Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: nBdKjKH0jBJNZbeGe2asgeDvmNHpHthHBjWUW4FvArw=
Subject key identifier: 68:13:4E:25:F1:7C:09:85:70:96:65:E2:06:EE:42:EB:DC:FC:5D:01
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 01A14203CF8012C98524336B8ABAB076C027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 0120
Signing time: Fri 16 Oct 2026 00:01:48 +0000
Manifest this update: Fri 16 Oct 2026 00:01:48 +0000
Manifest next update: Sat 17 Oct 2026 00:01:48 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: zyM07sOhAvkcPllETuFaW2f4qphu/NGBuR1hNMib4gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 00:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:cf:80:12:c9:85:24:33:6b:8a:ba:b0:76:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Oct 16 00:01:48 2026 GMT
Not After : Oct 17 00:01:48 2026 GMT
Subject: CN=68134e25f17c0985709665e206ee42ebdcfc5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:5c:d1:cf:8e:f7:9c:54:d9:8c:70:bc:55:
dc:48:9e:ab:0e:17:3f:f4:e2:00:63:a6:a9:bf:77:
be:e5:9a:ad:12:e6:40:e9:42:c6:ca:98:ea:ab:b6:
b2:8c:80:91:53:d2:c3:a1:fa:83:8c:b2:19:93:f6:
ae:b5:95:e5:af:9b:5f:74:98:44:2a:f9:84:58:33:
33:ca:89:b8:eb:31:87:cb:af:ee:ce:a4:af:7d:e2:
02:67:de:a3:13:3a:2a:c8:71:b8:db:fa:7a:14:e4:
e9:a1:89:5a:d3:68:92:51:d8:f6:76:f7:9e:06:85:
69:f7:eb:d9:66:3b:6f:66:2a:20:2c:a1:4b:53:22:
85:9e:01:a9:32:62:6a:b6:52:b8:79:9f:7a:7f:ae:
28:20:ee:9e:0b:5a:b2:02:35:73:f9:35:9a:62:ce:
eb:12:3d:27:e6:7c:08:e6:3f:b2:de:4a:03:ae:0e:
66:c9:bd:48:cb:b2:ec:f3:38:38:85:a7:96:8a:13:
0f:3c:8e:25:58:21:ea:ec:7d:03:5c:89:58:60:82:
9a:fe:fd:ba:74:1b:b0:fa:2a:86:98:cc:e0:9a:df:
18:cf:d1:55:7c:da:07:02:7f:7a:99:70:f6:16:d9:
8e:c3:91:17:7a:45:18:73:dd:a9:a1:9c:e3:c0:df:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:4E:25:F1:7C:09:85:70:96:65:E2:06:EE:42:EB:DC:FC:5D:01
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:b0:91:79:55:a7:b3:aa:30:93:88:71:6e:15:fd:7a:00:
9a:15:b7:52:1d:78:5f:1e:83:98:72:b8:16:9a:e6:9f:6f:30:
bf:49:83:ba:41:71:1b:d5:ed:49:45:07:4d:38:58:3a:54:c6:
a8:44:9a:a0:bf:9d:f8:f5:78:2a:fa:12:3e:19:6e:e0:e2:ce:
be:48:c2:82:1a:ad:0c:87:f9:05:11:55:98:18:46:02:39:af:
7c:db:f1:10:39:88:b4:0e:1e:af:30:a2:4a:00:38:e6:a3:16:
29:3f:d6:c6:2f:09:db:d1:6e:57:84:69:7c:e6:f2:10:fb:c5:
f2:8d:35:5c:f7:f9:eb:5e:07:87:e7:01:d1:f0:c7:00:ac:bb:
55:7c:39:ea:d9:c5:ab:60:ea:eb:5d:04:89:0d:90:ed:a8:9b:
45:06:ac:eb:01:6d:bf:fc:a5:f2:45:65:d9:b5:52:a1:c3:df:
b6:47:14:1e:85:4f:60:dd:05:56:52:1d:94:c8:65:09:6d:a8:
1b:fd:55:53:f4:78:f4:f3:e4:df:d2:3b:a2:f3:9e:e2:6c:a5:
d4:67:1f:d9:4e:ed:8a:ca:03:15:83:da:ad:c7:d0:76:16:b3:
15:06:07:d6:0e:2a:76:b1:ee:de:4d:60:b3:80:cb:fc:c3:f1:
ec:cf:6b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCA8+AEsmFJDNrirqwdsAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjVkOWM1MjkzYmE3YmZlNTIwNzRhYzI3ZmM3ZGY5YTY0
OWIyMWIwHhcNMjYxMDE2MDAwMTQ4WhcNMjYxMDE3MDAwMTQ4WjAzMTEwLwYDVQQD
Eyg2ODEzNGUyNWYxN2MwOTg1NzA5NjY1ZTIwNmVlNDJlYmRjZmM1ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tdc0c+O95xU2YxwvFXcSJ6rDhc/
9OIAY6apv3e+5ZqtEuZA6ULGypjqq7ayjICRU9LDofqDjLIZk/autZXlr5tfdJhE
KvmEWDMzyom46zGHy6/uzqSvfeICZ96jEzoqyHG42/p6FOTpoYla02iSUdj2dvee
BoVp9+vZZjtvZiogLKFLUyKFngGpMmJqtlK4eZ96f64oIO6eC1qyAjVz+TWaYs7r
Ej0n5nwI5j+y3koDrg5myb1Iy7Ls8zg4haeWihMPPI4lWCHq7H0DXIlYYIKa/v26
dBuw+iqGmMzgmt8Yz9FVfNoHAn96mXD2FtmOw5EXekUYc92poZzjwN8Q6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgTTiXxfAmFcJZl4gbuQuvc/F0BMB8GA1UdIwQY
MBaAFP8l2cUpO6e/5SB0rCf8ffmmSbIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUt
MzQ2YmQ5NzNjODQzLzEvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUtMzQ2YmQ5NzNjODQz
LzEvX3lYWnhTazdwN19sSUhTc0pfeDktYVpKc2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEawkXlV
p7OqMJOIcW4V/XoAmhW3Uh14Xx6DmHK4Fprmn28wv0mDukFxG9XtSUUHTThYOlTG
qESaoL+d+PV4KvoSPhlu4OLOvkjCghqtDIf5BRFVmBhGAjmvfNvxEDmItA4erzCi
SgA45qMWKT/Wxi8J29FuV4RpfObyEPvF8o01XPf5614Hh+cB0fDHAKy7VXw56tnF
q2Dq610EiQ2Q7aibRQas6wFtv/yl8kVl2bVSocPftkcUHoVPYN0FVlIdlMhlCW2o
G/1VU/R49PPk39I7ovOe4myl1Gcf2U7tisoDFYParcfQdhazFQYH1g4qdrHu3k1g
s4DL/MPx7M9rkA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 10:08:49 2026 by rpki-client