Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: yg8SW4nNJGUx/xEqo0SQ3mdzqOCKZ4RHsHIHK2T7Eyo=
Subject key identifier: 9F:33:11:62:FE:57:5E:1A:E9:F8:06:B8:0D:46:94:D5:51:EC:00:C1
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01A0E407C35D2B0A974E084C83C266EDCA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0C87
Signing time: Sun 27 Sep 2026 18:01:49 +0000
Manifest this update: Sun 27 Sep 2026 18:01:49 +0000
Manifest next update: Mon 28 Sep 2026 18:01:49 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: viBfI54JeH5Q50UWMpD0C17cE5lk1l/qTCJkXdpTs80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:c3:5d:2b:0a:97:4e:08:4c:83:c2:66:ed:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Sep 27 18:01:49 2026 GMT
Not After : Sep 28 18:01:49 2026 GMT
Subject: CN=9f331162fe575e1ae9f806b80d4694d551ec00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:07:91:60:82:17:66:4b:11:25:60:7a:a0:
bd:d2:dc:1b:5c:00:0d:d9:c6:80:63:de:23:f4:df:
e6:e0:a0:6f:94:34:63:e1:fc:c2:2a:09:8c:9b:18:
1e:ae:97:bd:af:c0:c4:1b:2b:db:99:4c:db:b2:a7:
1b:7f:03:6f:56:ce:8e:0f:46:64:fd:65:d8:d1:56:
fb:e3:a9:f4:aa:ca:a4:f1:a3:d5:eb:56:7a:48:69:
95:2e:fa:1a:0e:92:ee:22:89:5f:c4:53:ce:df:da:
7f:5b:eb:f7:51:84:9a:32:ed:34:69:6b:cc:4a:31:
58:20:98:c5:b3:cc:cd:e8:07:dc:c9:f2:7f:7f:51:
07:10:83:76:2b:a1:e7:8b:12:7e:ff:ef:19:a4:30:
8d:3c:ad:67:81:3a:74:7b:58:e0:7b:ce:ea:23:83:
2c:b2:27:d6:0d:3d:42:8a:1f:c6:13:75:b0:bb:fe:
3b:e2:81:ec:60:e1:00:04:ca:30:0d:33:d3:25:97:
df:37:57:64:f1:71:e7:69:f7:18:44:3b:4e:ca:af:
f8:f5:f7:e6:44:ec:c6:e0:05:d2:ef:a7:50:d3:c0:
c5:29:b3:e0:5d:55:f5:5b:9f:3e:4a:5f:fe:2a:a2:
b2:78:8c:4f:34:e6:0f:66:14:3d:1b:d2:50:34:1b:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:11:62:FE:57:5E:1A:E9:F8:06:B8:0D:46:94:D5:51:EC:00:C1
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:a6:7f:e5:ad:f7:67:d9:43:d7:64:00:29:ac:de:20:16:8b:
4d:57:7e:15:4c:ff:78:9d:67:1d:87:26:1c:bc:8b:ae:1a:d8:
70:a3:74:31:66:0b:5e:1c:d5:e3:d7:43:1c:bd:34:31:a8:4e:
5e:2d:a1:9a:c6:f2:08:25:19:b4:52:10:a5:70:b4:31:a0:eb:
b9:8e:23:9b:38:0d:b2:e5:3b:48:84:4a:42:f6:c3:d7:33:e5:
79:ea:5c:3c:36:f1:a3:54:ff:36:8a:db:19:df:be:01:26:c4:
66:6a:c3:5e:6b:cc:9f:7f:48:42:80:f8:d0:36:f8:b7:65:77:
17:9d:c9:a5:ea:2d:51:36:e1:77:c8:df:25:a6:0a:9a:dd:24:
20:70:56:a3:82:77:b3:0b:6f:0a:ac:f0:4e:40:4c:0e:c6:0c:
ba:c3:a9:f1:06:d9:d3:f8:75:5f:7b:db:8d:13:ca:f4:48:f7:
3c:e0:44:23:4c:83:43:0f:f4:d2:76:59:34:3c:62:6e:1c:ac:
fb:9d:2b:34:f3:76:a0:c2:1d:8b:34:ab:47:5d:d1:04:ed:0e:
a4:38:bd:c8:cd:b6:40:9b:8e:1f:ee:c9:de:b8:44:59:e0:31:
39:29:72:a8:09:95:c2:c2:0e:a1:40:6e:03:2b:d9:b4:b7:ef:
71:bc:e7:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkB8NdKwqXTghMg8Jm7cpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh
NTU2ZjQwHhcNMjYwOTI3MTgwMTQ5WhcNMjYwOTI4MTgwMTQ5WjAzMTEwLwYDVQQD
Eyg5ZjMzMTE2MmZlNTc1ZTFhZTlmODA2YjgwZDQ2OTRkNTUxZWMwMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnsHkWCCF2ZLESVgeqC90twbXAAN
2caAY94j9N/m4KBvlDRj4fzCKgmMmxgerpe9r8DEGyvbmUzbsqcbfwNvVs6OD0Zk
/WXY0Vb746n0qsqk8aPV61Z6SGmVLvoaDpLuIolfxFPO39p/W+v3UYSaMu00aWvM
SjFYIJjFs8zN6AfcyfJ/f1EHEIN2K6HnixJ+/+8ZpDCNPK1ngTp0e1jge87qI4Ms
sifWDT1Cih/GE3Wwu/474oHsYOEABMowDTPTJZffN1dk8XHnafcYRDtOyq/49ffm
ROzG4AXS76dQ08DFKbPgXVX1W58+Sl/+KqKyeIxPNOYPZhQ9G9JQNBtR5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8zEWL+V14a6fgGuA1GlNVR7ADBMB8GA1UdIwQY
MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt
NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw
LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA76Z/5a33
Z9lD12QAKazeIBaLTVd+FUz/eJ1nHYcmHLyLrhrYcKN0MWYLXhzV49dDHL00MahO
Xi2hmsbyCCUZtFIQpXC0MaDruY4jmzgNsuU7SIRKQvbD1zPleepcPDbxo1T/Norb
Gd++ASbEZmrDXmvMn39IQoD40Db4t2V3F53JpeotUTbhd8jfJaYKmt0kIHBWo4J3
swtvCqzwTkBMDsYMusOp8QbZ0/h1X3vbjRPK9Ej3POBEI0yDQw/00nZZNDxibhys
+50rNPN2oMIdizSrR13RBO0OpDi9yM22QJuOH+7J3rhEWeAxOSlyqAmVwsIOoUBu
AyvZtLfvcbzn5w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:52:21 2026 by rpki-client