Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
File: yMr0p4F9msWWHUKkx-WuGrHRg_o.mft (raw, json)
Hash identifier: MACxYTZcsNaPOd5iZmbgMrDdP5EeUX3+cC3wiu32+eg=
Subject key identifier: F0:93:60:88:7C:13:F8:5B:76:EE:ED:D9:60:5A:F1:42:D0:82:97:44
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Certificate issuer: /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial: 01A12FFCD35BC18D071ED8809382C1514195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
Manifest number: 0108
Signing time: Mon 12 Oct 2026 12:01:00 +0000
Manifest this update: Mon 12 Oct 2026 12:01:00 +0000
Manifest next update: Tue 13 Oct 2026 12:01:00 +0000
Files and hashes: 1: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (hash: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=)
2: yMr0p4F9msWWHUKkx-WuGrHRg_o.crl (hash: cck9N0/Vq1+FI1qrWS7rv6lIACJY0WkLjjwSSUKZ61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:d3:5b:c1:8d:07:1e:d8:80:93:82:c1:51:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Validity
Not Before: Oct 12 12:01:00 2026 GMT
Not After : Oct 13 12:01:00 2026 GMT
Subject: CN=f09360887c13f85b76eeedd9605af142d0829744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:94:e0:ba:9c:a7:25:5f:16:d1:35:66:59:
57:21:b7:b9:12:61:0d:e0:42:fc:77:7f:28:4f:07:
9d:91:8d:3b:ac:af:47:52:1a:13:86:95:d7:17:20:
2b:97:86:48:9c:f3:6b:a1:18:d6:84:96:47:49:57:
76:78:c0:0f:6e:00:1b:fb:e5:f2:84:08:d0:fe:65:
ba:3e:2f:73:fb:c8:88:e4:85:45:43:10:08:99:c8:
66:cc:7a:a2:7f:43:54:f1:16:c7:18:93:3d:77:d4:
c3:8b:e3:ac:46:a6:9a:67:a5:8e:d1:ac:18:4a:25:
69:0e:1e:2a:d7:db:7d:a5:f0:d1:8b:bc:0a:7b:13:
fd:5c:21:bf:2c:de:06:c1:b2:75:00:26:cf:a7:ac:
f2:6c:05:e7:d8:ed:0f:81:b5:b2:23:18:51:a6:9f:
06:52:8f:78:97:fe:c0:07:8d:03:9b:58:b1:90:61:
02:d5:d0:99:fc:6d:4b:92:90:6e:4f:2b:e6:8c:b4:
60:c4:c9:29:e4:fb:b9:28:00:29:73:8f:54:d4:92:
06:4b:d7:97:27:bc:20:60:df:78:0d:24:4d:d5:c5:
ad:f9:d8:bb:80:30:89:97:9c:0c:b2:aa:a5:99:8c:
ac:fb:e2:a3:a4:2e:6c:fd:39:c9:1a:a8:63:d3:70:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:60:88:7C:13:F8:5B:76:EE:ED:D9:60:5A:F1:42:D0:82:97:44
X509v3 Authority Key Identifier:
keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5c:f6:28:36:11:ed:ef:e7:d7:88:dd:1d:cd:21:e8:a5:09:
50:63:e9:28:09:e1:5d:ec:14:82:59:b7:dc:36:e8:84:0e:e9:
25:b3:7a:6e:98:b7:bf:06:1e:de:93:dd:fa:46:72:97:0b:75:
62:3f:26:32:69:3b:91:92:32:1a:34:9e:aa:64:25:ca:96:17:
b6:a0:f4:d3:43:3e:ce:a0:da:e3:d5:e0:13:3c:5a:4c:99:71:
a7:d6:e8:1f:f6:52:7a:e0:38:1f:3a:53:f9:f8:8e:15:00:2b:
f3:f9:0b:df:93:8a:e6:43:18:08:28:29:7f:6c:54:4f:72:db:
ed:63:0a:78:0a:fb:ac:ec:ce:25:61:76:9a:ca:63:3c:c1:fc:
d9:46:f1:58:2f:20:55:8e:c7:64:cc:44:18:19:f1:57:63:b9:
26:c4:3c:0f:af:5f:75:80:4c:61:3c:ef:07:08:f4:fa:19:ab:
63:dd:b3:ad:78:41:52:57:da:f6:8e:98:92:0a:ec:22:6b:a9:
2e:f5:c4:5d:b5:b3:cd:ee:6e:63:64:6f:c1:0e:4e:26:38:88:
c7:ac:3e:21:19:4e:11:32:22:87:2c:bd:b8:1f:34:fb:a4:d5:
3a:73:3e:3e:c4:af:b2:75:ba:df:42:e0:5e:03:05:ed:bd:8d:
92:7b:c5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/NNbwY0HHtiAk4LBUUGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2FmNGE3ODE3ZDlhYzU5NjFkNDJhNGM3ZTVhZTFhYjFk
MTgzZmEwHhcNMjYxMDEyMTIwMTAwWhcNMjYxMDEzMTIwMTAwWjAzMTEwLwYDVQQD
EyhmMDkzNjA4ODdjMTNmODViNzZlZWVkZDk2MDVhZjE0MmQwODI5NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsuU4LqcpyVfFtE1ZllXIbe5EmEN
4EL8d38oTwedkY07rK9HUhoThpXXFyArl4ZInPNroRjWhJZHSVd2eMAPbgAb++Xy
hAjQ/mW6Pi9z+8iI5IVFQxAImchmzHqif0NU8RbHGJM9d9TDi+OsRqaaZ6WO0awY
SiVpDh4q19t9pfDRi7wKexP9XCG/LN4GwbJ1ACbPp6zybAXn2O0PgbWyIxhRpp8G
Uo94l/7AB40Dm1ixkGEC1dCZ/G1LkpBuTyvmjLRgxMkp5Pu5KAApc49U1JIGS9eX
J7wgYN94DSRN1cWt+di7gDCJl5wMsqqlmYys++KjpC5s/TnJGqhj03DHyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCTYIh8E/hbdu7t2WBa8ULQgpdEMB8GA1UdIwQY
MBaAFMjK9KeBfZrFlh1CpMflrhqx0YP6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1Zjkt
ZjEwYjAwNzBkNzAxLzEveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1ZjktZjEwYjAwNzBkNzAx
LzEveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFz2KDYR
7e/n14jdHc0h6KUJUGPpKAnhXewUglm33DbohA7pJbN6bpi3vwYe3pPd+kZylwt1
Yj8mMmk7kZIyGjSeqmQlypYXtqD000M+zqDa49XgEzxaTJlxp9boH/ZSeuA4HzpT
+fiOFQAr8/kL35OK5kMYCCgpf2xUT3Lb7WMKeAr7rOzOJWF2mspjPMH82UbxWC8g
VY7HZMxEGBnxV2O5JsQ8D69fdYBMYTzvBwj0+hmrY92zrXhBUlfa9o6YkgrsImup
LvXEXbWzze5uY2RvwQ5OJjiIx6w+IRlOETIihyy9uB80+6TVOnM+PsSvsnW630Lg
XgMF7b2NknvFSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:44:36 2026 by rpki-client