Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier: B+snFD3O6ZT8Xv4RVPp5cDH7JS53/19Un7Ix2utfqF8=
Subject key identifier: D0:F1:92:E9:62:1C:E1:27:25:F4:39:44:69:7C:32:E9:FD:1A:67:BD
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer: /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial: 01A0CD114C4FEBB621202AE2E9AE15CFC015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number: 0164
Signing time: Wed 23 Sep 2026 07:00:57 +0000
Manifest this update: Wed 23 Sep 2026 07:00:57 +0000
Manifest next update: Thu 24 Sep 2026 07:00:57 +0000
Files and hashes: 1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: d6Gcs3IB5I4xGUgEME6CbsXuOrQ0mwj42IC1zrTMUdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:4c:4f:eb:b6:21:20:2a:e2:e9:ae:15:cf:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Validity
Not Before: Sep 23 07:00:57 2026 GMT
Not After : Sep 24 07:00:57 2026 GMT
Subject: CN=d0f192e9621ce12725f43944697c32e9fd1a67bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:28:31:03:45:2a:60:7f:98:f6:27:db:7e:
d9:d4:f9:fc:d7:cf:b1:19:a1:7c:67:81:0e:e1:e0:
f6:63:7d:18:42:da:71:e9:4d:8d:e3:ef:a0:9e:0a:
11:34:29:1e:b2:0e:0d:80:db:34:ea:89:71:00:1a:
b4:02:b0:26:ef:13:d6:f6:b6:ea:16:f7:b5:18:a0:
38:10:1a:e6:90:a7:2d:95:24:5d:9e:51:12:21:7f:
82:47:c9:5a:ed:59:9f:c7:66:72:e0:b5:dc:3b:d0:
c7:7b:19:da:ab:b5:91:f9:a4:27:2f:50:a1:52:4b:
26:e9:31:94:3e:df:ff:97:b7:b7:1b:82:be:e8:80:
8f:02:14:47:87:fa:e2:f3:32:da:f5:6c:4e:e9:bf:
c6:a9:96:4f:fd:b0:e0:ce:c7:e3:db:1d:16:30:6b:
f4:b8:ef:1c:ec:30:ed:fa:36:4a:cd:24:ee:a2:14:
91:46:13:9c:96:33:26:5d:49:ee:3d:57:71:39:41:
90:20:e7:07:71:92:38:c2:6a:aa:31:c6:23:52:71:
e8:c4:b4:12:a5:ed:3f:92:2d:4e:4d:4c:cd:d2:58:
75:ce:e2:38:cc:06:07:91:d4:70:95:85:b2:92:26:
e7:76:b2:09:30:61:02:5f:05:f1:f5:93:4a:34:17:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:92:E9:62:1C:E1:27:25:F4:39:44:69:7C:32:E9:FD:1A:67:BD
X509v3 Authority Key Identifier:
keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:fe:5b:39:43:c5:e8:01:47:e1:85:6e:7b:72:29:8f:e1:
22:85:84:a3:fd:8d:a2:84:60:ad:8b:a5:15:67:98:0c:73:b8:
c4:ff:8c:43:6b:2a:0c:9e:c9:4e:04:76:5b:8d:1a:ce:d8:fe:
8b:81:28:c6:f1:14:4f:26:bb:ef:4a:47:9d:74:ab:50:6a:d3:
e9:38:c4:cb:06:ab:e4:29:28:43:fc:dd:75:51:5c:04:b2:95:
3e:85:4c:3f:bd:a7:9e:90:e8:9f:fd:63:c0:5e:92:44:06:27:
42:08:d3:d9:99:dc:48:9b:9f:73:21:ea:9d:62:b2:1c:1f:1a:
57:37:bb:2e:6d:91:f1:57:80:7e:4b:92:12:21:e9:fd:fa:3c:
0d:64:e2:41:8d:38:aa:4c:e1:03:52:65:91:6b:12:92:f0:1c:
21:05:1c:f4:82:49:41:50:a4:ae:42:47:00:93:b3:2e:5c:01:
49:d4:e6:8f:83:a4:30:83:36:c4:08:44:76:0d:84:9e:c4:c5:
bf:15:ea:e3:5b:85:25:ba:8f:c8:97:3b:c9:8e:16:d3:73:de:
42:77:19:7b:3c:01:c2:ab:2f:10:fa:e2:e8:ac:27:41:be:0f:
8b:9c:7f:a6:8b:47:32:60:fd:37:e0:7d:6c:da:28:63:78:01:
95:a1:83:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEUxP67YhICri6a4Vz8AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjQ4N2Y1OWY4YjNhZjhiZjJhNTkyNDY3MjAyMWI2NTA4
MGY0YjEwHhcNMjYwOTIzMDcwMDU3WhcNMjYwOTI0MDcwMDU3WjAzMTEwLwYDVQQD
EyhkMGYxOTJlOTYyMWNlMTI3MjVmNDM5NDQ2OTdjMzJlOWZkMWE2N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltwoMQNFKmB/mPYn237Z1Pn818+x
GaF8Z4EO4eD2Y30YQtpx6U2N4++gngoRNCkesg4NgNs06olxABq0ArAm7xPW9rbq
Fve1GKA4EBrmkKctlSRdnlESIX+CR8la7Vmfx2Zy4LXcO9DHexnaq7WR+aQnL1Ch
Uksm6TGUPt//l7e3G4K+6ICPAhRHh/ri8zLa9WxO6b/GqZZP/bDgzsfj2x0WMGv0
uO8c7DDt+jZKzSTuohSRRhOcljMmXUnuPVdxOUGQIOcHcZI4wmqqMcYjUnHoxLQS
pe0/ki1OTUzN0lh1zuI4zAYHkdRwlYWykibndrIJMGECXwXx9ZNKNBcWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDxkuliHOEnJfQ5RGl8Mun9Gme9MB8GA1UdIwQY
MBaAFMokh/Wfizr4vypZJGcgIbZQgPSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlTSDlaLUxPdmlfS2xra1p5QWh0bENBOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wNWYzMGUtN2NmZS00NDhmLTlmYTQt
MDQxZTg5Nzk4NDcxLzEveWlTSDlaLUxPdmlfS2xra1p5QWh0bENBOUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wNWYzMGUtN2NmZS00NDhmLTlmYTQtMDQxZTg5Nzk4NDcx
LzEveWlTSDlaLUxPdmlfS2xra1p5QWh0bENBOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPX+WzlD
xegBR+GFbntyKY/hIoWEo/2NooRgrYulFWeYDHO4xP+MQ2sqDJ7JTgR2W40aztj+
i4EoxvEUTya770pHnXSrUGrT6TjEywar5CkoQ/zddVFcBLKVPoVMP72nnpDon/1j
wF6SRAYnQgjT2ZncSJufcyHqnWKyHB8aVze7Lm2R8VeAfkuSEiHp/fo8DWTiQY04
qkzhA1JlkWsSkvAcIQUc9IJJQVCkrkJHAJOzLlwBSdTmj4OkMIM2xAhEdg2EnsTF
vxXq41uFJbqPyJc7yY4W03PeQncZezwBwqsvEPri6KwnQb4Pi5x/potHMmD9N+B9
bNooY3gBlaGD0w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:11 2026 by rpki-client