Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: 3LHXrqtMD2uZbBQG+SytsC7GFmLOTqaOJLTqpxZZTH8=
Subject key identifier: 4F:F7:01:82:D0:78:D0:65:0B:ED:9B:19:6C:2D:ED:36:E5:08:D3:C1
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01A128E7F4054D0CFDF1E4B155710C7A8F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1180
Signing time: Sun 11 Oct 2026 03:00:52 +0000
Manifest this update: Sun 11 Oct 2026 03:00:52 +0000
Manifest next update: Mon 12 Oct 2026 03:00:52 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: QT41/10HSAOUlBk3Dk6Aoygp17nOkVDgjMYPLCeZ32o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:f4:05:4d:0c:fd:f1:e4:b1:55:71:0c:7a:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Oct 11 03:00:52 2026 GMT
Not After : Oct 12 03:00:52 2026 GMT
Subject: CN=4ff70182d078d0650bed9b196c2ded36e508d3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:e1:55:76:f8:2c:ef:59:81:27:a9:82:5b:
08:9e:43:34:6a:8d:27:80:cf:60:fc:09:d0:67:26:
40:1d:f3:00:c9:fc:4f:65:71:3f:11:c7:cc:c0:24:
fc:07:53:d3:0b:a9:13:33:90:53:09:18:f5:17:55:
98:40:69:5a:94:3b:ed:6c:89:1d:b4:d8:cc:74:7e:
7a:e1:c9:b5:1c:d3:c3:95:94:f4:1f:cd:78:be:58:
9e:4d:28:c0:67:52:e8:fd:04:51:bb:55:3f:c3:5c:
3d:77:45:a7:5d:8c:83:c3:ac:aa:94:56:b2:d9:a8:
2a:f7:69:68:b9:54:1b:49:b7:0c:f3:2e:17:3a:14:
2b:44:84:9f:a5:5d:db:f2:8d:ec:68:7d:80:e4:02:
fa:41:cd:0c:c4:4a:b7:1e:b0:93:3b:93:48:a4:0b:
2c:96:4b:38:d9:84:9c:a9:df:3f:1d:bf:8f:45:8b:
74:06:69:2f:08:3d:46:7d:fc:e9:31:9f:84:10:4a:
47:09:cb:9f:72:d7:4e:70:d2:35:35:e8:6d:5b:a6:
08:02:c9:bd:82:49:36:31:55:a4:76:20:90:23:86:
4e:36:13:51:6c:f4:e2:45:b8:7e:f0:61:aa:69:9b:
ab:9a:de:69:3b:fb:96:08:4d:11:94:ed:9d:e0:89:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:01:82:D0:78:D0:65:0B:ED:9B:19:6C:2D:ED:36:E5:08:D3:C1
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fa:a6:2d:9e:ca:32:28:58:e3:72:d1:df:57:d8:91:90:27:
a2:e4:bd:6e:68:ef:8d:29:3c:11:f3:d4:91:d4:77:4d:57:87:
22:45:c4:fa:d2:7e:d2:bd:66:39:27:6d:e2:f6:ee:a5:1d:b1:
84:05:db:d2:71:06:74:54:3a:36:72:9d:28:46:b7:99:e8:b0:
eb:3f:ee:10:c9:b0:16:c4:6f:6b:82:6d:fb:9b:39:9b:d4:05:
e8:df:ed:b5:47:d9:f1:e2:13:d5:88:81:03:ee:0b:8e:72:aa:
50:43:6e:5b:d7:ac:ef:4c:32:a8:c8:c8:27:9c:03:bf:95:d3:
5b:6c:49:08:99:67:64:26:3f:11:00:19:c7:4b:5d:fc:45:91:
44:ab:d0:24:a4:9e:61:31:5f:ac:16:68:34:5f:ac:c0:3d:9e:
1c:f2:55:6c:2a:da:78:b4:c7:f1:36:ba:05:09:2e:78:d7:28:
8d:5d:b2:9d:4a:bd:d2:73:8d:5f:46:f2:d6:77:ac:4c:c5:70:
1a:3f:a5:90:a0:e9:d3:9c:58:5a:b9:74:72:b5:6c:9d:aa:0b:
4d:ef:a1:56:ea:8e:5d:83:f5:41:91:f2:74:e8:f0:3c:34:d4:
65:f6:9d:a1:88:4e:6d:a1:4a:e6:11:1e:3e:31:87:bb:66:87:
59:b6:5d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo5/QFTQz98eSxVXEMeo8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjYxMDExMDMwMDUyWhcNMjYxMDEyMDMwMDUyWjAzMTEwLwYDVQQD
Eyg0ZmY3MDE4MmQwNzhkMDY1MGJlZDliMTk2YzJkZWQzNmU1MDhkM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstrhVXb4LO9ZgSepglsInkM0ao0n
gM9g/AnQZyZAHfMAyfxPZXE/EcfMwCT8B1PTC6kTM5BTCRj1F1WYQGlalDvtbIkd
tNjMdH564cm1HNPDlZT0H814vlieTSjAZ1Lo/QRRu1U/w1w9d0WnXYyDw6yqlFay
2agq92louVQbSbcM8y4XOhQrRISfpV3b8o3saH2A5AL6Qc0MxEq3HrCTO5NIpAss
lks42YScqd8/Hb+PRYt0BmkvCD1GffzpMZ+EEEpHCcufctdOcNI1NehtW6YIAsm9
gkk2MVWkdiCQI4ZONhNRbPTiRbh+8GGqaZurmt5pO/uWCE0RlO2d4Inb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/3AYLQeNBlC+2bGWwt7TblCNPBMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0/qmLZ7K
MihY43LR31fYkZAnouS9bmjvjSk8EfPUkdR3TVeHIkXE+tJ+0r1mOSdt4vbupR2x
hAXb0nEGdFQ6NnKdKEa3meiw6z/uEMmwFsRva4Jt+5s5m9QF6N/ttUfZ8eIT1YiB
A+4LjnKqUENuW9es70wyqMjIJ5wDv5XTW2xJCJlnZCY/EQAZx0td/EWRRKvQJKSe
YTFfrBZoNF+swD2eHPJVbCraeLTH8Ta6BQkueNcojV2ynUq90nONX0by1nesTMVw
Gj+lkKDp05xYWrl0crVsnaoLTe+hVuqOXYP1QZHydOjwPDTUZfadoYhObaFK5hEe
PjGHu2aHWbZd+A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:19:06 2026 by rpki-client