9f:7d:7a:b3:7f:79:a9:
e3:09:c5:46:00:73:c3:0d:6c:c0:f8:0b:a1:77:76:21:cd:23:
50:26:77:38:f3:54:eb:d8:09:32:23:91:6e:59:fe:61:28:22:
61:47:73:e3:cb:71:59:0d:00:d7:7e:21:3a:83:61:5e:c4:0d:
f1:49:7d:b5:ad:35:1d:28:88:56:04:81:ff:a2:28:b1:8b:be:
d7:6c:95:e1:8c:db:48:cb:7d:13:62:6d:17:3a:86:b9:49:f2:
2a:a2:67:07:a2:30:8c:bf:89:ec:4e:40:e1:90:3c:2a:8a:97:
ea:a7:30:6f:d2:71:fa:98:a8:ef:cb:2f:33:7c:b4:e8:5b:47:
3f:f0:3d:9f:1b:e4:61:18:a8:81:ca:cd:87:ef:8c:f1:f2:97:
8b:5c:11:e0:a0:c9:89:35:71:fb:72:3c:c5:d8:f0:96:79:83:
2b:80:d6:bd:9e:b4:9a:db:9a:c8:6b:69:c5:fe:c9:d4:64:9f:
a8:47:88:cd:2f:ab:84:c1:8a:f2:74:43:ce:a2:80:1d:a2:d5:
de:d3:b6:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxJYGhpObTk54SIi5Tl62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYwOTIxMDcwMDU4WhcNMjYwOTIyMDcwMDU4WjAzMTEwLwYDVQQD
EygyMWViYWVmOTFiY2M2M2QzMjUwYzZjZTNiOTIzYTMzZWE1ZTQyZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKi61zy03wtLZMWCzkKdATbEnhhb
oMFpv+GmGpvoVuHYUAj+OCIM5SHyyrwgyJ1h/i6NQ3Et0dUElZ+78Rd57XN88sGb
CLlrkMPJYketEougsFU49Ms5KYV1pxQz0EclbeLPxlLTgPdaeV7Y1nb/dveQyqQS
m3GMZPHnWi4OtTx5FEWz9XScn0IuKJIwFXni2fL/ujksAl2r/+B3LKEBZiEsALFo
C7pkxTESf9PS+bhTXh78DQ2PltkzzbOBTbQjUMoo+LuuLIJwluuzbLxEd9fravuD
Zwwvo/65iF57dYQ01CK6qQQUfJsHPJBe2fHeVzRmqAvAowJdpCgAulXilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHrrvkbzGPTJQxs47kjoz6l5C8pMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYu4OKWR
epx3IS+KSbvLSEAGDY8XH1nBhzVbPbm5VEfhaReyPavx7K2qei0v4f2ffXqzf3mp
4wnFRgBzww1swPgLoXd2Ic0jUCZ3OPNU69gJMiORbln+YSgiYUdz48txWQ0A134h
OoNhXsQN8Ul9ta01HSiIVgSB/6IosYu+12yV4YzbSMt9E2JtFzqGuUnyKqJnB6Iw
jL+J7E5A4ZA8KoqX6qcwb9Jx+pio78svM3y06FtHP/A9nxvkYRiogcrNh++M8fKX
i1wR4KDJiTVx+3I8xdjwlnmDK4DWvZ60mtuayGtpxf7J1GSfqEeIzS+rhMGK8nRD
zqKAHaLV3tO2vQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:44:36 2026 by rpki-client