Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: Nv9vqrYC4JFUnBY5ICL4+ZCe13X/0wndkIt93UFNF7g=
Subject key identifier: 5B:DB:02:2C:7F:4A:6B:A3:D7:18:8A:4C:3E:B8:4D:44:15:53:BE:50
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 01A0CD10DB08CC7B66FCE111A826BBEDD27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1721
Signing time: Wed 23 Sep 2026 07:00:28 +0000
Manifest this update: Wed 23 Sep 2026 07:00:28 +0000
Manifest next update: Thu 24 Sep 2026 07:00:28 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: PI9RNio3P+aKwS0Pl1v7nb+x3TcAb/EweJsNWegm1+A=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:db:08:cc:7b:66:fc:e1:11:a8:26:bb:ed:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Sep 23 07:00:28 2026 GMT
Not After : Sep 24 07:00:28 2026 GMT
Subject: CN=5bdb022c7f4a6ba3d7188a4c3eb84d441553be50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:e1:3b:26:f9:dc:a9:44:d3:aa:a6:c6:b0:
67:40:d4:18:02:c5:02:c4:0d:2f:07:25:af:b5:d7:
77:1a:7a:51:a3:7d:34:7d:9d:86:73:b5:fb:18:ca:
0a:47:f2:d5:a3:a7:22:a7:75:7b:18:a1:45:91:7c:
10:06:ad:ff:79:b3:07:7f:7e:9f:c2:8e:bc:bf:c6:
1a:62:23:b5:0c:59:a9:7b:de:ed:37:39:db:14:3a:
cd:0f:d1:e9:32:c5:26:d2:6a:ad:d3:24:62:35:3f:
ec:27:38:80:36:76:7f:1b:f7:69:ca:24:d6:fa:73:
c6:ee:f8:0e:7d:9d:a8:b6:b1:c9:6c:97:ed:e4:7a:
4b:c3:81:1f:37:79:e4:35:e6:01:52:f0:88:1b:6d:
c6:77:4a:78:9a:2c:79:36:c3:71:18:08:64:11:58:
94:b5:f3:c5:71:d2:db:ba:9b:03:5a:54:87:28:cd:
fe:f0:31:28:07:b3:85:66:8b:61:ad:3d:4c:d5:93:
3b:ea:a4:ae:36:79:7c:c4:a2:e2:11:bd:2b:56:ba:
ab:fc:0c:f8:89:d1:23:74:3e:96:af:0c:f7:a0:ac:
47:6f:4f:4f:c7:00:18:c3:66:28:16:f3:ca:06:02:
5b:99:88:b3:4b:eb:4b:51:01:68:96:da:46:2e:81:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:02:2C:7F:4A:6B:A3:D7:18:8A:4C:3E:B8:4D:44:15:53:BE:50
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:41:54:4d:a9:ac:d5:7b:d6:21:de:84:53:c7:cb:79:7d:64:
84:e3:b6:a1:c6:7f:26:43:d4:06:ca:6b:42:5b:ae:e3:2c:fc:
47:45:c2:f4:0d:26:54:7c:ae:df:91:de:ce:dd:2c:35:ee:a6:
d2:d6:db:16:af:e3:90:a8:54:35:90:1a:91:e1:90:13:4a:56:
c7:e1:ed:1b:b0:fb:5f:a6:23:e9:d6:82:ad:ef:40:dd:5b:d2:
71:57:f7:6a:5e:73:bb:a1:11:1e:83:39:cf:bc:9b:8f:75:68:
51:0d:36:45:3d:d0:28:7f:fd:a9:0c:98:78:7b:b9:1d:86:c8:
cc:e2:81:df:9e:4e:a4:98:7b:90:28:d5:f5:eb:18:ad:cc:10:
4e:a4:c2:b9:b7:4a:5a:c1:95:1f:eb:31:f3:17:02:a4:39:fb:
2c:74:2c:0d:7d:30:37:d2:08:35:af:ca:29:7e:c0:2f:c0:1d:
8e:8c:17:00:28:f7:96:86:d8:f1:1f:22:fa:ac:bd:eb:76:05:
8b:e5:9f:87:b3:bf:02:e8:a4:db:6b:fb:7f:c8:3a:d8:21:77:
05:e9:92:fb:e9:b1:e8:5e:c4:5f:b0:93:03:f3:a5:69:3a:53:
1d:2e:f0:ad:ce:6d:61:4b:cd:e5:c5:10:19:79:28:8c:e5:ce:
db:61:8d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNENsIzHtm/OERqCa77dJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz
Mjc1NmIwHhcNMjYwOTIzMDcwMDI4WhcNMjYwOTI0MDcwMDI4WjAzMTEwLwYDVQQD
Eyg1YmRiMDIyYzdmNGE2YmEzZDcxODhhNGMzZWI4NGQ0NDE1NTNiZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoObhOyb53KlE06qmxrBnQNQYAsUC
xA0vByWvtdd3GnpRo300fZ2Gc7X7GMoKR/LVo6cip3V7GKFFkXwQBq3/ebMHf36f
wo68v8YaYiO1DFmpe97tNznbFDrND9HpMsUm0mqt0yRiNT/sJziANnZ/G/dpyiTW
+nPG7vgOfZ2otrHJbJft5HpLw4EfN3nkNeYBUvCIG23Gd0p4mix5NsNxGAhkEViU
tfPFcdLbupsDWlSHKM3+8DEoB7OFZothrT1M1ZM76qSuNnl8xKLiEb0rVrqr/Az4
idEjdD6Wrwz3oKxHb09PxwAYw2YoFvPKBgJbmYizS+tLUQFoltpGLoFgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvbAix/Smuj1xiKTD64TUQVU75QMB8GA1UdIwQY
MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt
ZDQ3MTBkMDIyMzM2LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2
LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUFUTams
1XvWId6EU8fLeX1khOO2ocZ/JkPUBsprQluu4yz8R0XC9A0mVHyu35Hezt0sNe6m
0tbbFq/jkKhUNZAakeGQE0pWx+HtG7D7X6Yj6daCre9A3VvScVf3al5zu6ERHoM5
z7ybj3VoUQ02RT3QKH/9qQyYeHu5HYbIzOKB355OpJh7kCjV9esYrcwQTqTCubdK
WsGVH+sx8xcCpDn7LHQsDX0wN9IINa/KKX7AL8AdjowXACj3lobY8R8i+qy963YF
i+Wfh7O/Auik22v7f8g62CF3BemS++mx6F7EX7CTA/OlaTpTHS7wrc5tYUvN5cUQ
GXkojOXO22GN7g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:17 2026 by rpki-client