Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: FQiDE19Ry7Rd/OHOZjZCXjUCzOVacMgQkF4VUyePpKs=
Subject key identifier: 89:E6:20:DC:E3:F2:74:8C:A3:C4:47:94:24:BF:59:32:A3:F6:95:43
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 01A0D98406AF8A4040A1E4F58B9AC8693FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 05B7
Signing time: Fri 25 Sep 2026 17:01:43 +0000
Manifest this update: Fri 25 Sep 2026 17:01:43 +0000
Manifest next update: Sat 26 Sep 2026 17:01:43 +0000
Files and hashes: 1: _6t53XKs0j2BNyHo68NXmg3mThQ.roa (hash: joZ8gy7vzfBNp3p5HT6ZVoAMoPf6rB5tuSNkeSQMYBg=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: zS+uJome/Qf/w3dDAxfCP6Qp5rLfEPhVf/zS/AkTU9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:06:af:8a:40:40:a1:e4:f5:8b:9a:c8:69:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Sep 25 17:01:43 2026 GMT
Not After : Sep 26 17:01:43 2026 GMT
Subject: CN=89e620dce3f2748ca3c4479424bf5932a3f69543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:eb:70:28:63:34:dd:da:ea:5b:2a:58:7a:
c6:ad:5f:e1:2f:f9:32:fb:40:d7:8a:4e:39:89:2c:
4b:f1:2e:fd:0a:17:77:06:2b:e5:3d:ea:eb:8f:0b:
16:74:1b:be:fe:97:de:19:66:c2:78:0e:df:96:09:
0c:1f:49:95:d7:37:84:b3:6f:cc:52:36:23:87:bb:
a9:b6:98:9d:11:9f:00:27:ec:da:18:ad:5d:7d:70:
39:b2:f1:96:a7:90:99:95:a0:9c:ce:3b:16:df:17:
ae:4b:60:4e:b1:47:99:8f:9d:e7:d9:b2:70:fb:9f:
6f:b7:7a:b9:4a:9c:68:72:e1:19:a3:37:60:49:d8:
46:3d:fd:7d:ec:68:59:e9:c6:8b:a0:29:86:92:bf:
e8:e9:58:00:65:8e:4e:22:38:ec:62:cd:51:7a:89:
fc:73:39:bf:81:b2:64:ca:bd:e9:f5:42:7b:1e:1a:
da:c3:27:2e:ec:68:0a:88:e1:f7:22:00:64:6f:bd:
c6:2a:f5:e7:c4:0e:02:55:6a:68:cc:fa:50:c1:24:
25:29:cd:29:72:70:ed:38:40:63:ae:e6:09:e3:6f:
d4:cb:1a:3c:bc:37:c4:ac:f6:6a:c2:ee:88:43:94:
6f:98:0a:00:c2:41:e4:d3:c3:dd:c8:ee:fb:15:f0:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:20:DC:E3:F2:74:8C:A3:C4:47:94:24:BF:59:32:A3:F6:95:43
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:94:eb:53:84:ce:84:6a:7a:64:29:b5:d8:c4:38:36:a2:
22:02:4b:d0:cb:c4:25:07:81:54:4e:7a:60:9e:db:82:c4:ea:
93:74:fa:bc:1f:0e:75:87:00:d2:43:2a:46:f6:c8:a6:db:66:
3b:82:55:26:5e:20:5b:4c:6b:81:66:2c:c4:7c:d3:3e:6f:c0:
91:5b:a9:e7:d2:bd:4e:43:bc:43:f0:f7:c9:a9:75:97:38:51:
b1:57:2f:2b:c6:dc:85:7c:12:f9:13:24:27:0e:6d:2f:bf:dc:
fe:72:22:80:e9:d4:c6:7c:4e:69:47:39:af:74:7f:41:16:4b:
23:d0:08:f0:4f:38:b9:eb:d8:31:f5:6f:61:2a:d7:4d:8e:8a:
e9:8e:2f:9a:f0:ed:37:d7:d6:ee:28:6f:1d:7c:7c:7b:0c:d2:
35:a8:f4:bf:22:ab:3b:10:bd:35:f7:66:e5:7a:28:13:4a:1c:
79:ed:c8:5a:42:c6:44:eb:cb:06:43:7a:30:53:ec:20:66:c8:
7a:42:fa:79:37:f4:97:4b:cd:93:db:62:a2:19:aa:d5:cb:67:
4c:6a:52:b8:4f:29:d1:ad:98:06:97:e3:9e:b2:c5:49:12:2d:
c5:a9:69:a0:51:d2:a3:62:3e:0d:cf:f8:3f:46:2f:9b:78:71:
24:c5:c4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZhAavikBAoeT1i5rIaT+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm
ZmYzYWUwHhcNMjYwOTI1MTcwMTQzWhcNMjYwOTI2MTcwMTQzWjAzMTEwLwYDVQQD
Eyg4OWU2MjBkY2UzZjI3NDhjYTNjNDQ3OTQyNGJmNTkzMmEzZjY5NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj7rcChjNN3a6lsqWHrGrV/hL/ky
+0DXik45iSxL8S79Chd3BivlPerrjwsWdBu+/pfeGWbCeA7flgkMH0mV1zeEs2/M
UjYjh7uptpidEZ8AJ+zaGK1dfXA5svGWp5CZlaCczjsW3xeuS2BOsUeZj53n2bJw
+59vt3q5SpxocuEZozdgSdhGPf197GhZ6caLoCmGkr/o6VgAZY5OIjjsYs1Reon8
czm/gbJkyr3p9UJ7Hhrawycu7GgKiOH3IgBkb73GKvXnxA4CVWpozPpQwSQlKc0p
cnDtOEBjruYJ42/Uyxo8vDfErPZqwu6IQ5RvmAoAwkHk08PdyO77FfA0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInmINzj8nSMo8RHlCS/WTKj9pVDMB8GA1UdIwQY
MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt
ZTEyOTZiMzJhMTFmLzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm
LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZ+U61OE
zoRqemQptdjEODaiIgJL0MvEJQeBVE56YJ7bgsTqk3T6vB8OdYcA0kMqRvbIpttm
O4JVJl4gW0xrgWYsxHzTPm/AkVup59K9TkO8Q/D3yal1lzhRsVcvK8bchXwS+RMk
Jw5tL7/c/nIigOnUxnxOaUc5r3R/QRZLI9AI8E84uevYMfVvYSrXTY6K6Y4vmvDt
N9fW7ihvHXx8ewzSNaj0vyKrOxC9Nfdm5XooE0ocee3IWkLGROvLBkN6MFPsIGbI
ekL6eTf0l0vNk9tiohmq1ctnTGpSuE8p0a2YBpfjnrLFSRItxalpoFHSo2I+Dc/4
P0Yvm3hxJMXEgA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:02 2026 by rpki-client