Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: zcky91XFQs7zlWMICF2GJectdM3YW/uqt82YDEwJPvs=
Subject key identifier: 87:18:51:FD:E8:76:11:B2:75:8D:E0:1D:5B:F8:AF:7B:6B:32:EC:E6
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01A1027FE51A6BE2168113ABAAF1A9E425CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 12BA
Signing time: Sat 03 Oct 2026 16:01:38 +0000
Manifest this update: Sat 03 Oct 2026 16:01:38 +0000
Manifest next update: Sun 04 Oct 2026 16:01:38 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: +gJXtk7baISDkWTffzDpwWnG7bPYOfj/bd+OSF+JUDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:e5:1a:6b:e2:16:81:13:ab:aa:f1:a9:e4:25:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Oct 3 16:01:38 2026 GMT
Not After : Oct 4 16:01:38 2026 GMT
Subject: CN=871851fde87611b2758de01d5bf8af7b6b32ece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:59:12:17:19:43:90:ac:03:88:7d:98:b7:
81:e1:d4:01:83:ab:0b:05:9c:27:68:f9:b1:98:0a:
2c:07:f9:72:5e:e7:41:5e:1e:88:0b:ad:6f:09:15:
1b:fc:8b:b8:c5:f7:04:58:3d:95:48:ce:99:53:36:
1a:7d:0e:cd:3f:e3:26:7a:19:e9:a7:98:34:b2:2c:
3c:cf:24:59:59:1f:6b:dc:19:74:6a:1d:87:32:6c:
17:9a:6e:a7:82:28:0a:bc:05:fe:d8:35:35:30:b8:
be:f3:84:88:0b:aa:ba:df:c6:97:f8:52:96:f0:58:
97:e1:7b:a7:7c:76:71:89:6c:12:fa:4d:84:a3:59:
c2:b6:9a:cb:83:44:8e:3b:fc:23:67:6e:53:49:ba:
84:6c:e4:23:5f:bd:9b:00:e8:d3:1e:4e:ce:10:00:
56:31:e2:07:d6:86:32:6c:c2:3f:b8:3c:79:d7:f0:
02:df:3d:ba:52:56:c7:f5:23:47:82:9e:c6:77:71:
78:18:85:4e:ab:f2:66:0a:0d:99:f6:41:a6:f3:70:
07:fe:1c:10:82:44:1f:6a:2a:a6:49:ba:80:df:08:
dd:40:0b:19:87:db:b2:b0:05:99:d6:e6:8b:85:b0:
31:52:76:f6:07:e4:ad:c4:7e:af:4d:ef:5d:9b:18:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:51:FD:E8:76:11:B2:75:8D:E0:1D:5B:F8:AF:7B:6B:32:EC:E6
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b9:97:9e:82:d8:63:a4:0b:cd:01:9a:b9:30:ec:5b:0c:ab:
6e:b8:35:08:90:21:5b:69:c9:db:ab:91:1b:77:10:44:50:b5:
f4:30:b9:3d:75:ba:8c:57:2a:81:b1:a6:5b:68:1a:4c:b6:f0:
67:d0:fc:3f:15:ad:32:17:24:d2:48:49:2e:9e:63:e0:e0:22:
4d:ea:fd:79:25:20:f2:f7:f5:3d:ef:3a:ec:61:9b:0a:3f:11:
62:a9:5e:10:9e:56:e0:45:b8:6f:6d:ae:90:b5:e7:46:da:7b:
02:00:29:7f:38:7c:97:4d:ea:ea:cf:58:6b:97:cc:87:53:32:
dc:45:0f:30:70:66:85:5d:7b:eb:0a:ca:a1:2d:80:dc:25:e9:
7b:7a:7b:97:b5:91:0b:6d:d1:90:0d:24:c3:ab:c7:4a:78:f2:
6b:10:f7:88:b8:55:49:93:3b:89:ac:8c:c3:d0:94:16:ce:a3:
5c:89:48:99:8a:2e:27:86:01:c8:f7:dc:11:cb:ff:09:10:35:
3c:c8:a8:3e:de:16:7d:06:61:a4:f6:b5:45:49:a2:e1:76:b5:
52:95:9e:59:50:a7:ee:1d:8c:a5:26:5a:ce:f2:70:7c:8e:cc:
ea:95:93:3b:df:d5:8c:64:89:79:e5:55:c5:f5:ca:c8:2e:f5:
2b:7d:45:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECf+Uaa+IWgROrqvGp5CXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjYxMDAzMTYwMTM4WhcNMjYxMDA0MTYwMTM4WjAzMTEwLwYDVQQD
Eyg4NzE4NTFmZGU4NzYxMWIyNzU4ZGUwMWQ1YmY4YWY3YjZiMzJlY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLVZEhcZQ5CsA4h9mLeB4dQBg6sL
BZwnaPmxmAosB/lyXudBXh6IC61vCRUb/Iu4xfcEWD2VSM6ZUzYafQ7NP+Mmehnp
p5g0siw8zyRZWR9r3Bl0ah2HMmwXmm6ngigKvAX+2DU1MLi+84SIC6q638aX+FKW
8FiX4XunfHZxiWwS+k2Eo1nCtprLg0SOO/wjZ25TSbqEbOQjX72bAOjTHk7OEABW
MeIH1oYybMI/uDx51/AC3z26UlbH9SNHgp7Gd3F4GIVOq/JmCg2Z9kGm83AH/hwQ
gkQfaiqmSbqA3wjdQAsZh9uysAWZ1uaLhbAxUnb2B+StxH6vTe9dmxgLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcYUf3odhGydY3gHVv4r3trMuzmMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrmXnoLY
Y6QLzQGauTDsWwyrbrg1CJAhW2nJ26uRG3cQRFC19DC5PXW6jFcqgbGmW2gaTLbw
Z9D8PxWtMhck0khJLp5j4OAiTer9eSUg8vf1Pe867GGbCj8RYqleEJ5W4EW4b22u
kLXnRtp7AgApfzh8l03q6s9Ya5fMh1My3EUPMHBmhV176wrKoS2A3CXpe3p7l7WR
C23RkA0kw6vHSnjyaxD3iLhVSZM7iayMw9CUFs6jXIlImYouJ4YByPfcEcv/CRA1
PMioPt4WfQZhpPa1RUmi4Xa1UpWeWVCn7h2MpSZazvJwfI7M6pWTO9/VjGSJeeVV
xfXKyC71K31FGQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:37:35 2026 by rpki-client