Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier: iqCF6j93HKIzcuS9gsPevpzmUfDwaM8cehB4O+7JiX0=
Subject key identifier: 1A:05:CA:76:30:50:ED:1C:4E:B6:2B:66:A3:41:29:D2:05:ED:85:E8
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial: 01A0C2C421989123393FF713ED8D89338C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number: 031F
Signing time: Mon 21 Sep 2026 07:00:28 +0000
Manifest this update: Mon 21 Sep 2026 07:00:28 +0000
Manifest next update: Tue 22 Sep 2026 07:00:28 +0000
Files and hashes: 1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: segMNthIilAIL5FW8FTXHX+phPaWEAGhszd813OZeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:21:98:91:23:39:3f:f7:13:ed:8d:89:33:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
Validity
Not Before: Sep 21 07:00:28 2026 GMT
Not After : Sep 22 07:00:28 2026 GMT
Subject: CN=1a05ca763050ed1c4eb62b66a34129d205ed85e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:e8:1e:03:7a:30:ec:7a:15:ee:2b:37:4a:
31:2c:6c:bf:68:f8:c1:45:7d:65:ee:26:76:3d:08:
87:9e:b3:87:26:0f:9d:a3:b8:8a:c9:b6:61:44:ea:
ea:f6:b9:88:66:3e:84:5d:91:a7:9d:c3:4b:d5:46:
72:71:8a:2b:ae:ae:04:85:bb:f0:46:5e:37:a7:be:
e8:c2:9f:0c:35:a3:90:3e:77:ea:80:f4:db:68:88:
ac:5f:8b:a8:cd:ba:a9:d7:71:cf:80:9b:07:b1:bb:
97:26:f3:98:89:3f:c3:0e:b3:c2:5d:9c:53:93:35:
27:a4:ca:4d:33:cb:6b:e5:d9:20:98:84:b2:87:83:
21:4c:a6:64:f1:2b:8f:80:90:4a:d8:a3:f8:6d:a2:
9e:0e:0a:4f:a2:1d:cd:c4:a5:5f:43:b5:f3:e0:14:
5a:b9:b4:19:43:db:34:75:c6:83:b8:5f:e4:be:bc:
a0:e7:21:cd:36:c6:ae:f2:c9:5c:ec:33:81:19:e3:
8a:1b:4f:32:8d:79:dc:9a:04:ef:dc:49:75:73:61:
61:45:8d:6d:45:75:59:71:1c:86:9a:51:ca:33:d9:
11:fe:5a:72:39:d6:f5:09:02:c2:9d:2c:bf:25:65:
76:93:b6:80:e8:a9:bf:97:d4:4e:14:0d:53:68:39:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:CA:76:30:50:ED:1C:4E:B6:2B:66:A3:41:29:D2:05:ED:85:E8
X509v3 Authority Key Identifier:
keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:0e:a1:ba:2b:ef:4d:a3:e3:f2:63:ff:e2:21:d0:b9:69:
90:e0:35:44:42:97:5c:9b:5b:f7:ec:f9:c6:75:be:fa:12:ca:
00:c7:84:fb:df:c6:ae:bc:ba:41:9e:02:06:d0:cf:13:83:37:
52:3b:9e:6a:79:3b:4a:98:8f:d2:c5:cc:dd:bc:6c:d7:19:f4:
a8:8c:2b:e6:81:41:92:a7:7e:59:a1:16:fd:09:23:68:02:cd:
44:05:cd:7e:6f:1a:cf:74:11:7c:9b:93:75:30:83:2e:69:73:
eb:35:e3:0e:67:6f:ff:23:f8:5f:70:97:64:30:e0:f2:65:95:
94:8b:b4:81:4d:de:44:82:a9:e4:df:ad:5d:43:9a:02:1b:b1:
cf:d1:47:8f:a3:a1:f3:c7:b9:fc:f5:08:9e:f6:27:14:6d:d9:
47:1f:32:c9:6f:87:7a:98:a3:4d:a0:f6:ba:2a:87:b1:85:ad:
f3:be:07:ca:91:e5:d4:6a:27:77:cb:e7:e1:7e:53:25:6c:71:
a0:45:fa:c3:d4:3b:1a:a9:d2:bf:59:97:33:e3:a4:e6:67:64:
75:a8:80:89:ac:36:1f:9f:89:27:4b:a6:14:63:24:dd:a9:9b:
aa:2a:ee:eb:9b:ce:c4:a5:4e:0f:61:de:d5:cf:bf:b2:c2:3a:
e7:fa:4e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxCGYkSM5P/cT7Y2JM4xhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh
MzIyYTkwHhcNMjYwOTIxMDcwMDI4WhcNMjYwOTIyMDcwMDI4WjAzMTEwLwYDVQQD
EygxYTA1Y2E3NjMwNTBlZDFjNGViNjJiNjZhMzQxMjlkMjA1ZWQ4NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCPoHgN6MOx6Fe4rN0oxLGy/aPjB
RX1l7iZ2PQiHnrOHJg+do7iKybZhROrq9rmIZj6EXZGnncNL1UZycYorrq4Ehbvw
Rl43p77owp8MNaOQPnfqgPTbaIisX4uozbqp13HPgJsHsbuXJvOYiT/DDrPCXZxT
kzUnpMpNM8tr5dkgmISyh4MhTKZk8SuPgJBK2KP4baKeDgpPoh3NxKVfQ7Xz4BRa
ubQZQ9s0dcaDuF/kvryg5yHNNsau8slc7DOBGeOKG08yjXncmgTv3El1c2FhRY1t
RXVZcRyGmlHKM9kR/lpyOdb1CQLCnSy/JWV2k7aA6Km/l9ROFA1TaDmFTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoFynYwUO0cTrYrZqNBKdIF7YXoMB8GA1UdIwQY
MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt
MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw
LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGK8Oobor
702j4/Jj/+Ih0LlpkOA1REKXXJtb9+z5xnW++hLKAMeE+9/Grry6QZ4CBtDPE4M3
Ujueank7SpiP0sXM3bxs1xn0qIwr5oFBkqd+WaEW/QkjaALNRAXNfm8az3QRfJuT
dTCDLmlz6zXjDmdv/yP4X3CXZDDg8mWVlIu0gU3eRIKp5N+tXUOaAhuxz9FHj6Oh
88e5/PUInvYnFG3ZRx8yyW+HepijTaD2uiqHsYWt874HypHl1Gond8vn4X5TJWxx
oEX6w9Q7GqnSv1mXM+Ok5mdkdaiAiaw2H5+JJ0umFGMk3ambqiru65vOxKVOD2He
1c+/ssI65/pOfg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:23 2026 by rpki-client