Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: TSz8ZaGlfxvDBug9t6ddRX1t3UNct0ZWBeRLcNIBXPw=
Subject key identifier: A3:CD:01:42:9E:0B:7D:09:E3:3A:4E:48:B3:05:63:CA:A0:21:DE:DB
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A1DD5E0E42C540EE758AD4D3DA3A463952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0DD6
Signing time: Sun 15 Nov 2026 04:01:31 +0000
Manifest this update: Sun 15 Nov 2026 04:01:31 +0000
Manifest next update: Mon 16 Nov 2026 04:01:31 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: JlzCZ7RV+NPyPdDGovwTlrahw0Vi27NoUWGBG05C3kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:0e:42:c5:40:ee:75:8a:d4:d3:da:3a:46:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Nov 15 04:01:31 2026 GMT
Not After : Nov 16 04:01:31 2026 GMT
Subject: CN=a3cd01429e0b7d09e33a4e48b30563caa021dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:71:17:be:18:de:0a:5d:9e:4c:42:a3:28:
04:e2:1d:5a:c2:51:63:56:a6:65:4c:02:ce:93:bf:
76:6e:ca:3c:2a:9d:ff:6b:0f:48:f6:78:60:04:d0:
cd:b5:9a:88:c2:b9:12:dc:8c:a4:7f:a7:50:35:5b:
e8:8d:a7:b5:80:5e:ed:ce:bc:3a:a3:2c:4c:86:05:
b1:3c:72:9e:05:6c:ba:1d:83:c8:08:80:cd:48:25:
57:82:94:64:4c:ee:35:29:93:9a:78:4c:46:81:db:
ba:32:f5:08:d1:2a:62:a9:ae:40:1b:3b:91:66:bc:
8e:83:7b:75:06:60:f8:bd:c4:ed:b9:b9:7f:bb:85:
8b:9d:2f:35:eb:10:c7:e5:cb:2e:22:24:ed:43:8c:
c4:0f:25:3b:bb:48:1f:3b:ea:9b:82:32:38:4e:9a:
97:05:a9:d3:82:fe:0f:32:b5:c7:ec:3a:02:ed:81:
e2:96:05:e7:a6:b8:ce:59:49:a0:d1:fa:f5:0d:6c:
73:6b:29:97:d9:61:51:b1:99:18:1f:a9:14:58:b3:
e4:d7:86:5a:1a:86:ef:40:6b:37:35:f8:6d:ca:2e:
db:d5:b9:9a:c4:0c:a7:10:5d:79:76:1f:eb:ae:78:
2d:7b:e3:be:b4:de:ca:a6:59:98:3d:2f:be:4c:55:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:01:42:9E:0B:7D:09:E3:3A:4E:48:B3:05:63:CA:A0:21:DE:DB
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bc:4b:e0:00:cc:0d:3e:e5:fc:30:7e:8a:df:e4:e4:5b:24:
0b:f4:0a:f0:29:19:99:59:31:e6:a3:f3:4e:74:83:33:f8:ce:
37:fd:99:a3:ec:4a:e8:39:bc:be:00:aa:84:c3:64:f5:cc:aa:
f2:a6:0b:0f:06:94:27:69:36:91:4f:fc:7b:30:5d:b4:9e:b7:
4b:42:b6:0a:b3:1a:dd:14:aa:f5:fc:53:7a:b6:ab:37:71:4f:
2b:d3:65:4c:b1:ef:2e:b3:31:00:79:b4:14:0e:53:b0:07:bc:
2b:81:11:66:6e:3b:0e:c8:a1:28:1a:2b:27:53:e3:ef:29:98:
ec:95:df:1a:63:a0:99:7f:43:ce:2e:9e:a7:d0:b6:ad:02:1d:
5e:fe:23:bc:c2:29:48:5a:69:0a:94:63:b5:52:cf:4e:42:42:
6c:32:36:10:e7:a6:a4:94:5f:ef:82:89:8b:8e:8e:d0:dd:b7:
a4:2c:f0:9d:bd:a0:b5:25:87:1f:7d:ad:75:ca:fa:50:d4:0d:
66:11:77:66:e6:c6:3b:9f:1d:93:22:d0:4d:34:32:fb:1d:e7:
29:38:9b:64:db:2c:df:b6:35:0a:1b:e9:1d:4c:a9:47:45:be:
63:b6:51:0a:37:82:03:0a:8e:25:30:27:34:7f:4f:2f:79:d1:
37:83:d7:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXg5CxUDudYrU09o6RjlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk
ZDNlNTcwHhcNMjYxMTE1MDQwMTMxWhcNMjYxMTE2MDQwMTMxWjAzMTEwLwYDVQQD
EyhhM2NkMDE0MjllMGI3ZDA5ZTMzYTRlNDhiMzA1NjNjYWEwMjFkZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5xF74Y3gpdnkxCoygE4h1awlFj
VqZlTALOk792bso8Kp3/aw9I9nhgBNDNtZqIwrkS3Iykf6dQNVvojae1gF7tzrw6
oyxMhgWxPHKeBWy6HYPICIDNSCVXgpRkTO41KZOaeExGgdu6MvUI0Spiqa5AGzuR
ZryOg3t1BmD4vcTtubl/u4WLnS816xDH5csuIiTtQ4zEDyU7u0gfO+qbgjI4TpqX
BanTgv4PMrXH7DoC7YHilgXnprjOWUmg0fr1DWxzaymX2WFRsZkYH6kUWLPk14Za
GobvQGs3Nfhtyi7b1bmaxAynEF15dh/rrngte+O+tN7KplmYPS++TFVYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPNAUKeC30J4zpOSLMFY8qgId7bMB8GA1UdIwQY
MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt
N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3
LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbxL4ADM
DT7l/DB+it/k5FskC/QK8CkZmVkx5qPzTnSDM/jON/2Zo+xK6Dm8vgCqhMNk9cyq
8qYLDwaUJ2k2kU/8ezBdtJ63S0K2CrMa3RSq9fxTerarN3FPK9NlTLHvLrMxAHm0
FA5TsAe8K4ERZm47DsihKBorJ1Pj7ymY7JXfGmOgmX9Dzi6ep9C2rQIdXv4jvMIp
SFppCpRjtVLPTkJCbDI2EOempJRf74KJi46O0N23pCzwnb2gtSWHH32tdcr6UNQN
ZhF3ZubGO58dkyLQTTQy+x3nKTibZNss37Y1ChvpHUypR0W+Y7ZRCjeCAwqOJTAn
NH9PL3nRN4PXkA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:02:25 2026 by rpki-client