Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: Q0A8jkbSFRBMbF7xBJwvOWOxu+g+3FGIL/sRwYIpXA8=
Subject key identifier: C9:62:0B:13:D9:85:DE:8B:BA:65:EB:33:8D:CE:42:F3:ED:CD:D7:4F
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 01A0E02A81E99DEBEC979C5F13D30A01E9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 00:01:17 +0000
Manifest this update: Sun 27 Sep 2026 00:01:17 +0000
Manifest next update: Mon 28 Sep 2026 00:01:17 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: yGutlZTQNlXWXvYfqLp0Q9tToUVvHA8t0h3B3c7Md68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:81:e9:9d:eb:ec:97:9c:5f:13:d3:0a:01:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Sep 27 00:01:17 2026 GMT
Not After : Sep 28 00:01:17 2026 GMT
Subject: CN=c9620b13d985de8bba65eb338dce42f3edcdd74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:9b:ea:6d:0a:3b:34:d5:7a:d8:77:ec:43:
3c:f5:b3:1c:e5:a9:71:a9:0a:e8:2f:80:c0:75:59:
5a:72:0c:b5:1a:dc:42:29:69:c1:01:04:1f:88:b8:
19:e1:5e:0b:22:d5:4b:c5:87:1a:04:af:00:11:aa:
d1:b2:b6:79:b2:c3:b7:a7:d6:b7:16:5c:a2:48:8f:
d6:da:11:7a:8d:cf:29:d0:17:ca:79:02:a6:f9:46:
62:ce:ab:11:ba:40:0b:d7:55:61:26:c6:cb:33:08:
f7:a8:ff:6a:52:34:7c:ce:c1:7f:c5:8b:1a:cc:9f:
c1:fa:25:9b:ba:4f:26:49:44:96:32:87:1b:0e:62:
a3:18:87:27:a5:02:46:44:33:52:81:61:ba:d2:4d:
ca:60:59:a5:e7:1e:c7:6f:9e:40:4f:a2:5e:6a:b9:
f5:8b:cd:7b:67:30:be:80:ca:19:17:6c:86:c3:62:
c2:42:18:fb:e0:87:e8:53:68:c6:df:e6:e7:c0:89:
72:d9:f0:ac:04:ac:ef:90:3f:5f:11:28:5a:93:b7:
c4:ab:7f:f6:0e:c1:27:9f:a1:fc:a3:96:bb:ef:4b:
2c:17:0f:f7:6d:60:64:7b:bd:52:69:0a:b1:d4:7b:
50:2f:bc:13:cf:75:b3:8f:16:9a:7a:ae:ce:0a:bd:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:0B:13:D9:85:DE:8B:BA:65:EB:33:8D:CE:42:F3:ED:CD:D7:4F
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:f2:75:cf:cf:10:82:d4:7f:c2:0c:47:9e:58:29:8a:1f:
23:59:43:bb:16:bf:99:73:02:12:27:d4:e9:3b:18:36:90:83:
86:b2:eb:8a:66:0d:19:89:e8:91:c7:91:e6:6b:bc:58:a7:f0:
4c:f3:12:2d:e7:49:ea:32:cc:bf:6f:c0:8d:46:fa:bb:7c:98:
c7:a3:29:54:ff:0a:9d:1f:39:98:e1:3a:81:ce:ae:1f:90:7f:
cc:2c:70:7f:2c:f5:2a:c4:14:18:b3:78:fa:5d:78:b3:90:29:
22:20:38:4a:fc:e1:d4:63:0c:e2:2e:67:09:46:d6:86:84:48:
c6:56:40:59:a1:b2:1c:db:f9:c2:44:00:42:65:bb:f4:bc:48:
60:93:55:b9:e9:f4:d7:d9:b8:5e:de:72:29:c5:8e:91:f1:27:
26:86:ae:7b:a6:e7:e9:ab:b0:65:8f:bf:e7:40:0f:b7:da:48:
26:a1:f7:cd:04:5d:04:59:12:8f:19:84:bb:0b:2e:03:1f:93:
7d:e7:f7:39:a3:39:8d:94:21:36:51:c0:03:e8:62:92:7b:92:
67:49:53:c7:c6:eb:6f:a6:cc:0c:7f:8d:a8:90:fc:e8:68:61:
cd:81:5f:e5:07:9f:ea:a4:d3:58:03:66:8f:49:0e:5e:9d:bc:
f4:fa:f7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKoHpnevsl5xfE9MKAen4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTg1MWQ1OTM1NmNhOTVkNGFlNzhmYTY5MzZiYTFiOGEy
YjFjN2EwHhcNMjYwOTI3MDAwMTE3WhcNMjYwOTI4MDAwMTE3WjAzMTEwLwYDVQQD
EyhjOTYyMGIxM2Q5ODVkZThiYmE2NWViMzM4ZGNlNDJmM2VkY2RkNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLmb6m0KOzTVeth37EM89bMc5alx
qQroL4DAdVlacgy1GtxCKWnBAQQfiLgZ4V4LItVLxYcaBK8AEarRsrZ5ssO3p9a3
FlyiSI/W2hF6jc8p0BfKeQKm+UZizqsRukAL11VhJsbLMwj3qP9qUjR8zsF/xYsa
zJ/B+iWbuk8mSUSWMocbDmKjGIcnpQJGRDNSgWG60k3KYFml5x7Hb55AT6Jearn1
i817ZzC+gMoZF2yGw2LCQhj74IfoU2jG3+bnwIly2fCsBKzvkD9fEShak7fEq3/2
DsEnn6H8o5a770ssFw/3bWBke71SaQqx1HtQL7wTz3Wzjxaaeq7OCr0EnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMliCxPZhd6LumXrM43OQvPtzddPMB8GA1UdIwQY
MBaAFGCoUdWTVsqV1K54+mk2uhuKKxx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYt
NTQ4ZTdiN2ZhNGUxLzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYtNTQ4ZTdiN2ZhNGUx
LzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYjydc/P
EILUf8IMR55YKYofI1lDuxa/mXMCEifU6TsYNpCDhrLrimYNGYnokceR5mu8WKfw
TPMSLedJ6jLMv2/AjUb6u3yYx6MpVP8KnR85mOE6gc6uH5B/zCxwfyz1KsQUGLN4
+l14s5ApIiA4Svzh1GMM4i5nCUbWhoRIxlZAWaGyHNv5wkQAQmW79LxIYJNVuen0
19m4Xt5yKcWOkfEnJoaue6bn6auwZY+/50APt9pIJqH3zQRdBFkSjxmEuwsuAx+T
fef3OaM5jZQhNlHAA+hiknuSZ0lTx8brb6bMDH+NqJD86GhhzYFf5Qef6qTTWANm
j0kOXp289Pr3AQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:24:14 2026 by rpki-client