Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: eC3k/sLRfrcyRLEzHV+qrArjIUSmgpGyULXTygoX09o=
Subject key identifier: 6A:B3:E8:F6:CC:DF:27:48:1D:9E:57:D7:95:6F:B2:37:0D:A4:C0:29
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 01A0D4940215717C3C7105E2CAA770109259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 18B5
Signing time: Thu 24 Sep 2026 18:01:04 +0000
Manifest this update: Thu 24 Sep 2026 18:01:04 +0000
Manifest next update: Fri 25 Sep 2026 18:01:04 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: ppQQcMO8Y+i/vqslng1ldciICAj6zQyOstjQvNsMCrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:02:15:71:7c:3c:71:05:e2:ca:a7:70:10:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Sep 24 18:01:04 2026 GMT
Not After : Sep 25 18:01:04 2026 GMT
Subject: CN=6ab3e8f6ccdf27481d9e57d7956fb2370da4c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:86:20:7c:e2:8e:ec:5b:d9:98:d5:67:87:
d5:df:c0:dc:a7:ab:17:bf:4d:34:72:8f:82:6f:8d:
0b:7a:4e:26:9c:d3:15:ee:1a:ba:a3:91:bf:40:10:
b7:72:c8:b4:28:e1:f3:2f:86:e4:fc:8b:a4:07:03:
da:e5:95:06:e7:bc:5a:7e:ca:d0:77:7a:ae:e1:0a:
e4:c1:0e:36:d0:9f:65:be:f2:e7:ea:9d:46:6c:2c:
95:3c:6c:50:07:4d:34:18:58:40:aa:d5:75:32:77:
43:78:ba:50:17:f6:69:bc:ac:13:69:75:ef:25:16:
8f:da:40:fe:ea:8d:25:9e:aa:f5:24:e7:6a:65:85:
6e:f4:61:84:6e:4f:ad:d9:b5:cd:e7:c8:c7:ee:10:
d9:07:71:66:9a:70:0f:1c:6d:6f:af:62:f3:bb:61:
53:2b:77:3f:00:89:eb:ac:be:fd:af:61:e6:9a:28:
23:f3:59:c8:b2:b9:06:03:8e:56:c2:fc:fd:84:08:
70:2a:7c:c8:99:ff:eb:8b:f8:e5:91:43:b3:24:a9:
52:26:37:7f:c2:16:d2:f6:4d:4a:7a:b9:68:60:51:
da:3b:44:36:ec:9d:03:a7:04:5e:6c:ab:d9:4f:b0:
5e:43:73:18:2d:01:fd:e3:53:c8:93:e9:3b:b5:be:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:E8:F6:CC:DF:27:48:1D:9E:57:D7:95:6F:B2:37:0D:A4:C0:29
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:c6:c2:88:55:c4:be:ab:68:da:c0:f8:85:af:b5:96:6b:
e2:d4:a2:66:83:b9:47:44:1c:56:2b:03:86:2c:bc:aa:29:33:
7b:f5:b6:f0:fd:93:99:7e:db:16:24:89:4d:9e:e9:8f:f5:3b:
32:bd:d5:0c:c1:c7:8a:86:b9:40:7e:5f:a6:05:0b:5f:a7:ee:
2c:b8:98:f1:38:db:3e:c1:9c:43:86:f5:e3:be:e5:bc:7c:5d:
cb:bf:2a:19:70:f3:28:0a:13:5a:8d:81:e4:37:f8:c5:25:8c:
ce:38:b3:5f:c5:67:a3:e0:d3:11:f6:10:57:98:f4:14:54:de:
c7:54:9b:99:d9:f9:a2:93:2a:44:69:fd:b2:e0:91:58:34:7e:
63:21:76:a4:c9:75:db:37:2e:8d:39:42:fc:17:4a:5b:4d:66:
02:3c:b9:8c:04:ee:84:d1:b0:d7:6c:f2:2b:20:2e:bc:5f:93:
72:21:80:1c:cc:a3:e4:e6:d1:c8:74:0a:88:e0:65:15:cb:5d:
98:60:12:7e:bc:79:6f:a1:e5:e3:be:5d:c5:cd:8d:de:b4:46:
37:70:f1:3f:d7:a3:92:9d:fe:f8:c2:09:31:0b:ec:8c:68:da:
a7:22:8b:87:95:6a:18:49:d2:84:78:bc:3f:87:d9:70:e3:2e:
dc:44:cc:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlAIVcXw8cQXiyqdwEJJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2
Y2UyNjQwHhcNMjYwOTI0MTgwMTA0WhcNMjYwOTI1MTgwMTA0WjAzMTEwLwYDVQQD
Eyg2YWIzZThmNmNjZGYyNzQ4MWQ5ZTU3ZDc5NTZmYjIzNzBkYTRjMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWyGIHzijuxb2ZjVZ4fV38Dcp6sX
v000co+Cb40Lek4mnNMV7hq6o5G/QBC3csi0KOHzL4bk/IukBwPa5ZUG57xafsrQ
d3qu4QrkwQ420J9lvvLn6p1GbCyVPGxQB000GFhAqtV1MndDeLpQF/ZpvKwTaXXv
JRaP2kD+6o0lnqr1JOdqZYVu9GGEbk+t2bXN58jH7hDZB3FmmnAPHG1vr2Lzu2FT
K3c/AInrrL79r2Hmmigj81nIsrkGA45Wwvz9hAhwKnzImf/ri/jlkUOzJKlSJjd/
whbS9k1KerloYFHaO0Q27J0DpwRebKvZT7BeQ3MYLQH941PIk+k7tb6tOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqz6PbM3ydIHZ5X15VvsjcNpMApMB8GA1UdIwQY
MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt
NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2
LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjbGwohV
xL6raNrA+IWvtZZr4tSiZoO5R0QcVisDhiy8qikze/W28P2TmX7bFiSJTZ7pj/U7
Mr3VDMHHioa5QH5fpgULX6fuLLiY8TjbPsGcQ4b1477lvHxdy78qGXDzKAoTWo2B
5Df4xSWMzjizX8Vno+DTEfYQV5j0FFTex1Sbmdn5opMqRGn9suCRWDR+YyF2pMl1
2zcujTlC/BdKW01mAjy5jATuhNGw12zyKyAuvF+TciGAHMyj5ObRyHQKiOBlFctd
mGASfrx5b6Hl475dxc2N3rRGN3DxP9ejkp3++MIJMQvsjGjapyKLh5VqGEnShHi8
P4fZcOMu3ETM6g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:49:30 2026 by rpki-client