Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File: YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier: GD4kh6xwToP0mCpNB/W1rs4wVlyOAiEUPFx5Lxi1CmI=
Subject key identifier: D4:ED:9A:12:10:08:B3:79:87:FC:35:FD:84:25:30:81:20:8C:D9:A7
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 01A0D9F1CEF099E6556DE242ECC4B2E7DBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number: 0165
Signing time: Fri 25 Sep 2026 19:01:38 +0000
Manifest this update: Fri 25 Sep 2026 19:01:38 +0000
Manifest next update: Sat 26 Sep 2026 19:01:38 +0000
Files and hashes: 1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: 3dGSerl24NrDpPwvexStDy5kadAtFDEs5T4tLWRMCXs=)
3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:ce:f0:99:e6:55:6d:e2:42:ec:c4:b2:e7:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: Sep 25 19:01:38 2026 GMT
Not After : Sep 26 19:01:38 2026 GMT
Subject: CN=d4ed9a121008b37987fc35fd84253081208cd9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:0f:bb:59:68:e5:57:8f:25:81:e9:df:ec:
c0:a6:28:3a:16:f6:55:fb:74:38:79:3f:97:2f:e2:
8a:02:65:82:93:a1:cf:f3:0b:50:38:08:1f:e1:75:
95:e0:50:ab:9e:6f:20:bc:5b:b2:f8:77:aa:13:fc:
d1:0d:fe:1f:31:c8:57:26:dd:ce:14:95:5f:7f:93:
50:7e:64:f9:a4:f5:1b:b1:12:ad:e9:91:a9:c4:14:
79:9b:b4:d2:e0:1d:b0:8c:80:5d:33:05:3d:dd:1f:
83:00:e4:ac:0d:85:aa:e8:0a:62:cb:3e:51:0d:50:
74:f0:8c:4c:59:c2:19:da:14:eb:12:f5:a3:0a:30:
a7:73:a3:97:e4:aa:ed:d7:68:6d:98:1b:ab:35:df:
29:61:f8:7a:44:2d:85:24:63:b1:02:c3:b1:9e:6e:
c3:be:65:8a:45:79:50:32:bb:bc:3f:7c:ef:01:ed:
73:98:96:49:75:14:b2:80:40:62:c9:12:be:b0:0e:
bb:45:74:9e:e6:31:e4:67:ae:db:fd:43:4a:d8:b0:
84:ac:c2:eb:31:1d:38:a5:95:db:22:09:41:c0:0d:
a7:f0:10:60:ad:a2:fd:b4:7e:84:ad:fa:a1:80:78:
08:8c:48:f3:20:0e:fd:2e:a9:f8:e8:7e:77:b8:4c:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:ED:9A:12:10:08:B3:79:87:FC:35:FD:84:25:30:81:20:8C:D9:A7
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:46:81:a7:51:76:e6:45:9e:c8:df:ff:4f:e8:d6:98:c9:1d:
d5:91:05:49:42:c1:ed:90:fc:7d:7b:a9:47:15:9d:b9:73:35:
55:e0:4f:fb:bf:e7:35:fd:3e:7a:f9:fd:2b:c6:55:bb:ab:4a:
4e:2a:c4:0e:90:62:f5:80:d2:cd:3d:f6:65:a9:a9:47:ac:4b:
93:e8:f6:7b:2f:25:c3:08:b5:e8:c3:9e:46:fd:71:e1:24:55:
6d:d7:14:2a:25:00:0f:4b:9a:1b:76:ed:8a:85:95:e3:72:e8:
31:53:37:39:bb:15:f7:1e:55:f4:34:a1:6a:56:ec:3b:5b:1b:
ac:1f:93:48:78:b0:ee:6a:87:d0:2d:cc:6b:00:5c:e6:fa:4e:
d4:23:64:15:c9:99:d8:03:7f:56:23:b7:fa:a6:08:d5:f9:d3:
37:43:63:a5:06:a8:3b:73:91:ef:12:68:70:ce:d7:3c:c4:22:
8b:0d:7f:5b:60:1c:df:e9:25:57:bd:d3:41:44:83:95:5f:ab:
98:31:ab:a7:33:26:0d:00:87:2f:78:89:df:86:82:dc:f3:52:
64:f1:3a:28:bb:3f:3b:6c:16:91:17:db:8f:77:f2:cc:50:f5:
d1:39:2c:5f:9f:56:ff:b1:99:eb:45:ae:aa:fb:07:0e:c3:a0:
f3:d3:65:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8c7wmeZVbeJC7MSy59vpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZGFjMGFhODYxZjdkNzJjNmYyNWQ2NTZmMDMxZGExNjdl
ZGE5NTUwHhcNMjYwOTI1MTkwMTM4WhcNMjYwOTI2MTkwMTM4WjAzMTEwLwYDVQQD
EyhkNGVkOWExMjEwMDhiMzc5ODdmYzM1ZmQ4NDI1MzA4MTIwOGNkOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0Pu1lo5VePJYHp3+zApig6FvZV
+3Q4eT+XL+KKAmWCk6HP8wtQOAgf4XWV4FCrnm8gvFuy+HeqE/zRDf4fMchXJt3O
FJVff5NQfmT5pPUbsRKt6ZGpxBR5m7TS4B2wjIBdMwU93R+DAOSsDYWq6Apiyz5R
DVB08IxMWcIZ2hTrEvWjCjCnc6OX5Krt12htmBurNd8pYfh6RC2FJGOxAsOxnm7D
vmWKRXlQMru8P3zvAe1zmJZJdRSygEBiyRK+sA67RXSe5jHkZ67b/UNK2LCErMLr
MR04pZXbIglBwA2n8BBgraL9tH6ErfqhgHgIjEjzIA79Lqn46H53uEyNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTtmhIQCLN5h/w1/YQlMIEgjNmnMB8GA1UdIwQY
MBaAFGHawKqGH31yxvJdZW8DHaFn7alVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wOGJjOTAtYzA1ZS00YTM3LWEwYjYt
ZjUzMTg4MWNmMmJjLzEvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wOGJjOTAtYzA1ZS00YTM3LWEwYjYtZjUzMTg4MWNmMmJj
LzEvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEaBp1F2
5kWeyN//T+jWmMkd1ZEFSULB7ZD8fXupRxWduXM1VeBP+7/nNf0+evn9K8ZVu6tK
TirEDpBi9YDSzT32ZampR6xLk+j2ey8lwwi16MOeRv1x4SRVbdcUKiUAD0uaG3bt
ioWV43LoMVM3ObsV9x5V9DShalbsO1sbrB+TSHiw7mqH0C3MawBc5vpO1CNkFcmZ
2AN/ViO3+qYI1fnTN0NjpQaoO3OR7xJocM7XPMQiiw1/W2Ac3+klV73TQUSDlV+r
mDGrpzMmDQCHL3iJ34aC3PNSZPE6KLs/O2wWkRfbj3fyzFD10TksX59W/7GZ60Wu
qvsHDsOg89Nlug==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:05:38 2026 by rpki-client