Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: bjOwcWDBYC1UY9VF+UUM8U/sDCjF5G0MGWNgyduJVys=
Subject key identifier: C6:4F:07:4C:DA:C9:A9:73:C1:0A:DA:65:CC:21:FA:28:5F:C7:FE:BE
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01A1DFB9E08963E507FB3D6DF3EB855AA515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 15:01:03 +0000
Manifest this update: Sun 15 Nov 2026 15:01:03 +0000
Manifest next update: Mon 16 Nov 2026 15:01:03 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: X48AGNE1nJ/BaF9JqcppDMUVaFf05GvAcKZk2TTd0Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:e0:89:63:e5:07:fb:3d:6d:f3:eb:85:5a:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Nov 15 15:01:03 2026 GMT
Not After : Nov 16 15:01:03 2026 GMT
Subject: CN=c64f074cdac9a973c10ada65cc21fa285fc7febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:59:01:96:63:fc:b9:68:cc:88:53:2b:9c:
e3:e4:35:93:51:02:4c:ea:ed:6d:ee:ac:d7:f4:06:
aa:d7:b3:0e:ba:fb:13:9f:5f:02:db:2d:46:84:2e:
8e:69:50:36:c2:ab:1c:94:27:cd:a6:6f:ee:7f:23:
5e:f6:ea:d9:96:9c:7a:0d:32:97:e8:eb:21:70:7d:
6b:62:d3:87:2e:e6:9d:15:d2:f7:30:2d:26:ad:fd:
23:ec:43:a3:00:55:1e:e8:29:c7:0a:ba:9c:29:3a:
b8:e0:18:d7:ed:ac:d1:a4:e8:7f:52:29:5a:cc:7a:
95:fa:77:22:f9:9a:cd:35:76:90:30:de:b4:22:66:
77:e1:99:40:ca:17:1c:a6:67:08:01:b2:20:37:62:
ad:8c:60:fa:89:b2:c4:3c:cb:d5:73:00:75:da:63:
98:45:83:41:91:2b:54:39:ce:87:1e:5a:09:4c:fd:
4a:41:d2:af:e2:f3:2b:44:74:e8:1b:97:2e:bf:42:
9a:90:14:f5:79:cb:46:0a:65:21:1b:ad:13:2e:a4:
f6:dc:cf:11:e0:4a:0d:c7:0b:d0:8d:fb:11:c9:ac:
c1:46:8f:25:c8:e8:b1:64:87:8b:0d:a1:31:61:ca:
13:5d:e5:21:0e:f9:73:b8:c9:d9:48:26:46:1c:4d:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:07:4C:DA:C9:A9:73:C1:0A:DA:65:CC:21:FA:28:5F:C7:FE:BE
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:9b:4c:d5:c7:ec:6a:27:9e:db:f8:6d:f2:10:b9:62:cf:
8c:ed:5b:be:b8:56:84:12:65:1c:b9:d3:d9:72:cf:7e:82:fb:
9e:fc:b1:e3:fd:6e:bb:55:86:99:1e:04:df:96:3a:d7:4e:be:
ad:6b:be:e0:09:e4:ec:92:31:e9:7a:1a:70:d0:aa:1e:78:37:
7a:6e:e9:af:c0:ab:60:36:cf:51:d4:5a:7c:28:a8:34:53:dd:
57:ae:a0:16:39:b9:81:45:da:37:95:a2:5c:2c:5b:e2:60:48:
fd:6a:6e:4d:3b:45:4c:18:37:33:fc:82:82:38:f0:5c:c8:c4:
1c:e6:82:56:70:35:84:c8:77:31:75:cd:a2:7d:f0:8a:d0:22:
d7:91:09:c5:49:41:d1:b2:e5:cb:2c:7c:0f:a2:a6:03:ce:9f:
62:3c:1d:56:31:b0:96:e9:96:2e:ff:fa:4f:06:37:60:2a:65:
11:cd:2e:95:6a:b6:39:0b:7a:0b:72:d9:fd:90:1f:54:75:ea:
ce:44:bf:6b:dd:cf:6d:cf:ca:c4:4c:90:b6:c7:f2:4e:8f:78:
68:38:d7:e4:7a:3e:54:1e:1f:c7:cf:2d:d5:4b:29:e5:d9:f9:
1f:e5:4d:6d:76:ec:d7:7f:33:d9:70:70:9d:26:c4:9d:93:95:
6a:02:40:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfueCJY+UH+z1t8+uFWqUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZmU3MDNkMzc5MGNkYjg1MTRhNjAzZTdhNDVlZTUwZWVm
ZmE5NjIwHhcNMjYxMTE1MTUwMTAzWhcNMjYxMTE2MTUwMTAzWjAzMTEwLwYDVQQD
EyhjNjRmMDc0Y2RhYzlhOTczYzEwYWRhNjVjYzIxZmEyODVmYzdmZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ZZAZZj/LlozIhTK5zj5DWTUQJM
6u1t7qzX9Aaq17MOuvsTn18C2y1GhC6OaVA2wqsclCfNpm/ufyNe9urZlpx6DTKX
6OshcH1rYtOHLuadFdL3MC0mrf0j7EOjAFUe6CnHCrqcKTq44BjX7azRpOh/Uila
zHqV+nci+ZrNNXaQMN60ImZ34ZlAyhccpmcIAbIgN2KtjGD6ibLEPMvVcwB12mOY
RYNBkStUOc6HHloJTP1KQdKv4vMrRHToG5cuv0KakBT1ectGCmUhG60TLqT23M8R
4EoNxwvQjfsRyazBRo8lyOixZIeLDaExYcoTXeUhDvlzuMnZSCZGHE1txwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZPB0zayalzwQraZcwh+ihfx/6+MB8GA1UdIwQY
MBaAFMn+cD03kM24UUpgPnpF7lDu/6liMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWY1d1BUZVF6YmhSU21BLWVrWHVVTzdfcVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80YzNkNWEtYTI3Zi00YjliLTlkMDgt
NzRjOGRhMjk0ZDVjLzEveWY1d1BUZVF6YmhSU21BLWVrWHVVTzdfcVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80YzNkNWEtYTI3Zi00YjliLTlkMDgtNzRjOGRhMjk0ZDVj
LzEveWY1d1BUZVF6YmhSU21BLWVrWHVVTzdfcVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ76bTNXH
7Gonntv4bfIQuWLPjO1bvrhWhBJlHLnT2XLPfoL7nvyx4/1uu1WGmR4E35Y6106+
rWu+4Ank7JIx6XoacNCqHng3em7pr8CrYDbPUdRafCioNFPdV66gFjm5gUXaN5Wi
XCxb4mBI/WpuTTtFTBg3M/yCgjjwXMjEHOaCVnA1hMh3MXXNon3witAi15EJxUlB
0bLlyyx8D6KmA86fYjwdVjGwlumWLv/6TwY3YCplEc0ulWq2OQt6C3LZ/ZAfVHXq
zkS/a93Pbc/KxEyQtsfyTo94aDjX5Ho+VB4fx88t1Usp5dn5H+VNbXbs138z2XBw
nSbEnZOVagJA2g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:40:54 2026 by rpki-client