Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
File: yFKOFLm6mFBWKUjNeshNKytqNx0.mft (raw, json)
Hash identifier: bTUy/wMHNMbeFhvjx53V/Kctj7dN5QQgVJr4B2xIx90=
Subject key identifier: 18:A8:04:D4:E0:6A:97:5F:F7:CB:0C:07:F3:3B:E5:BB:61:C6:5B:01
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 01A1250B4454A2C34E16261DFC931A822C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 09:00:57 +0000
Manifest this update: Sat 10 Oct 2026 09:00:57 +0000
Manifest next update: Sun 11 Oct 2026 09:00:57 +0000
Files and hashes: 1: AdgSMzHPUmuKzAlrtS53QR76t1s.roa (hash: nKsP5GbM2QK6ia47o/bGf3bfq0W9Ls05zVJw81d/vE0=)
2: GAthnqDGma0HV1Z_fsMCbyVty3s.roa (hash: LNxkjnIdUZAQUAiDHMtSuZXlYFkdVKKJ+PFIvXIC9XU=)
3: yFKOFLm6mFBWKUjNeshNKytqNx0.crl (hash: K++lea3m7n7B5TjIJak8yzqY4clI94mWwaqV1A2pYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:44:54:a2:c3:4e:16:26:1d:fc:93:1a:82:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Oct 10 09:00:57 2026 GMT
Not After : Oct 11 09:00:57 2026 GMT
Subject: CN=18a804d4e06a975ff7cb0c07f33be5bb61c65b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:88:81:3a:e7:35:ce:7f:07:eb:f2:73:ab:
6f:84:2f:36:37:16:82:4f:62:6b:e7:6a:74:d0:8f:
4b:4c:bb:38:da:c3:27:55:4a:87:0c:87:b5:f9:e6:
c7:ce:4e:eb:ff:19:ee:e4:a9:94:b6:dc:77:8d:28:
24:3e:f8:3a:b8:27:e2:04:fb:2d:b0:11:25:d1:f7:
c0:b8:89:d0:5f:97:df:21:44:83:69:41:0e:ae:5b:
78:aa:2a:97:81:5b:4b:50:3e:57:3a:5e:22:6a:3c:
01:83:c3:96:3c:44:6d:7a:f1:df:f1:de:73:26:3f:
03:8e:d7:d8:6a:ae:0a:bc:7c:d8:0c:1a:4b:b5:fe:
d5:41:5f:7a:7b:4a:7d:20:51:2b:4b:5d:59:e4:25:
e9:c8:13:e9:56:a0:cf:a1:bf:8f:25:30:99:4e:c8:
21:da:00:bb:d2:3d:0c:4a:cb:e4:77:3b:09:57:c4:
12:49:6e:f2:8c:7b:73:8a:5b:bd:04:d7:cd:09:e8:
5c:3f:44:1e:dd:49:ec:fd:cb:06:7b:23:5b:cd:c8:
4b:29:a6:64:66:9f:57:07:f9:8d:da:ff:6c:48:e6:
b2:6f:6b:29:83:2b:2f:ab:d1:63:d3:a3:8b:63:dd:
ca:11:6c:21:60:c3:c1:c5:4e:10:cf:a7:47:c1:58:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:04:D4:E0:6A:97:5F:F7:CB:0C:07:F3:3B:E5:BB:61:C6:5B:01
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:d5:3a:48:55:53:fc:12:f3:a1:3a:be:1a:5e:ca:32:eb:
71:01:a7:74:36:66:cb:c4:a7:4d:9b:5c:2d:1a:3b:f3:c2:9a:
86:e1:7c:ce:14:30:2b:c8:e5:5e:c3:e8:02:fe:34:44:d7:10:
88:97:61:0d:61:a2:f6:59:75:a2:83:5a:30:44:d1:ba:15:8d:
1d:5a:8a:c8:0b:e3:68:19:79:80:fb:9d:38:c6:97:69:33:28:
d7:b5:0a:44:d3:cc:59:dd:9f:48:95:58:c1:11:45:90:95:71:
13:1f:54:3d:13:df:db:b2:e4:c4:9c:d7:21:d1:7f:a5:b2:32:
6d:9c:13:a0:f4:60:01:6a:bb:7b:eb:d3:14:2b:2f:09:2b:4e:
97:28:b4:26:c1:92:17:1a:68:fd:c2:5a:8e:0b:50:76:6d:43:
dd:ba:e3:5e:f5:07:f2:2b:b5:ac:09:57:7b:0f:95:6b:b2:e2:
3f:df:32:35:6c:99:50:3a:2f:ce:3c:78:2c:2a:82:4b:bc:09:
0b:8a:c1:c2:a9:1c:6c:3b:f8:d9:37:cb:d8:c1:00:0b:cd:91:
51:ed:90:2e:2b:e3:43:78:59:3d:89:90:4c:ab:94:92:81:da:
b8:60:91:82:40:a6:de:3e:1e:e8:d9:44:bf:b5:8a:48:76:3f:
5f:52:4c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC0RUosNOFiYd/JMagixNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTI4ZTE0YjliYTk4NTA1NjI5NDhjZDdhYzg0ZDJiMmI2
YTM3MWQwHhcNMjYxMDEwMDkwMDU3WhcNMjYxMDExMDkwMDU3WjAzMTEwLwYDVQQD
EygxOGE4MDRkNGUwNmE5NzVmZjdjYjBjMDdmMzNiZTViYjYxYzY1YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkaIgTrnNc5/B+vyc6tvhC82NxaC
T2Jr52p00I9LTLs42sMnVUqHDIe1+ebHzk7r/xnu5KmUttx3jSgkPvg6uCfiBPst
sBEl0ffAuInQX5ffIUSDaUEOrlt4qiqXgVtLUD5XOl4iajwBg8OWPERtevHf8d5z
Jj8DjtfYaq4KvHzYDBpLtf7VQV96e0p9IFErS11Z5CXpyBPpVqDPob+PJTCZTsgh
2gC70j0MSsvkdzsJV8QSSW7yjHtzilu9BNfNCehcP0Qe3Uns/csGeyNbzchLKaZk
Zp9XB/mN2v9sSOayb2spgysvq9Fj06OLY93KEWwhYMPBxU4Qz6dHwViDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBioBNTgapdf98sMB/M75bthxlsBMB8GA1UdIwQY
MBaAFMhSjhS5uphQVilIzXrITSsrajcdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZLT0ZMbTZtRkJXS1VqTmVzaE5LeXRxTngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt
NDZhMGRmNzc0ZmUxLzEveUZLT0ZMbTZtRkJXS1VqTmVzaE5LeXRxTngwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx
LzEveUZLT0ZMbTZtRkJXS1VqTmVzaE5LeXRxTngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoDVOkhV
U/wS86E6vhpeyjLrcQGndDZmy8SnTZtcLRo788KahuF8zhQwK8jlXsPoAv40RNcQ
iJdhDWGi9ll1ooNaMETRuhWNHVqKyAvjaBl5gPudOMaXaTMo17UKRNPMWd2fSJVY
wRFFkJVxEx9UPRPf27LkxJzXIdF/pbIybZwToPRgAWq7e+vTFCsvCStOlyi0JsGS
Fxpo/cJajgtQdm1D3brjXvUH8iu1rAlXew+Va7LiP98yNWyZUDovzjx4LCqCS7wJ
C4rBwqkcbDv42TfL2MEAC82RUe2QLivjQ3hZPYmQTKuUkoHauGCRgkCm3j4e6NlE
v7WKSHY/X1JMGA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:20:06 2026 by rpki-client