Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: jKf8hv38W0S3iG3+xliwJ/BeJKBC2f0s4WVaYOJ9iBc=
Subject key identifier: 50:26:7E:A7:0B:B5:1E:1C:19:46:EC:09:DC:7C:97:00:E8:3C:4C:8F
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 01A0D124883E4B54F08C56B507B527D1CB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1797
Signing time: Thu 24 Sep 2026 02:00:27 +0000
Manifest this update: Thu 24 Sep 2026 02:00:27 +0000
Manifest next update: Fri 25 Sep 2026 02:00:27 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: SWZLVCX42ATzbjOkRbGp2AU1MuNrfZtsPvDKzobqXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:88:3e:4b:54:f0:8c:56:b5:07:b5:27:d1:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Sep 24 02:00:27 2026 GMT
Not After : Sep 25 02:00:27 2026 GMT
Subject: CN=50267ea70bb51e1c1946ec09dc7c9700e83c4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:83:bc:e4:35:96:43:59:a0:97:db:a5:c6:23:
67:a2:ab:55:b9:94:81:3a:32:16:c9:58:b8:75:c2:
d8:9c:7a:bf:db:d6:29:ae:a8:09:a0:cc:aa:6e:a9:
3d:39:2b:b5:2f:df:87:d5:51:1d:b8:ec:87:a7:3a:
31:3b:ce:c8:b0:70:e7:ea:45:f7:61:5c:bb:23:cd:
85:0a:8d:a2:ad:47:a7:a2:1b:f4:4d:e0:6a:93:3e:
62:e7:a3:e8:7c:ea:b3:74:33:2c:d7:81:8d:4f:9d:
90:45:bb:0c:cb:e3:61:3b:09:fc:6f:c4:9a:c4:80:
a2:f8:ce:fa:94:14:35:26:ff:af:6c:52:57:f4:d1:
45:93:0a:a3:d8:38:25:b0:7e:0f:cf:39:92:25:ef:
9c:a7:c6:c6:a8:5d:ab:f7:f1:34:d7:a1:88:e8:10:
b5:ec:32:7d:0d:1b:e9:e9:ad:4b:ad:44:14:26:c2:
8c:79:12:9d:0b:f1:9d:e7:4a:e9:88:7d:e9:c6:a3:
ff:bf:f4:c9:e7:11:a3:af:1b:6a:c8:2b:63:57:50:
6a:99:2d:09:c6:6b:49:f7:12:47:1c:b3:97:c8:a1:
40:87:64:49:38:08:eb:cd:fd:77:c9:55:5a:17:46:
66:1f:83:0c:36:e1:e0:75:94:16:d2:6a:c9:93:82:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:7E:A7:0B:B5:1E:1C:19:46:EC:09:DC:7C:97:00:E8:3C:4C:8F
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4f:f9:62:0a:19:a7:8a:58:39:3d:3d:c3:80:ae:f2:01:8d:
2c:94:4a:53:e9:ba:9b:c4:ec:cf:2f:5b:60:55:32:c9:4e:b4:
f2:c3:ef:bc:19:96:c0:06:14:14:a1:d0:14:c4:be:8d:e3:33:
45:c5:d8:c8:7c:1f:e3:10:12:5b:ac:42:53:15:61:a9:68:14:
40:09:96:09:29:54:51:a7:b4:d1:14:66:5a:4e:ba:cc:9f:d4:
2d:5a:5b:dd:85:d7:ae:9e:be:c0:84:a3:54:c7:ba:d9:ed:1c:
e6:f5:13:13:8d:ed:62:14:36:2d:cf:e4:5f:dd:bf:d8:1a:89:
51:55:67:1d:52:f1:41:ac:5e:97:cb:45:93:2a:2f:5b:5a:74:
7c:9a:6a:20:30:d1:8c:ee:3c:dd:a1:a2:f7:1a:b3:17:0c:ed:
b3:54:7d:e4:e7:55:78:d9:e1:b0:3c:30:ab:0d:a1:37:7b:20:
af:d1:8e:dd:41:da:c4:0b:0b:40:ef:1c:13:7f:82:07:bd:a8:
78:96:c9:3d:d3:d4:d4:a9:db:81:7b:ad:3f:7d:73:d8:38:da:
4e:55:f2:ab:22:00:38:63:9b:74:90:81:32:e5:48:d9:f1:61:
92:b0:0c:ae:dd:05:fe:c9:15:d9:c1:cc:03:03:2d:d1:b1:24:
2d:a4:c7:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJIg+S1TwjFa1B7Un0csyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjYwOTI0MDIwMDI3WhcNMjYwOTI1MDIwMDI3WjAzMTEwLwYDVQQD
Eyg1MDI2N2VhNzBiYjUxZTFjMTk0NmVjMDlkYzdjOTcwMGU4M2M0YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/IO85DWWQ1mgl9ulxiNnoqtVuZSB
OjIWyVi4dcLYnHq/29YprqgJoMyqbqk9OSu1L9+H1VEduOyHpzoxO87IsHDn6kX3
YVy7I82FCo2irUenohv0TeBqkz5i56PofOqzdDMs14GNT52QRbsMy+NhOwn8b8Sa
xICi+M76lBQ1Jv+vbFJX9NFFkwqj2DglsH4PzzmSJe+cp8bGqF2r9/E016GI6BC1
7DJ9DRvp6a1LrUQUJsKMeRKdC/Gd50rpiH3pxqP/v/TJ5xGjrxtqyCtjV1BqmS0J
xmtJ9xJHHLOXyKFAh2RJOAjrzf13yVVaF0ZmH4MMNuHgdZQW0mrJk4Jo8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAmfqcLtR4cGUbsCdx8lwDoPEyPMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0/5YgoZ
p4pYOT09w4Cu8gGNLJRKU+m6m8Tszy9bYFUyyU608sPvvBmWwAYUFKHQFMS+jeMz
RcXYyHwf4xASW6xCUxVhqWgUQAmWCSlUUae00RRmWk66zJ/ULVpb3YXXrp6+wISj
VMe62e0c5vUTE43tYhQ2Lc/kX92/2BqJUVVnHVLxQaxel8tFkyovW1p0fJpqIDDR
jO483aGi9xqzFwzts1R95OdVeNnhsDwwqw2hN3sgr9GO3UHaxAsLQO8cE3+CB72o
eJbJPdPU1KnbgXutP31z2DjaTlXyqyIAOGObdJCBMuVI2fFhkrAMrt0F/skV2cHM
AwMt0bEkLaTHVA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:51:31 2026 by rpki-client