Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: gIQgieSyA+V2rFE4+0J1UsX7XBdyG9XnovFitc5Mdg8=
Subject key identifier: BB:38:95:5D:12:EB:44:5B:29:58:65:0B:55:06:0A:A8:E4:22:75:20
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 01A0BEB07F9B7259A52B61F7D3A577E7573B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 1A69
Signing time: Sun 20 Sep 2026 12:00:33 +0000
Manifest this update: Sun 20 Sep 2026 12:00:33 +0000
Manifest next update: Mon 21 Sep 2026 12:00:33 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: uS1WGY3gQEStUiWeY8tYIgpZ6g6hXu4A72GPhXWfNC4=)
2: XHxwIZBTZRjnQKSihRspwmKfqzw.asa (hash: k1pdEq1OyCjXSRTI0eNTGpnCfUhmunSzK9u8AF/CUbk=)
3: Yg1vDl0DhjeaHWIjulFGn2EXs50.roa (hash: ZHTaupqQKeBhzDbcDiW4xvhVp2wefwY9mwNkCrn+I/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:7f:9b:72:59:a5:2b:61:f7:d3:a5:77:e7:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Sep 20 12:00:33 2026 GMT
Not After : Sep 21 12:00:33 2026 GMT
Subject: CN=bb38955d12eb445b2958650b55060aa8e4227520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:fb:d1:bf:5f:5b:dd:00:a4:40:1f:90:27:
b4:55:c4:56:0b:cc:9f:da:0e:95:d9:cd:05:5c:63:
1c:78:f6:0f:b7:d4:b6:25:b3:96:78:8b:0e:69:56:
30:05:cf:14:6a:d7:19:b4:cc:5b:e9:85:ef:05:4b:
00:95:5f:28:d5:c8:32:5b:62:14:97:f8:23:09:f3:
ee:6c:17:ea:28:c5:4f:44:e5:72:93:fc:1c:c5:9c:
a2:b7:e4:e9:44:59:59:4a:eb:f2:47:38:2b:7f:77:
16:c7:07:81:c4:d9:de:b0:5d:75:16:e6:f0:a4:da:
4f:c2:28:5e:05:6d:55:20:28:8d:22:13:21:7c:7b:
39:ce:6a:37:b2:14:27:05:b1:cd:2b:25:32:b0:2e:
43:87:71:d6:2e:e0:7d:8b:21:77:7b:68:bb:34:06:
e2:0d:12:63:51:ff:1f:d7:51:f8:a2:88:64:eb:22:
6f:59:98:04:06:f8:11:6f:2f:6e:3e:86:0c:16:04:
11:fe:4e:4f:1c:21:a7:8b:60:8b:88:9c:5d:33:51:
26:94:a4:e9:32:25:31:75:2f:41:bc:58:08:5d:6a:
c2:ab:b7:9e:a4:e2:f4:6c:24:7e:2d:cb:57:22:b9:
28:a7:ff:0e:af:f7:2e:eb:37:d4:d0:3a:91:ea:1e:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:95:5D:12:EB:44:5B:29:58:65:0B:55:06:0A:A8:E4:22:75:20
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:2f:ce:65:79:6e:55:38:30:4f:4b:4d:ec:f2:25:2b:9e:82:
87:55:24:0f:a4:1d:a7:f3:ed:ba:6e:5c:2b:a3:43:9c:72:b5:
5b:5f:29:80:11:89:dc:0e:f8:0f:b1:a5:34:7b:37:fb:14:b9:
77:d8:e1:14:6d:b0:83:e2:d2:eb:3d:38:a8:6f:02:f1:07:c1:
d4:19:d6:aa:02:9a:f2:d3:33:09:4c:a4:e2:e0:bb:0d:e9:92:
b7:f0:27:f9:96:fc:24:61:18:6f:5e:b2:40:c9:c6:a0:66:a5:
d9:8c:33:2e:3d:50:76:9f:be:28:be:b4:32:38:81:2c:b8:eb:
3f:b1:0e:51:8d:18:32:7b:c6:56:66:28:fa:ec:d8:b3:9d:ca:
35:e3:db:8e:ba:09:b2:62:eb:96:6b:ca:a5:48:6f:3a:7f:8d:
bd:67:05:32:e1:0d:ed:43:89:17:8d:c7:0a:72:2e:11:fe:21:
ec:25:96:28:a3:64:df:c4:45:33:a2:f9:27:21:86:a7:3c:42:
b9:cd:2b:d3:5e:82:a7:19:38:fa:87:e5:2c:48:36:72:e1:b8:
24:92:a6:b0:8f:b6:0a:34:f8:16:7c:63:cf:6e:67:7e:fb:09:
79:63:9d:e2:13:4e:88:b9:e6:0c:23:18:22:61:3e:64:39:5a:
e3:68:b9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sH+bclmlK2H306V351c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWNhNzkzMjQ1NzUyYjY3YTg4MWY3OGUzNWFiOGZmNDlk
ZDNlYzEwHhcNMjYwOTIwMTIwMDMzWhcNMjYwOTIxMTIwMDMzWjAzMTEwLwYDVQQD
EyhiYjM4OTU1ZDEyZWI0NDViMjk1ODY1MGI1NTA2MGFhOGU0MjI3NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu/70b9fW90ApEAfkCe0VcRWC8yf
2g6V2c0FXGMcePYPt9S2JbOWeIsOaVYwBc8UatcZtMxb6YXvBUsAlV8o1cgyW2IU
l/gjCfPubBfqKMVPROVyk/wcxZyit+TpRFlZSuvyRzgrf3cWxweBxNnesF11Fubw
pNpPwiheBW1VICiNIhMhfHs5zmo3shQnBbHNKyUysC5Dh3HWLuB9iyF3e2i7NAbi
DRJjUf8f11H4oohk6yJvWZgEBvgRby9uPoYMFgQR/k5PHCGni2CLiJxdM1EmlKTp
MiUxdS9BvFgIXWrCq7eepOL0bCR+LctXIrkop/8Or/cu6zfU0DqR6h5v/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs4lV0S60RbKVhlC1UGCqjkInUgMB8GA1UdIwQY
MBaAFAPsp5MkV1K2eogfeONauP9J3T7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2Yt
OWZkYzEwNmM4MTUzLzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2YtOWZkYzEwNmM4MTUz
LzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3i/OZXlu
VTgwT0tN7PIlK56Ch1UkD6Qdp/Ptum5cK6NDnHK1W18pgBGJ3A74D7GlNHs3+xS5
d9jhFG2wg+LS6z04qG8C8QfB1BnWqgKa8tMzCUyk4uC7DemSt/An+Zb8JGEYb16y
QMnGoGal2YwzLj1Qdp++KL60MjiBLLjrP7EOUY0YMnvGVmYo+uzYs53KNePbjroJ
smLrlmvKpUhvOn+NvWcFMuEN7UOJF43HCnIuEf4h7CWWKKNk38RFM6L5JyGGpzxC
uc0r016Cpxk4+oflLEg2cuG4JJKmsI+2CjT4Fnxjz25nfvsJeWOd4hNOiLnmDCMY
ImE+ZDla42i5NA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:00:31 2026 by rpki-client