Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: eNYmkTVAy5f9i4+2+7jKTD8pso2Clv2vo2XzyHUzq2A=
Subject key identifier: AE:3A:3C:6B:F5:54:5B:1F:A1:91:AF:1E:EB:B8:62:D2:70:73:11:4C
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 01A0D34AC6EFEB135AA8FFADAF3013D5B808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 11F0
Signing time: Thu 24 Sep 2026 12:01:28 +0000
Manifest this update: Thu 24 Sep 2026 12:01:28 +0000
Manifest next update: Fri 25 Sep 2026 12:01:28 +0000
Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: +lvHXy9OyH9eaWKKtTk6Mkiyf0hA8TopF5tW0GxUE4M=)
6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:c6:ef:eb:13:5a:a8:ff:ad:af:30:13:d5:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Sep 24 12:01:28 2026 GMT
Not After : Sep 25 12:01:28 2026 GMT
Subject: CN=ae3a3c6bf5545b1fa191af1eebb862d27073114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:3a:62:4f:4b:b0:68:c6:33:68:21:40:27:
9e:ae:91:e1:f1:5f:6d:2a:0c:72:f4:fc:1d:68:6a:
c8:e9:2a:5e:c9:be:5a:16:c9:25:d1:f7:db:a3:dd:
99:bb:33:ba:97:69:bd:73:82:23:5b:4f:e3:fb:de:
d2:70:c7:4b:02:0a:7d:f6:b0:07:ae:de:80:0c:7f:
cc:08:97:a2:c9:23:c1:95:75:a7:cd:41:a3:1a:0b:
2c:85:65:a8:9a:68:e2:ed:63:52:80:c2:ac:93:80:
2e:07:e2:5d:c7:4c:5b:79:95:d0:c0:58:8e:76:cd:
c2:09:8d:66:c1:42:10:eb:8e:a9:5d:a9:df:2c:fc:
9c:09:d8:fc:73:48:9c:d3:57:3e:d8:ba:90:18:6a:
7f:ba:94:49:55:96:3c:91:2d:40:8a:5e:27:45:3a:
59:d3:43:f8:82:43:c2:b3:4a:3c:ae:a7:6c:a6:7d:
8d:42:1a:e5:6f:cb:28:2d:2a:41:5b:8e:ad:87:f8:
40:66:2b:ae:04:8f:de:a3:8f:6f:a8:c9:f6:37:b9:
f2:8e:1a:0d:c1:59:47:0a:a2:c0:c5:99:76:0c:62:
c7:e7:fa:fe:53:3c:46:9a:5a:38:19:c9:61:f9:0d:
42:6b:a5:c6:9d:00:4d:4b:c5:a9:a9:c0:23:b3:56:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:3C:6B:F5:54:5B:1F:A1:91:AF:1E:EB:B8:62:D2:70:73:11:4C
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:be:a4:0c:1f:2a:d2:7c:7a:55:8c:29:38:01:eb:6b:d3:
07:89:38:1c:e9:a1:df:12:80:a4:5d:4f:02:bd:81:4d:06:99:
47:45:6b:88:6d:42:55:f5:8c:0f:d1:82:32:2e:ee:3d:89:7d:
82:50:5f:c5:38:08:0c:92:17:b4:33:5b:ed:65:c7:d7:81:7b:
b0:1f:27:dd:c5:24:01:fb:b9:ed:4a:22:7f:ec:d4:f7:97:d6:
88:c8:a2:fb:7e:ba:b1:63:f9:fc:7e:d5:33:2e:31:c2:dd:30:
a6:d8:72:9f:4c:0e:0a:4e:1b:17:ad:1e:84:85:cf:cf:5a:a9:
a7:8e:85:f6:c2:c6:b6:f3:3c:28:4b:54:a1:84:6e:56:20:aa:
8d:55:a2:14:be:41:cf:fc:4f:77:7e:45:82:fd:cb:1b:ee:4c:
88:99:4a:b9:55:b2:a6:2f:55:78:87:66:a8:45:95:b2:55:91:
96:1e:39:d6:f2:3f:ac:2b:9c:cf:ee:0c:24:2b:02:28:3b:32:
ee:1a:c0:94:fb:94:36:37:ae:fd:e8:5d:eb:be:25:dc:14:3e:
09:a9:31:88:5c:9e:c3:63:47:42:bc:8a:fe:1f:49:7d:2b:9d:
24:6c:af:fa:34:fd:cc:17:5b:a4:7e:fa:1f:da:2a:7a:65:4b:
b1:41:b8:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSsbv6xNaqP+trzAT1bgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjYwOTI0MTIwMTI4WhcNMjYwOTI1MTIwMTI4WjAzMTEwLwYDVQQD
EyhhZTNhM2M2YmY1NTQ1YjFmYTE5MWFmMWVlYmI4NjJkMjcwNzMxMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2M6Yk9LsGjGM2ghQCeerpHh8V9t
Kgxy9PwdaGrI6Speyb5aFskl0ffbo92ZuzO6l2m9c4IjW0/j+97ScMdLAgp99rAH
rt6ADH/MCJeiySPBlXWnzUGjGgsshWWommji7WNSgMKsk4AuB+Jdx0xbeZXQwFiO
ds3CCY1mwUIQ646pXanfLPycCdj8c0ic01c+2LqQGGp/upRJVZY8kS1Ail4nRTpZ
00P4gkPCs0o8rqdspn2NQhrlb8soLSpBW46th/hAZiuuBI/eo49vqMn2N7nyjhoN
wVlHCqLAxZl2DGLH5/r+UzxGmlo4Gclh+Q1Ca6XGnQBNS8WpqcAjs1bNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK46PGv1VFsfoZGvHuu4YtJwcxFMMB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiee+pAwf
KtJ8elWMKTgB62vTB4k4HOmh3xKApF1PAr2BTQaZR0VriG1CVfWMD9GCMi7uPYl9
glBfxTgIDJIXtDNb7WXH14F7sB8n3cUkAfu57Uoif+zU95fWiMii+366sWP5/H7V
My4xwt0wpthyn0wOCk4bF60ehIXPz1qpp46F9sLGtvM8KEtUoYRuViCqjVWiFL5B
z/xPd35Fgv3LG+5MiJlKuVWypi9VeIdmqEWVslWRlh451vI/rCucz+4MJCsCKDsy
7hrAlPuUNjeu/ehd674l3BQ+CakxiFyew2NHQryK/h9JfSudJGyv+jT9zBdbpH76
H9oqemVLsUG4hA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:22:13 2026 by rpki-client