Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: UQ9jsIf/Miqeeh69wALrbix0lW9aHN8RDS6bkHevGRc=
Subject key identifier: 07:24:68:58:4E:21:D0:5B:54:85:7B:DB:DD:0A:49:10:C9:C7:CF:2B
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 01A0DC856F695A8A9C56443AADC7B018474A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 028A
Signing time: Sat 26 Sep 2026 07:02:07 +0000
Manifest this update: Sat 26 Sep 2026 07:02:07 +0000
Manifest next update: Sun 27 Sep 2026 07:02:07 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: oaNE8nsvbQnmcaLFgquXPu62Im1nv1cj9xVir0ZzFm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:6f:69:5a:8a:9c:56:44:3a:ad:c7:b0:18:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Sep 26 07:02:07 2026 GMT
Not After : Sep 27 07:02:07 2026 GMT
Subject: CN=072468584e21d05b54857bdbdd0a4910c9c7cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:14:7f:47:2c:d4:84:c3:bc:fd:f4:a7:e1:
93:45:96:ab:2b:63:f3:1c:6e:6a:02:93:17:6e:1b:
16:9f:a0:29:7c:06:b0:9a:34:3b:26:dc:c4:f7:00:
fb:b5:d8:9b:90:04:f4:1e:7c:fd:75:82:c3:b9:b9:
c3:78:f2:b7:ad:b6:1c:5d:2f:6a:1c:b6:e2:66:56:
e7:28:3e:3f:8c:23:60:90:f3:f6:52:d1:07:33:52:
e0:62:e1:a0:a9:12:92:e9:e8:a2:be:04:c2:32:55:
34:8d:f8:81:88:04:df:6c:2d:0d:51:61:b2:56:7e:
12:54:79:6f:8b:3f:55:4a:22:89:9d:e7:7e:a5:53:
0e:40:41:6a:82:67:ae:d6:a9:43:0f:ff:60:6d:46:
70:90:42:09:2a:b2:95:41:d1:ab:31:22:34:d8:e8:
5c:ed:c4:13:81:d6:f2:7b:9f:66:59:cd:dd:25:0e:
7f:f8:6a:2e:4f:20:55:b7:91:55:a5:f2:09:e9:13:
92:ab:46:bd:f4:97:e6:06:cd:89:63:45:bb:6b:4b:
3d:3f:95:c6:e3:f6:89:34:0e:14:d2:6b:5c:9d:72:
42:72:21:80:48:50:2b:93:79:c9:72:96:13:05:b9:
28:44:52:fe:f0:6e:4a:8a:08:a5:d0:9a:24:dc:80:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:24:68:58:4E:21:D0:5B:54:85:7B:DB:DD:0A:49:10:C9:C7:CF:2B
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1e:24:6e:09:80:f8:d3:3f:e2:dc:fe:1d:cb:c5:dd:a0:81:
26:85:25:09:2c:ee:da:e9:42:4b:17:40:aa:6e:d2:4f:83:c9:
7a:f5:04:de:f2:13:1f:ad:92:8f:2c:21:fd:b5:29:2f:75:e2:
4c:b9:4f:ef:d1:39:20:b0:17:52:48:b2:a7:bf:76:16:db:6d:
3d:97:a0:a7:67:8c:24:15:ec:04:08:b6:8c:9d:e8:89:3c:34:
ed:a6:ce:14:01:a6:a8:8d:f3:20:67:28:98:59:e2:d9:4d:e8:
b6:bf:b9:b5:dd:fa:82:f2:17:49:17:1d:91:83:87:12:01:be:
53:e3:03:44:1b:06:1e:dd:1b:21:39:4a:28:74:c9:19:79:6c:
92:ba:57:dd:25:b4:b5:2e:39:06:81:9f:31:72:32:ab:1c:91:
f3:16:92:eb:2d:5c:a5:95:a9:c4:b5:0e:f7:44:aa:96:af:1f:
63:87:9a:cf:ca:99:7e:ed:7c:b8:23:03:e5:c5:ef:0f:c0:e8:
79:f3:76:12:dd:13:6c:b5:70:69:20:7d:e1:66:f7:53:a0:ed:
8a:f3:93:9d:9c:2f:32:8c:b6:12:10:11:2d:29:81:c8:44:01:
18:1a:b5:6b:fe:f5:50:7e:b4:b3:07:3b:44:56:81:e6:57:1f:
db:93:92:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchW9pWoqcVkQ6rcewGEdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2YyZmZiMzlhYTJkZjIwMDRiN2NhMTU3M2QxMTMxN2E4
ZmI3NGEwHhcNMjYwOTI2MDcwMjA3WhcNMjYwOTI3MDcwMjA3WjAzMTEwLwYDVQQD
EygwNzI0Njg1ODRlMjFkMDViNTQ4NTdiZGJkZDBhNDkxMGM5YzdjZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XMUf0cs1ITDvP30p+GTRZarK2Pz
HG5qApMXbhsWn6ApfAawmjQ7JtzE9wD7tdibkAT0Hnz9dYLDubnDePK3rbYcXS9q
HLbiZlbnKD4/jCNgkPP2UtEHM1LgYuGgqRKS6eiivgTCMlU0jfiBiATfbC0NUWGy
Vn4SVHlviz9VSiKJned+pVMOQEFqgmeu1qlDD/9gbUZwkEIJKrKVQdGrMSI02Ohc
7cQTgdbye59mWc3dJQ5/+GouTyBVt5FVpfIJ6ROSq0a99JfmBs2JY0W7a0s9P5XG
4/aJNA4U0mtcnXJCciGASFArk3nJcpYTBbkoRFL+8G5Kigil0Jok3IABmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAckaFhOIdBbVIV7290KSRDJx88rMB8GA1UdIwQY
MBaAFMt/L/s5qi3yAEt8oVc9ETF6j7dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQt
YzhmYmEwYjMxMGE5LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQtYzhmYmEwYjMxMGE5
LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUR4kbgmA
+NM/4tz+HcvF3aCBJoUlCSzu2ulCSxdAqm7ST4PJevUE3vITH62Sjywh/bUpL3Xi
TLlP79E5ILAXUkiyp792FtttPZegp2eMJBXsBAi2jJ3oiTw07abOFAGmqI3zIGco
mFni2U3otr+5td36gvIXSRcdkYOHEgG+U+MDRBsGHt0bITlKKHTJGXlskrpX3SW0
tS45BoGfMXIyqxyR8xaS6y1cpZWpxLUO90Sqlq8fY4eaz8qZfu18uCMD5cXvD8Do
efN2Et0TbLVwaSB94Wb3U6DtivOTnZwvMoy2EhARLSmByEQBGBq1a/71UH60swc7
RFaB5lcf25OSpQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:25 2026 by rpki-client