Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: xdmGEIPEK0OHeApSup6D4AI4VpoT1w7nMc1sWwEWB/E=
Subject key identifier: BE:7B:D6:D2:90:FC:1B:38:01:34:D3:78:93:B2:B5:6F:93:4E:A2:AE
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 01A112298BEB4ED020B57489A6715B278780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1A99
Signing time: Tue 06 Oct 2026 17:01:14 +0000
Manifest this update: Tue 06 Oct 2026 17:01:14 +0000
Manifest next update: Wed 07 Oct 2026 17:01:14 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: H3LwRFrQl9frRyC3ia1HU3VGzYRJI/oT0d6vJ5m/UH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:8b:eb:4e:d0:20:b5:74:89:a6:71:5b:27:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Oct 6 17:01:14 2026 GMT
Not After : Oct 7 17:01:14 2026 GMT
Subject: CN=be7bd6d290fc1b380134d37893b2b56f934ea2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:ca:8f:ad:56:ef:8c:5b:99:55:36:69:be:
fa:15:6e:b4:e0:13:e3:9a:aa:d6:7e:61:e8:23:19:
11:51:14:b8:11:19:39:5b:5b:a6:54:1b:0c:46:89:
a9:80:e1:39:9f:a3:2a:8e:74:44:56:91:66:51:58:
c6:ce:b5:c5:26:2e:80:e1:e6:7a:5b:6f:a1:9f:08:
bd:f2:ad:c7:84:6b:2e:f4:30:58:c1:7d:39:fa:22:
4a:ba:e4:07:c8:92:22:1d:bf:e5:b3:5f:dc:be:be:
8b:f9:e1:24:d9:f4:7a:c1:4b:d8:7a:4a:c4:d8:7c:
12:b6:37:71:2b:30:4a:4f:68:fd:2b:fc:a0:e5:70:
15:47:c6:17:12:d4:b3:f3:69:e3:a0:ae:73:e1:fc:
bc:d9:7a:63:a2:2a:0b:37:9d:fd:da:3e:b2:a4:52:
17:d2:20:60:93:e3:db:dd:99:1e:0a:03:df:26:25:
a1:63:9b:13:1b:ae:1f:d2:04:f5:df:a7:81:1b:56:
69:38:0e:1e:76:28:c6:f4:ff:05:f7:70:35:fd:29:
70:69:cf:38:ea:18:95:63:47:b1:d1:15:60:2a:82:
9d:f7:51:16:33:03:e6:de:62:e1:8c:99:79:27:3b:
2f:b2:a9:04:59:42:a4:f9:85:f8:38:35:94:b9:3a:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:D6:D2:90:FC:1B:38:01:34:D3:78:93:B2:B5:6F:93:4E:A2:AE
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:b2:a0:59:32:d9:59:54:b8:6f:88:4f:fc:60:ee:4b:1e:
35:fa:37:aa:40:aa:7b:f5:45:0b:9d:5f:2a:de:db:83:40:79:
c2:73:3a:ab:ee:a3:ea:f3:b4:48:0b:68:75:7a:10:5b:9c:16:
91:18:1b:78:aa:8e:7d:4e:e2:b0:22:c1:44:64:d0:ee:de:e5:
6c:a1:83:d2:d9:be:82:1a:f7:41:42:b7:34:dd:0e:67:21:4a:
bb:57:fd:90:a7:c9:24:74:c9:b7:8f:86:30:17:47:c8:a0:12:
ef:4f:2c:18:b3:eb:32:8b:36:ce:55:ee:0b:b2:af:4f:e3:61:
ce:ae:6d:c1:d4:4a:aa:af:39:1c:6c:fb:44:76:15:09:c8:26:
fa:00:00:e8:c7:27:c0:b5:21:c9:ce:66:18:69:58:79:9c:85:
b9:ce:eb:0d:f5:16:4b:22:c1:a8:58:04:23:7e:e1:b1:6b:8f:
73:4d:16:78:c2:56:67:fe:f0:20:76:22:7d:f4:10:df:ea:20:
10:ba:f4:e1:ed:35:cc:d3:9a:7b:3c:5e:d8:2a:15:7d:8d:79:
de:e1:c2:cf:af:6d:35:c6:4c:6d:10:98:82:92:b9:fa:1f:44:
c1:c8:16:4c:3b:b8:ca:87:3d:87:eb:d5:dd:56:e1:13:6d:02:
7b:73:53:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESKYvrTtAgtXSJpnFbJ4eAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjYxMDA2MTcwMTE0WhcNMjYxMDA3MTcwMTE0WjAzMTEwLwYDVQQD
EyhiZTdiZDZkMjkwZmMxYjM4MDEzNGQzNzg5M2IyYjU2ZjkzNGVhMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszjKj61W74xbmVU2ab76FW604BPj
mqrWfmHoIxkRURS4ERk5W1umVBsMRompgOE5n6MqjnREVpFmUVjGzrXFJi6A4eZ6
W2+hnwi98q3HhGsu9DBYwX05+iJKuuQHyJIiHb/ls1/cvr6L+eEk2fR6wUvYekrE
2HwStjdxKzBKT2j9K/yg5XAVR8YXEtSz82njoK5z4fy82XpjoioLN5392j6ypFIX
0iBgk+Pb3ZkeCgPfJiWhY5sTG64f0gT136eBG1ZpOA4edijG9P8F93A1/Slwac84
6hiVY0ex0RVgKoKd91EWMwPm3mLhjJl5JzsvsqkEWUKk+YX4ODWUuTpvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL571tKQ/Bs4ATTTeJOytW+TTqKuMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+myoFky
2VlUuG+IT/xg7kseNfo3qkCqe/VFC51fKt7bg0B5wnM6q+6j6vO0SAtodXoQW5wW
kRgbeKqOfU7isCLBRGTQ7t7lbKGD0tm+ghr3QUK3NN0OZyFKu1f9kKfJJHTJt4+G
MBdHyKAS708sGLPrMos2zlXuC7KvT+Nhzq5twdRKqq85HGz7RHYVCcgm+gAA6Mcn
wLUhyc5mGGlYeZyFuc7rDfUWSyLBqFgEI37hsWuPc00WeMJWZ/7wIHYiffQQ3+og
ELr04e01zNOaezxe2CoVfY153uHCz69tNcZMbRCYgpK5+h9EwcgWTDu4yoc9h+vV
3VbhE20Ce3NTsw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:16:06 2026 by rpki-client