Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier: KFIi5SaCVy/eIAMUePc8TTyI9HvvaQ0rdUcGYQyUSZM=
Subject key identifier: 3B:71:DD:AA:63:5D:20:EC:A4:6F:59:E7:16:C9:AE:3A:5D:10:E9:70
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 01A0C6D81990A7907D1A68EAB3537406C218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 02:00:45 +0000
Manifest this update: Tue 22 Sep 2026 02:00:45 +0000
Manifest next update: Wed 23 Sep 2026 02:00:45 +0000
Files and hashes: 1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: tIGqtNX9fMj0OSTLPMeUJGAKi9DImNMmGnKWMVvlB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:19:90:a7:90:7d:1a:68:ea:b3:53:74:06:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Sep 22 02:00:45 2026 GMT
Not After : Sep 23 02:00:45 2026 GMT
Subject: CN=3b71ddaa635d20eca46f59e716c9ae3a5d10e970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:0f:ad:39:1c:a6:c1:98:7c:fd:b8:e3:1b:
b7:27:bb:5a:15:bf:24:09:6d:11:3c:55:0d:a3:ef:
34:21:60:5c:06:7c:ba:64:3b:d7:4c:7e:e7:69:b6:
b7:42:f0:65:bb:5b:51:d7:33:79:ac:b0:2a:28:2e:
9a:bc:44:59:e4:6a:99:62:50:81:99:31:4d:6f:95:
4e:4d:bd:e5:a5:13:46:18:5a:c0:69:47:16:0c:8e:
40:e0:52:6b:93:fa:0a:47:f5:40:c1:01:f9:4e:91:
19:b8:4d:c5:2b:91:f7:d1:29:aa:fc:1d:39:93:5d:
b4:1e:94:a2:2e:64:b8:83:1b:a6:85:2d:cc:09:d1:
35:73:66:ff:1a:44:02:04:fa:cc:48:0b:94:1b:04:
52:62:40:64:3c:a5:8c:bd:1d:6e:d6:f4:73:ed:a1:
25:82:4f:78:3b:29:75:fd:98:90:64:9e:14:4f:61:
fd:75:ea:87:b4:39:f3:da:b5:ac:71:a2:a4:8e:ac:
cb:83:36:4c:70:4b:57:b7:24:9f:bf:d2:4f:3f:7d:
8e:99:7f:95:6a:5f:f9:09:66:0c:77:f5:4d:46:92:
97:82:ae:57:c0:7d:ee:53:79:17:c5:8c:65:0b:9e:
68:77:0f:c2:8a:79:ff:23:01:81:33:10:3a:5c:f0:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:DD:AA:63:5D:20:EC:A4:6F:59:E7:16:C9:AE:3A:5D:10:E9:70
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:83:f7:09:03:72:7f:95:92:f9:82:bd:2c:de:7f:10:21:
a0:de:4a:b3:c3:44:1c:c7:0d:48:66:59:74:6b:46:36:46:23:
a5:9e:10:76:69:bf:7c:af:98:e7:e5:4e:7a:46:85:10:9f:17:
91:ed:a2:a4:75:c5:92:85:ab:31:19:e9:8b:b7:eb:ca:3d:47:
da:76:a9:fd:c2:51:17:75:a2:a9:c8:2e:73:56:eb:db:82:26:
54:95:40:0c:7b:bf:e5:1a:52:49:32:69:3b:2d:a5:35:b7:e8:
d6:f5:7c:3d:f3:a1:d8:d0:79:da:0c:18:5d:7f:31:e9:40:ed:
27:68:e3:f1:74:58:7b:62:13:86:9d:79:33:a6:c5:45:99:f5:
ed:5e:ff:6e:ea:8c:43:21:b8:08:cd:64:ba:48:ab:5e:be:d5:
f7:8d:bf:9a:1c:54:a6:3f:80:8e:a5:4b:a8:e1:68:63:a7:ab:
e3:0c:26:bf:c6:83:6f:19:5c:27:c2:d2:76:d1:f6:c1:9f:9c:
8f:93:f0:f9:94:dc:ad:a4:bd:a1:21:33:df:42:52:ba:3a:96:
06:eb:f4:a0:33:70:a6:8a:80:3d:8f:21:85:41:02:33:23:61:
b7:aa:34:d0:3e:02:55:5f:c5:8d:02:6d:99:c0:16:36:41:90:
3f:a8:66:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2BmQp5B9Gmjqs1N0BsIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjYwOTIyMDIwMDQ1WhcNMjYwOTIzMDIwMDQ1WjAzMTEwLwYDVQQD
EygzYjcxZGRhYTYzNWQyMGVjYTQ2ZjU5ZTcxNmM5YWUzYTVkMTBlOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BkPrTkcpsGYfP244xu3J7taFb8k
CW0RPFUNo+80IWBcBny6ZDvXTH7naba3QvBlu1tR1zN5rLAqKC6avERZ5GqZYlCB
mTFNb5VOTb3lpRNGGFrAaUcWDI5A4FJrk/oKR/VAwQH5TpEZuE3FK5H30Smq/B05
k120HpSiLmS4gxumhS3MCdE1c2b/GkQCBPrMSAuUGwRSYkBkPKWMvR1u1vRz7aEl
gk94Oyl1/ZiQZJ4UT2H9deqHtDnz2rWscaKkjqzLgzZMcEtXtySfv9JPP32OmX+V
al/5CWYMd/VNRpKXgq5XwH3uU3kXxYxlC55odw/Cinn/IwGBMxA6XPAcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtx3apjXSDspG9Z5xbJrjpdEOlwMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ6D9wkD
cn+VkvmCvSzefxAhoN5Ks8NEHMcNSGZZdGtGNkYjpZ4Qdmm/fK+Y5+VOekaFEJ8X
ke2ipHXFkoWrMRnpi7fryj1H2nap/cJRF3Wiqcguc1br24ImVJVADHu/5RpSSTJp
Oy2lNbfo1vV8PfOh2NB52gwYXX8x6UDtJ2jj8XRYe2IThp15M6bFRZn17V7/buqM
QyG4CM1kukirXr7V942/mhxUpj+AjqVLqOFoY6er4wwmv8aDbxlcJ8LSdtH2wZ+c
j5Pw+ZTcraS9oSEz30JSujqWBuv0oDNwpoqAPY8hhUECMyNht6o00D4CVV/FjQJt
mcAWNkGQP6hm+A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:21:27 2026 by rpki-client