Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: dzGgz5jOOQ7eKTHfgWgMB8EES9+RSU+Zka3x1EIoxPg=
Subject key identifier: A2:BF:86:7D:33:42:E2:97:3A:30:C1:13:DA:A1:86:D1:61:B7:38:AB
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 01A1280C8E36656CB8BFE702887B306F37A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 03EC
Signing time: Sat 10 Oct 2026 23:01:13 +0000
Manifest this update: Sat 10 Oct 2026 23:01:13 +0000
Manifest next update: Sun 11 Oct 2026 23:01:13 +0000
Files and hashes: 1: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
2: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: kcB9GDoqX6hT+ghMgmbQznht22jF2BUVuR2O9/y2sHU=)
3: m68keB3eEWupefhfdu1EojbXUx0.asa (hash: d7/89Ia5AzHYOhT/NLGxHC2wfpCLvAL8r4vSmbnqhi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:8e:36:65:6c:b8:bf:e7:02:88:7b:30:6f:37:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Oct 10 23:01:13 2026 GMT
Not After : Oct 11 23:01:13 2026 GMT
Subject: CN=a2bf867d3342e2973a30c113daa186d161b738ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:a9:9d:51:3f:54:85:06:69:e1:14:79:33:
88:a6:fd:4b:7d:a5:94:f6:47:7b:63:84:22:cd:17:
50:51:82:54:56:ea:17:3c:16:3b:b1:69:29:9e:39:
23:83:b3:72:45:f3:e8:35:60:56:a9:ef:73:9b:15:
40:02:29:c3:9a:d9:eb:f7:a3:ec:33:76:9a:41:c4:
5d:89:56:af:b0:a9:a4:3d:c9:16:5c:cc:45:6a:f5:
c6:1f:eb:58:80:32:bc:2d:2e:5f:fd:da:f2:d0:36:
af:9c:42:7b:5b:8d:f0:a0:84:76:a2:03:c7:a2:05:
5e:2d:41:a2:84:03:fd:33:cd:d5:46:e6:9b:cf:73:
01:b5:51:b3:90:75:68:24:36:65:9b:b6:e5:59:02:
78:a5:35:4e:1a:da:e9:f0:2d:25:53:84:24:a0:e0:
72:a8:5d:1b:2c:aa:d6:69:73:14:8a:ee:17:4b:d1:
50:8c:34:bb:96:88:08:be:da:f4:14:35:cc:9d:4c:
19:fc:f4:01:6d:16:ed:12:39:f9:52:1c:6c:b2:b7:
ae:01:1d:3c:ba:8a:c6:ba:f6:9d:5c:46:ac:24:d2:
fd:ef:5c:05:86:5d:f7:c8:08:86:1c:4a:ca:f9:c5:
13:a2:a2:d8:05:d9:53:1e:d2:65:8a:42:fa:f8:ee:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:86:7D:33:42:E2:97:3A:30:C1:13:DA:A1:86:D1:61:B7:38:AB
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:e0:18:78:a4:7d:40:e6:70:8e:7e:1b:a1:3a:bf:17:0c:
e0:d8:01:22:f3:38:89:06:52:5c:25:3d:cc:5a:ab:a4:78:e7:
6d:a7:6a:79:94:9e:6f:f5:1f:c0:b5:5f:e1:1d:5f:6b:27:b6:
aa:f9:69:54:88:f8:57:e6:b5:d6:ab:91:00:33:6e:75:0e:47:
03:c8:0a:29:cc:92:d7:72:06:9f:a4:d7:44:47:cc:4f:8e:11:
1e:8a:88:ac:b8:65:6e:e7:42:a8:22:8d:65:dd:c6:63:63:bf:
df:d1:81:d8:12:c7:16:4a:83:47:d4:cf:b7:ef:51:00:8b:72:
e6:aa:5f:8a:96:f7:97:71:6f:5c:c4:b1:e4:fb:4c:96:69:9d:
cb:d1:5f:da:d6:5b:3b:94:ec:65:e4:02:d4:e5:07:c2:c0:02:
28:63:75:d9:fb:ab:91:42:74:b0:5c:71:03:ce:1b:21:da:81:
d1:0a:a2:18:8c:c5:b7:1f:0c:4d:fb:e2:e2:79:58:1e:c7:2b:
5b:3b:35:d7:58:7d:15:43:eb:1e:f8:07:be:8c:63:ba:60:bc:
54:cb:ec:b5:95:29:34:03:35:cd:5c:19:54:6c:7b:e5:34:6c:
87:36:07:bd:4c:3e:f8:77:d0:bb:1f:e9:58:c9:bf:37:b1:45:
5b:85:5d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoDI42ZWy4v+cCiHswbzemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2Y2ZjZlMTUwYTYwNDNjYjIwOTNiMDhkZGQzYTJhNGFi
OTdhMzcwHhcNMjYxMDEwMjMwMTEzWhcNMjYxMDExMjMwMTEzWjAzMTEwLwYDVQQD
EyhhMmJmODY3ZDMzNDJlMjk3M2EzMGMxMTNkYWExODZkMTYxYjczOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEOpnVE/VIUGaeEUeTOIpv1LfaWU
9kd7Y4QizRdQUYJUVuoXPBY7sWkpnjkjg7NyRfPoNWBWqe9zmxVAAinDmtnr96Ps
M3aaQcRdiVavsKmkPckWXMxFavXGH+tYgDK8LS5f/dry0DavnEJ7W43woIR2ogPH
ogVeLUGihAP9M83VRuabz3MBtVGzkHVoJDZlm7blWQJ4pTVOGtrp8C0lU4QkoOBy
qF0bLKrWaXMUiu4XS9FQjDS7logIvtr0FDXMnUwZ/PQBbRbtEjn5UhxssreuAR08
uorGuvadXEasJNL971wFhl33yAiGHErK+cUToqLYBdlTHtJlikL6+O7N2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK/hn0zQuKXOjDBE9qhhtFhtzirMB8GA1UdIwQY
MBaAFGF/b24VCmBDyyCTsI3dOipKuXo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMt
NzFjM2Q2YWEyODk5LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMtNzFjM2Q2YWEyODk5
LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZ7gGHik
fUDmcI5+G6E6vxcM4NgBIvM4iQZSXCU9zFqrpHjnbadqeZSeb/UfwLVf4R1faye2
qvlpVIj4V+a11quRADNudQ5HA8gKKcyS13IGn6TXREfMT44RHoqIrLhlbudCqCKN
Zd3GY2O/39GB2BLHFkqDR9TPt+9RAIty5qpfipb3l3FvXMSx5PtMlmmdy9Ff2tZb
O5TsZeQC1OUHwsACKGN12furkUJ0sFxxA84bIdqB0QqiGIzFtx8MTfvi4nlYHscr
Wzs111h9FUPrHvgHvoxjumC8VMvstZUpNAM1zVwZVGx75TRshzYHvUw++HfQux/p
WMm/N7FFW4Vd8g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:27:36 2026 by rpki-client