Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: 9A7SKUXncy58PCFZ55Xo7pwxhaxRnK8qPYwxdrB2zN4=
Subject key identifier: 17:3E:29:25:09:8F:6F:2A:58:6A:38:A0:84:21:D1:A0:60:8D:55:AE
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 01A0D012A6C813DBC4C4E14165C45CB48596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 05DE
Signing time: Wed 23 Sep 2026 21:01:18 +0000
Manifest this update: Wed 23 Sep 2026 21:01:18 +0000
Manifest next update: Thu 24 Sep 2026 21:01:18 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: a6oYUAs5q4DbMRqqMEsfaujZB7xOJSyA9wbvQh7Fdis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a6:c8:13:db:c4:c4:e1:41:65:c4:5c:b4:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Sep 23 21:01:18 2026 GMT
Not After : Sep 24 21:01:18 2026 GMT
Subject: CN=173e2925098f6f2a586a38a08421d1a0608d55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:ee:97:46:c3:11:a5:89:e8:6a:3e:d5:d4:
db:52:8e:47:e1:e1:0a:7e:77:69:56:ae:14:c0:42:
85:d2:04:ff:2f:a5:7b:22:85:ea:1b:2c:e6:26:41:
09:f3:d4:19:dd:4f:22:62:42:05:6d:6c:5c:49:dc:
22:49:1f:09:99:4d:5e:31:18:d2:42:41:c7:4e:66:
aa:38:53:cb:c4:e4:dc:4e:b2:29:76:33:10:cc:40:
ae:05:5b:9d:a9:80:54:8d:55:e7:f5:7f:ff:05:fd:
de:cc:e5:9d:a5:43:a1:36:27:83:bb:47:97:6c:85:
78:6c:81:7c:f4:7a:ce:ae:3f:e2:f0:ab:23:f8:35:
56:e3:74:55:05:5b:06:f9:0d:b8:4a:3e:48:93:c6:
29:85:02:bd:de:06:98:a9:12:66:aa:5c:ab:a8:5c:
82:08:f0:af:c7:4c:b2:09:cc:b5:83:e1:ec:9e:13:
5a:a3:12:ca:9b:db:c9:5b:26:83:f7:8c:e6:86:b7:
37:61:c2:87:bb:32:ce:db:63:00:66:d5:de:3a:b8:
3d:f9:79:3d:ae:c2:e3:a8:92:88:aa:48:0c:dd:56:
2e:bb:50:b3:21:b3:53:31:30:e4:80:78:88:ae:d8:
ba:da:4e:69:c4:14:2d:6f:aa:ee:8c:8e:49:19:c8:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:29:25:09:8F:6F:2A:58:6A:38:A0:84:21:D1:A0:60:8D:55:AE
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:a2:38:cd:b0:eb:f8:4b:62:44:c0:09:73:e3:e1:fd:64:
81:88:c9:46:75:d3:a3:1a:1d:a3:48:22:df:6b:91:41:a5:79:
f5:d3:c7:ea:29:c6:b4:52:9d:2d:27:97:ca:01:74:aa:03:f0:
6b:05:3f:1f:aa:cc:3c:4d:da:9f:3e:db:28:2f:15:73:c5:e9:
a1:b9:47:34:2f:5a:8e:19:37:1e:7f:6f:4e:32:83:49:53:c0:
fa:8e:a2:24:84:ce:35:5c:73:c0:fe:2d:45:e3:8b:d4:ec:44:
dc:6d:dc:a7:77:fa:5d:9a:57:6e:df:f3:25:ac:5a:44:b4:5a:
04:02:b8:12:55:1d:25:f1:a6:0c:ee:57:29:c3:48:2d:3a:03:
b7:89:89:b4:f0:aa:c8:99:91:4c:45:bd:ac:d4:bd:a5:36:ad:
73:5a:fe:74:64:4f:72:52:dd:fc:ab:a3:73:ea:bc:f2:f2:3e:
d0:e0:56:41:05:a3:d0:64:7b:eb:c2:4a:84:a0:98:ba:fe:ce:
01:c3:38:0c:f6:77:e3:cd:65:74:d9:51:3b:0d:11:7a:74:fd:
a1:1c:93:b0:ad:fd:e9:1e:ad:ca:68:45:0b:0b:7a:4a:6b:5c:
a0:57:c1:ab:08:41:33:3d:b1:52:c8:9b:12:af:48:67:a3:c5:
a8:1f:6d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEqbIE9vExOFBZcRctIWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5
Mjk1ZDcwHhcNMjYwOTIzMjEwMTE4WhcNMjYwOTI0MjEwMTE4WjAzMTEwLwYDVQQD
EygxNzNlMjkyNTA5OGY2ZjJhNTg2YTM4YTA4NDIxZDFhMDYwOGQ1NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Lul0bDEaWJ6Go+1dTbUo5H4eEK
fndpVq4UwEKF0gT/L6V7IoXqGyzmJkEJ89QZ3U8iYkIFbWxcSdwiSR8JmU1eMRjS
QkHHTmaqOFPLxOTcTrIpdjMQzECuBVudqYBUjVXn9X//Bf3ezOWdpUOhNieDu0eX
bIV4bIF89HrOrj/i8Ksj+DVW43RVBVsG+Q24Sj5Ik8YphQK93gaYqRJmqlyrqFyC
CPCvx0yyCcy1g+HsnhNaoxLKm9vJWyaD94zmhrc3YcKHuzLO22MAZtXeOrg9+Xk9
rsLjqJKIqkgM3VYuu1CzIbNTMTDkgHiIrti62k5pxBQtb6rujI5JGchHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc+KSUJj28qWGo4oIQh0aBgjVWuMB8GA1UdIwQY
MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt
MWU3YmRiN2YzMGY2LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2
LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbmiOM2w
6/hLYkTACXPj4f1kgYjJRnXToxodo0gi32uRQaV59dPH6inGtFKdLSeXygF0qgPw
awU/H6rMPE3anz7bKC8Vc8XpoblHNC9ajhk3Hn9vTjKDSVPA+o6iJITONVxzwP4t
ReOL1OxE3G3cp3f6XZpXbt/zJaxaRLRaBAK4ElUdJfGmDO5XKcNILToDt4mJtPCq
yJmRTEW9rNS9pTatc1r+dGRPclLd/Kujc+q88vI+0OBWQQWj0GR768JKhKCYuv7O
AcM4DPZ3481ldNlROw0RenT9oRyTsK396R6tymhFCwt6SmtcoFfBqwhBMz2xUsib
Eq9IZ6PFqB9tfw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:28 2026 by rpki-client