Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: KBK0dBRQ+lQfHoitaZqbfk+4iWMQ7Sv++MPQlclws2g=
Subject key identifier: A5:1A:86:7A:97:5D:F1:68:29:E5:03:1A:CA:4A:3F:16:4C:DA:2F:70
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01A0D5DE2F2C2375FD98F44258EED5428771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1234
Signing time: Fri 25 Sep 2026 00:01:43 +0000
Manifest this update: Fri 25 Sep 2026 00:01:43 +0000
Manifest next update: Sat 26 Sep 2026 00:01:43 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: WN5hT4fzlETf+FvXx0lyxf+pfJ22013jmYYymLgFch8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:2f:2c:23:75:fd:98:f4:42:58:ee:d5:42:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Sep 25 00:01:43 2026 GMT
Not After : Sep 26 00:01:43 2026 GMT
Subject: CN=a51a867a975df16829e5031aca4a3f164cda2f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:a6:34:a1:35:2b:98:8c:f6:97:85:ce:a5:
f4:32:10:7d:8a:d2:bc:cb:54:b9:12:a8:4c:85:5f:
5c:20:2e:d5:ec:09:5e:18:c5:5f:47:24:a5:00:11:
8e:79:0c:08:fd:e2:0a:a0:48:91:27:86:18:15:73:
7a:41:de:72:10:c2:2c:02:0b:12:93:d9:23:cf:98:
2a:72:c5:0c:73:8d:14:29:02:ec:9f:60:fb:ca:42:
51:ed:0b:ae:8c:73:db:b7:98:21:3b:0a:99:a2:db:
8f:96:d8:cd:38:16:a3:5c:37:b8:2e:79:3a:f4:0b:
b2:a3:08:47:f0:1f:2d:5e:02:fb:db:02:ee:86:a6:
6d:d3:fb:07:62:6f:51:20:90:38:fd:d5:31:e8:70:
26:3d:7d:93:c2:b9:d2:d8:4b:4d:7d:2d:5c:b7:79:
0e:fa:2f:2f:8c:2a:38:cd:49:9a:ea:6e:8f:35:72:
03:5a:52:45:50:75:28:ed:56:f4:ff:e0:36:c3:89:
2b:45:41:b6:1d:61:b7:7f:65:d3:56:cd:e1:a4:6d:
02:7d:3f:a5:5a:10:a5:56:ea:63:e4:2b:2e:49:75:
6b:9b:f5:e3:e0:e9:23:2e:fc:8d:e3:ed:df:bc:c7:
6c:14:c8:7d:13:3c:60:fa:eb:79:6c:b3:f6:90:6f:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:86:7A:97:5D:F1:68:29:E5:03:1A:CA:4A:3F:16:4C:DA:2F:70
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:50:89:fe:7c:99:a9:31:38:d9:76:ad:4b:de:68:da:45:
1b:07:6f:97:d1:dc:00:4f:28:ee:39:da:5b:3b:34:92:85:29:
4f:c0:ef:90:36:bc:c5:58:e6:af:87:4f:d8:45:43:d5:95:14:
ca:52:4d:65:f6:b0:35:c2:32:ec:68:7c:b2:59:48:2f:f0:70:
17:86:6c:a3:b6:f7:b8:23:91:01:2a:50:68:ff:72:08:a0:b7:
d3:9f:b5:a6:19:47:4d:e1:7b:94:02:97:a8:c7:3f:7c:c0:b6:
6e:6e:af:4f:41:f5:cf:dc:73:92:23:bc:0f:aa:1b:a8:1c:36:
d1:f9:50:ea:cb:9e:80:dd:ad:19:e1:08:3f:06:67:f1:40:43:
aa:0e:58:03:e0:3f:20:83:89:b7:3f:bc:e0:50:93:dd:1a:ea:
75:c4:21:33:4b:54:c5:14:41:d3:97:4c:f8:91:c7:1c:0d:d7:
71:44:61:e3:01:ca:c9:1b:c8:28:80:77:58:fe:f5:ba:fe:96:
40:6f:45:ed:34:3f:68:46:f8:c0:4b:4c:a0:09:66:5f:82:a2:
0e:eb:17:bf:ee:e9:56:8d:1e:c7:41:87:f7:bb:5e:b8:4b:5f:
16:77:7f:82:69:18:fb:9b:b3:51:db:f2:38:2b:fc:41:b8:36:
45:88:ca:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3i8sI3X9mPRCWO7VQodxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjYwOTI1MDAwMTQzWhcNMjYwOTI2MDAwMTQzWjAzMTEwLwYDVQQD
EyhhNTFhODY3YTk3NWRmMTY4MjllNTAzMWFjYTRhM2YxNjRjZGEyZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWmmNKE1K5iM9peFzqX0MhB9itK8
y1S5EqhMhV9cIC7V7AleGMVfRySlABGOeQwI/eIKoEiRJ4YYFXN6Qd5yEMIsAgsS
k9kjz5gqcsUMc40UKQLsn2D7ykJR7QuujHPbt5ghOwqZotuPltjNOBajXDe4Lnk6
9AuyowhH8B8tXgL72wLuhqZt0/sHYm9RIJA4/dUx6HAmPX2TwrnS2EtNfS1ct3kO
+i8vjCo4zUma6m6PNXIDWlJFUHUo7Vb0/+A2w4krRUG2HWG3f2XTVs3hpG0CfT+l
WhClVupj5CsuSXVrm/Xj4OkjLvyN4+3fvMdsFMh9Ezxg+ut5bLP2kG9vAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUahnqXXfFoKeUDGspKPxZM2i9wMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFZQif58
makxONl2rUveaNpFGwdvl9HcAE8o7jnaWzs0koUpT8DvkDa8xVjmr4dP2EVD1ZUU
ylJNZfawNcIy7Gh8sllIL/BwF4Zso7b3uCORASpQaP9yCKC305+1phlHTeF7lAKX
qMc/fMC2bm6vT0H1z9xzkiO8D6obqBw20flQ6suegN2tGeEIPwZn8UBDqg5YA+A/
IIOJtz+84FCT3RrqdcQhM0tUxRRB05dM+JHHHA3XcURh4wHKyRvIKIB3WP71uv6W
QG9F7TQ/aEb4wEtMoAlmX4KiDusXv+7pVo0ex0GH97teuEtfFnd/gmkY+5uzUdvy
OCv8Qbg2RYjKnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:58:05 2026 by rpki-client