Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: wVVLLeHxiI3siFeUS+N+sIFJif1eRZGUuqyiQNLzqg0=
Subject key identifier: 7A:A5:E1:81:52:EB:3B:71:B5:0F:05:7B:02:8E:10:42:45:97:1E:32
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01A0DD29FC11C5A72436C0A76BDAFB97B970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 10:01:51 +0000
Manifest this update: Sat 26 Sep 2026 10:01:51 +0000
Manifest next update: Sun 27 Sep 2026 10:01:51 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: tnlOaXFAPfA6oUEl2v1tx9fETa/KdUDnlV9NOofqivA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:fc:11:c5:a7:24:36:c0:a7:6b:da:fb:97:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Sep 26 10:01:51 2026 GMT
Not After : Sep 27 10:01:51 2026 GMT
Subject: CN=7aa5e18152eb3b71b50f057b028e104245971e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:e6:5b:33:3e:d4:34:01:b1:3d:f0:c1:52:
ba:57:3a:c2:9d:a7:bf:88:32:ac:57:ca:b3:4e:6e:
b4:f0:34:57:f1:83:95:b7:ac:2b:de:8f:65:27:6a:
ee:d8:59:e2:4f:32:b0:ac:d2:1a:61:86:3b:33:f9:
45:a7:81:cb:c6:cb:42:f4:8a:e0:01:da:46:07:6b:
a0:bd:ae:3f:ac:5c:00:0a:d5:b1:fa:e0:80:7d:70:
08:d3:a1:5f:85:45:ef:9c:d1:ea:3d:65:07:46:f3:
1f:af:64:90:08:d9:dd:f8:6b:96:50:56:42:22:82:
38:e2:36:9c:9f:10:e7:60:d7:2d:cc:15:24:30:2e:
93:6f:7c:95:ba:f0:ce:7d:e2:29:5e:70:f4:cb:00:
53:1d:7c:70:e6:d9:2c:25:cb:ac:6e:4e:75:33:7e:
dc:7a:5e:00:17:f0:93:8c:24:b3:5c:24:cc:5b:27:
e5:a9:7b:90:5f:83:6d:80:3f:0f:88:0b:e8:24:69:
8b:34:1f:c3:66:8a:89:2e:11:18:fe:eb:23:4f:dc:
be:c0:0a:ec:fd:b1:df:bf:8e:e6:37:81:8e:90:a1:
99:4f:6a:99:7a:63:13:1c:41:97:fe:37:9f:24:ef:
17:5f:5a:05:a2:35:fd:19:c9:e9:fd:04:49:f7:e9:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:E1:81:52:EB:3B:71:B5:0F:05:7B:02:8E:10:42:45:97:1E:32
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:17:aa:8e:0d:e7:85:7c:6a:5a:4c:eb:9a:9b:db:9e:25:
ad:08:d2:67:83:ef:d6:08:9c:d6:0b:02:14:94:3a:d0:71:5e:
2a:40:46:53:48:56:b0:1f:a4:48:ee:a0:65:c2:d3:d1:fb:0a:
b0:03:ca:bf:96:25:14:79:ba:26:21:21:e9:e6:3d:5f:42:f2:
ae:32:57:37:fa:a6:69:7e:23:89:e3:a2:f0:0f:db:ab:da:c5:
0f:84:f7:b2:5b:5d:30:63:2b:f6:f8:fa:d0:41:69:8c:23:bf:
a9:1d:17:61:71:3c:b4:a0:bc:be:c8:e1:ec:21:7d:7a:b4:69:
8d:94:98:67:17:82:65:c4:b2:4a:94:93:cf:14:50:0a:d3:fe:
d2:fc:0a:4d:11:5d:02:be:f5:89:37:d0:5f:63:a5:69:93:6e:
0d:4c:b2:9b:7d:9d:2b:4d:20:6d:d7:e2:3e:f0:1d:e8:8f:8d:
00:7c:d5:3a:cb:d4:a7:36:2b:45:f4:d2:17:69:46:3c:b6:38:
1a:f4:44:17:5d:7f:ad:53:af:7a:43:4c:6c:6f:3a:3b:95:03:
67:aa:2b:00:e2:38:d5:12:ff:27:0d:7a:b2:ee:f4:81:99:08:
be:aa:d2:bb:fb:4e:94:fe:67:2e:9b:48:3f:df:04:d5:b3:d3:
43:72:5d:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKfwRxackNsCna9r7l7lwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4
MzdlNDAwHhcNMjYwOTI2MTAwMTUxWhcNMjYwOTI3MTAwMTUxWjAzMTEwLwYDVQQD
Eyg3YWE1ZTE4MTUyZWIzYjcxYjUwZjA1N2IwMjhlMTA0MjQ1OTcxZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkfmWzM+1DQBsT3wwVK6VzrCnae/
iDKsV8qzTm608DRX8YOVt6wr3o9lJ2ru2FniTzKwrNIaYYY7M/lFp4HLxstC9Irg
AdpGB2ugva4/rFwACtWx+uCAfXAI06FfhUXvnNHqPWUHRvMfr2SQCNnd+GuWUFZC
IoI44jacnxDnYNctzBUkMC6Tb3yVuvDOfeIpXnD0ywBTHXxw5tksJcusbk51M37c
el4AF/CTjCSzXCTMWyflqXuQX4NtgD8PiAvoJGmLNB/DZoqJLhEY/usjT9y+wArs
/bHfv47mN4GOkKGZT2qZemMTHEGX/jefJO8XX1oFojX9Gcnp/QRJ9+mM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHql4YFS6ztxtQ8FewKOEEJFlx4yMB8GA1UdIwQY
MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt
MTQ2MDVkYjU0M2QwLzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw
LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI4Xqo4N
54V8alpM65qb254lrQjSZ4Pv1gic1gsCFJQ60HFeKkBGU0hWsB+kSO6gZcLT0fsK
sAPKv5YlFHm6JiEh6eY9X0LyrjJXN/qmaX4jieOi8A/bq9rFD4T3sltdMGMr9vj6
0EFpjCO/qR0XYXE8tKC8vsjh7CF9erRpjZSYZxeCZcSySpSTzxRQCtP+0vwKTRFd
Ar71iTfQX2OlaZNuDUyym32dK00gbdfiPvAd6I+NAHzVOsvUpzYrRfTSF2lGPLY4
GvREF11/rVOvekNMbG86O5UDZ6orAOI41RL/Jw16su70gZkIvqrSu/tOlP5nLptI
P98E1bPTQ3JdsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:38 2026 by rpki-client