Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: OKHH+fCcy/n56CqPphm3qDj4QuJpeEXGpVWhU7hzrA4=
Subject key identifier: AC:68:AD:14:9B:0C:B7:BE:CB:C5:66:8B:B4:45:10:B4:A1:71:1E:78
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 01A0E106C9A00653B1B29B43FE74E3471B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 07C8
Signing time: Sun 27 Sep 2026 04:01:53 +0000
Manifest this update: Sun 27 Sep 2026 04:01:53 +0000
Manifest next update: Mon 28 Sep 2026 04:01:53 +0000
Files and hashes: 1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: VDDsw9NOc4k6OYsncIvedCAUA97s5QcDpxXO7hdz8kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:c9:a0:06:53:b1:b2:9b:43:fe:74:e3:47:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Sep 27 04:01:53 2026 GMT
Not After : Sep 28 04:01:53 2026 GMT
Subject: CN=ac68ad149b0cb7becbc5668bb44510b4a1711e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:ee:9d:8c:57:8a:b4:5d:b2:4f:25:82:24:
da:f5:f0:f8:eb:72:00:63:2e:fc:6b:43:01:03:6b:
c9:19:a0:fc:06:4f:7d:03:d6:ce:fc:ff:23:e6:33:
be:06:2c:04:cf:cc:5d:89:71:fc:9e:08:b4:77:70:
7f:29:b7:9f:c0:6d:7e:3c:ca:1e:f6:58:52:83:1b:
a6:de:ba:4b:00:b0:72:0a:15:7a:55:4e:ff:c6:6a:
84:a7:1d:30:40:3d:4a:4a:23:da:c7:e3:3f:61:65:
53:5d:e4:1c:73:fa:47:74:15:ff:aa:e0:5d:6c:27:
23:d3:62:b2:d7:ca:c8:a4:7b:dc:58:b7:4b:ed:23:
22:4f:88:24:7c:6e:4e:eb:02:42:25:a1:02:47:f6:
35:d1:b0:a0:2d:9f:6b:6a:7a:f0:6c:89:5e:45:66:
ac:cb:86:c8:80:a8:56:24:95:6a:76:f4:4f:da:49:
13:b6:9a:cc:10:c0:c3:70:33:43:e3:d6:84:d9:f5:
a1:a0:6d:20:f2:18:82:f7:c5:8f:29:b0:3d:2f:7a:
43:b2:a9:2b:7a:2e:89:5d:61:25:e4:7a:1e:f6:d2:
dd:94:37:d3:60:1a:2c:85:30:bc:39:ad:c2:f5:9f:
58:91:79:04:d5:14:c1:e8:26:c5:86:45:2a:13:69:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:AD:14:9B:0C:B7:BE:CB:C5:66:8B:B4:45:10:B4:A1:71:1E:78
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:82:2d:8c:ac:56:5f:bb:66:47:45:47:d7:dc:a0:1c:1b:
fe:18:c1:ae:da:80:c6:21:75:8c:c3:05:ba:db:d0:03:39:3f:
eb:c0:86:41:78:eb:07:dd:06:17:74:e2:b8:a0:db:f9:33:cd:
f0:bb:1e:73:ec:5c:45:b4:72:cf:af:81:7c:88:e1:02:9d:7c:
9f:39:5b:35:15:ab:64:2f:7c:30:48:06:30:0a:8b:60:0c:29:
85:ac:b8:36:63:54:69:10:6d:6b:86:2e:92:9e:f7:80:23:bc:
fc:a2:5e:ab:6d:2b:40:7a:80:a3:6e:61:6c:35:0c:0c:8c:39:
5e:4f:45:2f:c9:1f:19:d9:9a:57:d9:3f:c3:35:c2:b9:81:a7:
2c:5c:c1:09:ad:00:d6:ac:1c:e6:2b:3d:3f:23:62:4d:dd:b2:
ac:af:61:55:e7:b6:9d:b8:db:c4:9f:ad:71:3d:5a:5a:61:65:
b4:91:98:75:88:2b:7d:18:0d:79:cc:2b:52:80:21:ef:43:78:
f9:30:08:b4:f0:87:c9:79:45:a2:a0:59:6c:f5:e9:04:15:57:
71:eb:de:6f:5b:0e:52:de:1f:30:e6:07:56:7a:cf:9b:86:a5:
e9:bb:ae:8a:b4:fd:77:75:ca:a9:e9:65:fe:99:d8:c1:b9:97:
10:bf:fb:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhBsmgBlOxsptD/nTjRxscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0
NWQyNzMwHhcNMjYwOTI3MDQwMTUzWhcNMjYwOTI4MDQwMTUzWjAzMTEwLwYDVQQD
EyhhYzY4YWQxNDliMGNiN2JlY2JjNTY2OGJiNDQ1MTBiNGExNzExZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SHunYxXirRdsk8lgiTa9fD463IA
Yy78a0MBA2vJGaD8Bk99A9bO/P8j5jO+BiwEz8xdiXH8ngi0d3B/KbefwG1+PMoe
9lhSgxum3rpLALByChV6VU7/xmqEpx0wQD1KSiPax+M/YWVTXeQcc/pHdBX/quBd
bCcj02Ky18rIpHvcWLdL7SMiT4gkfG5O6wJCJaECR/Y10bCgLZ9ranrwbIleRWas
y4bIgKhWJJVqdvRP2kkTtprMEMDDcDND49aE2fWhoG0g8hiC98WPKbA9L3pDsqkr
ei6JXWEl5Hoe9tLdlDfTYBoshTC8Oa3C9Z9YkXkE1RTB6CbFhkUqE2kTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxorRSbDLe+y8Vmi7RFELShcR54MB8GA1UdIwQY
MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt
MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz
LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjteCLYys
Vl+7ZkdFR9fcoBwb/hjBrtqAxiF1jMMFutvQAzk/68CGQXjrB90GF3TiuKDb+TPN
8Lsec+xcRbRyz6+BfIjhAp18nzlbNRWrZC98MEgGMAqLYAwphay4NmNUaRBta4Yu
kp73gCO8/KJeq20rQHqAo25hbDUMDIw5Xk9FL8kfGdmaV9k/wzXCuYGnLFzBCa0A
1qwc5is9PyNiTd2yrK9hVee2nbjbxJ+tcT1aWmFltJGYdYgrfRgNecwrUoAh70N4
+TAItPCHyXlFoqBZbPXpBBVXceveb1sOUt4fMOYHVnrPm4al6buuirT9d3XKqell
/pnYwbmXEL/7+g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:07:35 2026 by rpki-client