Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: EL9veqS8YwVlbllOqZG3bQ8z/BtfBJT60kspVxJpoNI=
Subject key identifier: 01:D3:16:0F:58:32:BB:77:59:7A:68:18:02:1F:07:F7:92:6B:91:94
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 01A0C8FCEFF1F6BD270A112B84D1F28E53CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1355
Signing time: Tue 22 Sep 2026 12:00:14 +0000
Manifest this update: Tue 22 Sep 2026 12:00:14 +0000
Manifest next update: Wed 23 Sep 2026 12:00:14 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: qHC50OWrDF7Vw2CcM470QUMKwIt/zEMA5TYHEYzYZL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:ef:f1:f6:bd:27:0a:11:2b:84:d1:f2:8e:53:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Sep 22 12:00:14 2026 GMT
Not After : Sep 23 12:00:14 2026 GMT
Subject: CN=01d3160f5832bb77597a6818021f07f7926b9194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:a7:b4:65:54:41:96:b8:a9:a9:a2:c4:21:
4b:b0:c3:43:2c:a0:52:f5:2d:c9:ff:f0:57:08:0d:
ef:04:1a:42:b8:7f:f6:a0:03:10:1e:80:0a:ab:33:
4d:8d:37:a2:69:31:9d:a4:6f:7c:cd:73:da:03:68:
5f:03:8b:1e:25:41:67:ec:c5:cc:bb:d7:30:93:74:
28:db:9a:82:f3:85:2f:16:5c:6b:d5:02:41:c6:eb:
d7:14:b8:31:72:9b:a4:eb:3b:56:b4:86:1d:c5:7e:
22:ad:a4:f9:69:a6:28:04:90:3e:26:81:d6:f2:09:
ba:98:9c:c0:ce:2e:0c:25:24:3c:d3:6d:04:68:d2:
86:29:2a:14:01:e1:f8:df:5a:93:49:d4:54:18:8d:
1a:c9:f0:3f:bf:52:84:be:99:85:3f:8e:62:c7:d1:
e3:1e:df:be:71:37:7b:b4:62:b6:7f:8e:68:47:2f:
ca:c1:33:15:0e:66:56:50:45:a2:43:b0:7d:d1:b8:
69:8d:c0:bb:7e:d1:13:99:3c:c3:9a:41:5e:0e:52:
d7:a0:51:d9:c6:68:05:83:9b:35:3f:c7:37:fe:ea:
cc:00:b4:22:f2:b5:73:19:62:68:e2:d2:71:7b:f0:
92:01:64:04:f9:6f:d0:25:d7:85:78:2b:6b:ff:e6:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:16:0F:58:32:BB:77:59:7A:68:18:02:1F:07:F7:92:6B:91:94
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:bb:75:11:1e:40:99:c3:40:ff:36:c8:94:9a:10:8e:b2:
8c:94:03:db:e6:8f:bd:b1:23:08:d5:7f:9d:f4:17:fe:36:b7:
6c:d9:04:d0:5d:4c:94:ca:d6:f6:db:6a:e1:dd:26:f9:aa:d4:
0e:58:53:fa:53:40:3d:73:02:66:8e:d8:a7:b8:ff:9b:8a:25:
f1:de:1f:c4:93:81:97:50:0e:8d:f1:5e:b3:32:31:45:60:f0:
47:c6:6e:b7:3e:cd:01:09:21:22:f0:11:f9:f2:ae:8f:83:18:
d9:24:36:2b:22:c4:d0:d6:1f:39:07:c0:e7:95:9a:fc:46:64:
6d:9b:52:91:78:38:d6:a1:54:cb:32:4c:5e:43:5c:7c:be:53:
35:ab:57:3d:18:bd:d1:76:25:90:c4:55:77:dd:ae:2b:5b:f5:
bc:eb:30:20:c0:0c:4b:da:19:de:5a:b9:e6:e3:c8:d4:f8:34:
86:b8:11:c9:8e:4b:13:41:01:f3:d6:5c:1b:e6:0a:6b:ab:73:
68:bc:7b:29:45:8a:35:42:77:7b:dc:0c:b1:37:79:03:dc:44:
ab:c1:34:31:a7:31:e6:99:e3:8a:c4:50:9c:15:07:80:67:8d:
35:5a:da:cc:c9:a1:09:e6:6b:9b:ef:69:76:18:f5:9b:7c:24:
8d:6d:56:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/O/x9r0nChErhNHyjlPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjYwOTIyMTIwMDE0WhcNMjYwOTIzMTIwMDE0WjAzMTEwLwYDVQQD
EygwMWQzMTYwZjU4MzJiYjc3NTk3YTY4MTgwMjFmMDdmNzkyNmI5MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwKntGVUQZa4qamixCFLsMNDLKBS
9S3J//BXCA3vBBpCuH/2oAMQHoAKqzNNjTeiaTGdpG98zXPaA2hfA4seJUFn7MXM
u9cwk3Qo25qC84UvFlxr1QJBxuvXFLgxcpuk6ztWtIYdxX4iraT5aaYoBJA+JoHW
8gm6mJzAzi4MJSQ8020EaNKGKSoUAeH431qTSdRUGI0ayfA/v1KEvpmFP45ix9Hj
Ht++cTd7tGK2f45oRy/KwTMVDmZWUEWiQ7B90bhpjcC7ftETmTzDmkFeDlLXoFHZ
xmgFg5s1P8c3/urMALQi8rVzGWJo4tJxe/CSAWQE+W/QJdeFeCtr/+ZJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHTFg9YMrt3WXpoGAIfB/eSa5GUMB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2S7dREe
QJnDQP82yJSaEI6yjJQD2+aPvbEjCNV/nfQX/ja3bNkE0F1MlMrW9ttq4d0m+arU
DlhT+lNAPXMCZo7Yp7j/m4ol8d4fxJOBl1AOjfFeszIxRWDwR8Zutz7NAQkhIvAR
+fKuj4MY2SQ2KyLE0NYfOQfA55Wa/EZkbZtSkXg41qFUyzJMXkNcfL5TNatXPRi9
0XYlkMRVd92uK1v1vOswIMAMS9oZ3lq55uPI1Pg0hrgRyY5LE0EB89ZcG+YKa6tz
aLx7KUWKNUJ3e9wMsTd5A9xEq8E0Macx5pnjisRQnBUHgGeNNVrazMmhCeZrm+9p
dhj1m3wkjW1WZg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:30:35 2026 by rpki-client