Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: MOAeYIHlHonexyjbAbDWUk65FOPiDdmBxjKDldH4VPM=
Subject key identifier: 02:DE:3C:12:C5:EE:66:33:B6:FF:57:98:E3:F0:0F:26:EB:F6:0C:1D
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01A0DC1745F929D0625D9FCB42ECAAC83AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 12E6
Signing time: Sat 26 Sep 2026 05:01:47 +0000
Manifest this update: Sat 26 Sep 2026 05:01:47 +0000
Manifest next update: Sun 27 Sep 2026 05:01:47 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: UKxYYw1iGFOk7sRFlQWLfvGAYmvTWxC0CNSIrAKwzms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:45:f9:29:d0:62:5d:9f:cb:42:ec:aa:c8:3a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Sep 26 05:01:47 2026 GMT
Not After : Sep 27 05:01:47 2026 GMT
Subject: CN=02de3c12c5ee6633b6ff5798e3f00f26ebf60c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:11:d6:43:c7:3d:f0:27:d3:88:b8:33:cf:
27:2c:85:34:ea:04:25:75:10:2a:ff:9a:8f:58:34:
5e:25:bd:37:05:84:56:46:43:49:9b:df:20:2d:23:
56:a9:98:b2:46:93:da:2a:aa:7c:1c:13:cd:22:86:
d9:be:27:a6:06:26:5b:ea:5a:cf:63:f9:65:f2:ee:
cd:ed:a3:a2:0b:86:2f:ea:63:00:5a:eb:41:94:7b:
fb:c1:aa:88:cf:5c:38:24:d2:ca:a3:19:42:ae:4e:
f7:de:69:3c:7c:30:f6:7b:c8:db:1f:5b:af:c7:9f:
99:b9:30:80:72:38:33:de:11:52:b6:37:cb:2b:b0:
36:12:fc:ae:15:47:ee:e8:d0:cd:90:9c:fb:26:81:
04:ea:47:47:42:62:14:3e:36:af:9f:83:f4:01:de:
db:68:9f:86:7e:6b:e0:c7:16:ed:c5:2d:a8:31:ba:
15:7c:90:94:df:d4:ef:52:c8:50:54:1a:85:51:04:
10:01:1a:a5:c8:ff:b6:40:b0:08:05:b8:c2:9e:a9:
0a:bf:71:eb:46:a8:36:97:26:cd:a2:bc:56:00:a6:
67:68:fe:bd:ed:00:07:2e:e2:cd:d3:a3:12:00:a3:
2d:df:c0:30:6f:01:cb:29:3c:96:11:92:64:d7:2f:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:3C:12:C5:EE:66:33:B6:FF:57:98:E3:F0:0F:26:EB:F6:0C:1D
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:60:39:3c:69:d0:15:ff:18:b5:de:55:8a:02:0d:e2:d8:
ed:9f:ab:3b:91:9a:01:86:41:ea:51:71:50:41:18:56:7b:82:
d6:ec:ed:43:38:de:4c:e0:66:d3:ff:28:c0:6d:90:bb:b4:f9:
b1:f4:89:92:95:31:69:67:60:be:a6:e0:13:84:96:62:88:53:
d4:e1:56:5d:a3:67:ba:01:05:81:f0:0a:13:5a:be:16:a7:d8:
21:1e:85:17:3a:e2:c7:52:4d:8c:f5:b2:82:2f:16:ca:3b:7a:
bd:de:9b:4e:50:c2:a4:9b:9b:b2:7c:ce:26:8b:ec:e7:42:b9:
01:a0:d7:60:8c:e4:4d:96:2f:d4:81:77:cd:b6:49:90:5f:ee:
4e:e3:05:9a:b3:fc:8d:c1:2c:f3:04:57:47:3a:ea:80:20:47:
5b:dd:64:54:92:d5:62:ad:87:80:f0:4c:12:3b:75:c2:99:22:
fe:0e:b3:3d:12:8c:9f:e0:c7:27:54:05:cc:da:9a:e1:a3:a0:
7c:cb:15:3b:02:17:0e:d4:f0:9e:88:73:64:66:6f:9e:e8:ea:
92:cc:bc:68:02:ee:cc:8a:30:2f:46:91:4f:fe:69:93:e8:7e:
fa:51:0c:06:1d:09:90:f7:48:9d:25:89:0d:b0:df:a5:a4:85:
c6:e5:70:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF0X5KdBiXZ/LQuyqyDrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjYwOTI2MDUwMTQ3WhcNMjYwOTI3MDUwMTQ3WjAzMTEwLwYDVQQD
EygwMmRlM2MxMmM1ZWU2NjMzYjZmZjU3OThlM2YwMGYyNmViZjYwYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74R1kPHPfAn04i4M88nLIU06gQl
dRAq/5qPWDReJb03BYRWRkNJm98gLSNWqZiyRpPaKqp8HBPNIobZviemBiZb6lrP
Y/ll8u7N7aOiC4Yv6mMAWutBlHv7waqIz1w4JNLKoxlCrk733mk8fDD2e8jbH1uv
x5+ZuTCAcjgz3hFStjfLK7A2EvyuFUfu6NDNkJz7JoEE6kdHQmIUPjavn4P0Ad7b
aJ+GfmvgxxbtxS2oMboVfJCU39TvUshQVBqFUQQQARqlyP+2QLAIBbjCnqkKv3Hr
Rqg2lybNorxWAKZnaP697QAHLuLN06MSAKMt38AwbwHLKTyWEZJk1y/5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALePBLF7mYztv9XmOPwDybr9gwdMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHdgOTxp
0BX/GLXeVYoCDeLY7Z+rO5GaAYZB6lFxUEEYVnuC1uztQzjeTOBm0/8owG2Qu7T5
sfSJkpUxaWdgvqbgE4SWYohT1OFWXaNnugEFgfAKE1q+FqfYIR6FFzrix1JNjPWy
gi8Wyjt6vd6bTlDCpJubsnzOJovs50K5AaDXYIzkTZYv1IF3zbZJkF/uTuMFmrP8
jcEs8wRXRzrqgCBHW91kVJLVYq2HgPBMEjt1wpki/g6zPRKMn+DHJ1QFzNqa4aOg
fMsVOwIXDtTwnohzZGZvnujqksy8aALuzIowL0aRT/5pk+h++lEMBh0JkPdInSWJ
DbDfpaSFxuVwKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:28:01 2026 by rpki-client