Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: MJl+QnynlI9P9G9EQynx6Cf23ryt2Du8CAKD8YUIWqM=
Subject key identifier: 11:8B:66:0C:CC:1A:CB:C2:E3:02:2D:FC:C1:E9:57:B3:A5:33:FC:E9
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 01A0F0E83CC3CB2B27827478ADF10E00F853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 120C
Signing time: Wed 30 Sep 2026 06:02:26 +0000
Manifest this update: Wed 30 Sep 2026 06:02:26 +0000
Manifest next update: Thu 01 Oct 2026 06:02:26 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: Qc5T1O+z9wPwdyIrwJVF8YQxPz3KNUMdKM1IjJFyAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:3c:c3:cb:2b:27:82:74:78:ad:f1:0e:00:f8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Sep 30 06:02:26 2026 GMT
Not After : Oct 1 06:02:26 2026 GMT
Subject: CN=118b660ccc1acbc2e3022dfcc1e957b3a533fce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:4f:59:7d:02:ef:c6:06:df:d6:f8:3d:fc:
80:f8:2d:81:f5:d1:80:c7:b0:9e:5d:24:6a:d4:f4:
86:98:cc:bc:f8:b2:4d:eb:ca:f2:bf:25:32:67:ef:
44:94:3e:af:5f:ba:d3:e6:7f:65:8f:3e:a9:21:ec:
26:22:29:c3:fb:69:20:f1:48:3a:d3:d7:de:f0:cf:
a4:d1:8c:2e:60:d0:37:a7:3a:08:f7:2a:b6:17:17:
16:73:84:7e:ec:73:a6:d9:09:57:2d:16:41:c5:2d:
16:f2:27:51:0a:39:da:42:c8:21:92:38:dc:40:f0:
16:d2:1f:dd:13:43:45:e1:b4:3a:4c:cd:4c:4f:a9:
9b:48:99:4a:06:b3:cc:07:f3:95:ac:81:cb:4c:c0:
a1:fc:53:b7:cb:08:5e:c9:96:df:d9:ee:45:b7:26:
3a:5b:97:c0:64:09:c2:7a:7c:c4:4b:9c:61:68:b6:
55:e1:94:60:ea:61:43:a3:91:d2:a2:62:f7:0d:bc:
62:63:52:87:b6:16:55:91:76:ea:1c:87:9c:f8:82:
aa:c9:08:63:44:2b:d1:e9:87:84:be:9c:fb:3c:40:
85:32:8d:ac:8c:64:a9:92:b0:24:5e:b7:d6:01:c6:
84:e4:68:b7:f8:10:51:91:c0:fa:87:01:99:bc:bd:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:66:0C:CC:1A:CB:C2:E3:02:2D:FC:C1:E9:57:B3:A5:33:FC:E9
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:eb:5b:7a:14:60:72:d6:7d:77:8d:bb:6f:ac:be:0c:89:
df:bf:68:73:41:ed:30:35:cd:32:af:2d:f4:48:be:21:d6:d2:
30:40:89:f1:6a:05:7c:76:6f:13:75:12:90:d0:76:e1:07:a0:
41:e5:ab:71:15:7b:e9:94:df:c2:45:4b:27:58:b1:d1:40:e4:
de:6a:ef:37:43:cb:7f:1d:ee:86:8c:0d:08:ce:03:dd:4b:f0:
cb:3e:51:8b:ee:e0:a4:9c:b2:aa:bd:57:fb:ed:4e:7f:20:1b:
76:32:5a:bd:3b:a4:8b:33:9a:ce:97:50:35:44:b4:b4:57:2f:
a6:86:af:59:65:cf:ee:29:a3:87:ee:7f:b3:6e:05:27:43:f5:
6f:c6:79:61:47:6b:9c:1e:d3:92:26:7e:0c:38:60:90:df:c1:
d7:13:e0:ee:5f:2d:7e:30:09:2b:9e:64:b7:cf:b6:f0:3a:e4:
aa:8a:c0:46:d3:5a:90:e8:b1:32:31:fd:73:8f:a2:99:5f:62:
64:a6:0a:b2:74:75:e9:40:a9:f7:50:70:ce:44:22:74:ec:a1:
e9:ac:1b:50:24:4f:d8:00:69:8e:73:9f:4e:58:35:cd:c6:28:
72:0a:38:67:ed:69:d9:aa:6f:8b:2a:89:9e:21:21:10:9f:e9:
75:8e:49:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDw6DzDyysngnR4rfEOAPhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy
YTg2ZDAwHhcNMjYwOTMwMDYwMjI2WhcNMjYxMDAxMDYwMjI2WjAzMTEwLwYDVQQD
EygxMThiNjYwY2NjMWFjYmMyZTMwMjJkZmNjMWU5NTdiM2E1MzNmY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubBPWX0C78YG39b4PfyA+C2B9dGA
x7CeXSRq1PSGmMy8+LJN68ryvyUyZ+9ElD6vX7rT5n9ljz6pIewmIinD+2kg8Ug6
09fe8M+k0YwuYNA3pzoI9yq2FxcWc4R+7HOm2QlXLRZBxS0W8idRCjnaQsghkjjc
QPAW0h/dE0NF4bQ6TM1MT6mbSJlKBrPMB/OVrIHLTMCh/FO3ywheyZbf2e5FtyY6
W5fAZAnCenzES5xhaLZV4ZRg6mFDo5HSomL3DbxiY1KHthZVkXbqHIec+IKqyQhj
RCvR6YeEvpz7PECFMo2sjGSpkrAkXrfWAcaE5Gi3+BBRkcD6hwGZvL227QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGLZgzMGsvC4wIt/MHpV7OlM/zpMB8GA1UdIwQY
MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt
YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3
LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj3rW3oU
YHLWfXeNu2+svgyJ379oc0HtMDXNMq8t9Ei+IdbSMECJ8WoFfHZvE3USkNB24Qeg
QeWrcRV76ZTfwkVLJ1ix0UDk3mrvN0PLfx3uhowNCM4D3Uvwyz5Ri+7gpJyyqr1X
++1OfyAbdjJavTukizOazpdQNUS0tFcvpoavWWXP7imjh+5/s24FJ0P1b8Z5YUdr
nB7TkiZ+DDhgkN/B1xPg7l8tfjAJK55kt8+28DrkqorARtNakOixMjH9c4+imV9i
ZKYKsnR16UCp91BwzkQidOyh6awbUCRP2ABpjnOfTlg1zcYocgo4Z+1p2apviyqJ
niEhEJ/pdY5JqA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 14:26:42 2026 by rpki-client