Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: ulHfD4FGvezOHIP8jUw7ovPrDIXbFkGTxtaDoVWJbwQ=
Subject key identifier: B6:8D:C4:37:C5:79:55:5A:D7:D2:AA:1E:A0:CC:D3:75:34:60:8B:63
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 01A1076F4203D4928BBCDBA27F7A7762A456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 1A2D
Signing time: Sun 04 Oct 2026 15:01:34 +0000
Manifest this update: Sun 04 Oct 2026 15:01:34 +0000
Manifest next update: Mon 05 Oct 2026 15:01:34 +0000
Files and hashes: 1: bG2ai37iVGCdW98mBInWrIrYPA0.roa (hash: xkK4nEMctXQLAAuz2jXwdJcPBigpmy2jrTbYqyPGIj4=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: lAuCocJmqDyYXJ5a29ywZxPet61Z9Yu5Bfu6OyNjuZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:42:03:d4:92:8b:bc:db:a2:7f:7a:77:62:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Oct 4 15:01:34 2026 GMT
Not After : Oct 5 15:01:34 2026 GMT
Subject: CN=b68dc437c579555ad7d2aa1ea0ccd37534608b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:b3:27:97:bd:99:4e:00:86:97:1d:e4:d3:
e9:53:06:bb:8b:06:de:fb:2d:25:39:43:91:6e:3b:
ad:d6:d4:75:89:4b:ab:02:0d:5b:63:51:7b:92:f1:
15:7f:c5:37:da:2a:b2:7f:2f:83:c4:43:6c:7f:35:
aa:e0:1d:09:33:f7:27:c7:d5:06:93:0a:5b:15:23:
09:56:a1:41:69:e4:d0:b0:f2:74:39:4f:e8:33:03:
7f:8f:37:59:99:76:ce:3b:d3:da:2f:b9:79:b0:32:
a8:a0:fd:cc:7e:a1:d2:66:84:85:05:10:87:f1:c0:
7f:1a:20:a4:a1:81:d1:ba:39:10:e6:dd:d4:cf:ee:
23:09:8f:3a:93:39:95:17:31:32:f5:35:86:ce:58:
c8:25:f9:76:62:ed:30:42:6d:bc:7c:5d:1a:1f:40:
d5:62:88:37:6d:4b:cd:b3:d8:b4:07:4c:00:b7:d8:
de:95:01:a0:23:88:21:53:ac:fd:da:08:27:ae:98:
a4:11:40:ec:a7:36:6f:bd:5e:00:bf:7c:0d:f7:e3:
f8:27:1b:2c:30:20:9b:3f:ab:70:9a:fa:6b:93:5f:
a0:89:aa:cf:e0:34:9a:9f:47:d7:8a:b2:c4:3d:97:
7b:1c:ed:57:83:cd:06:38:03:85:56:c4:c6:36:92:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:C4:37:C5:79:55:5A:D7:D2:AA:1E:A0:CC:D3:75:34:60:8B:63
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9a:a1:fa:c4:5d:f3:61:d5:17:38:81:ba:71:e8:f8:e9:bb:
1b:55:a3:26:e2:28:0d:f7:85:53:05:cf:6b:db:93:62:b7:ab:
ce:d6:18:16:a3:b9:79:f8:ef:52:be:d3:5f:5e:09:ed:a3:40:
11:fd:05:fc:9c:f4:2f:3d:3e:3d:28:d0:e8:15:58:b0:b8:6f:
17:a4:a5:4e:55:02:50:3e:90:9a:c1:61:4b:bc:ce:bc:63:7f:
d0:46:59:9f:7d:e7:52:78:67:c4:39:f2:96:06:10:73:22:0e:
5a:f7:e9:bc:48:34:67:17:7d:fa:bd:a8:37:fe:3b:7a:1e:25:
00:64:b0:b1:b1:c3:68:1d:35:a5:b9:80:15:e6:cd:46:80:97:
f3:64:72:5d:ab:e8:09:11:ae:1f:d7:1a:b4:9f:2e:35:b6:08:
31:fd:52:ae:47:60:91:fb:f8:77:ba:23:95:5a:e5:3f:86:48:
40:ee:dc:46:f7:d9:3f:54:36:1a:38:1e:39:c5:54:5a:8f:a2:
be:35:ed:ce:87:34:a7:c4:f9:82:ff:49:37:84:23:5b:cd:e7:
90:30:9f:c9:ed:90:a1:4e:e0:4d:2b:02:c0:7a:48:bb:c8:1b:
c1:64:18:bf:34:7e:28:15:81:06:f8:c4:af:b0:71:6d:5b:e1:
38:86:8c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHb0ID1JKLvNuif3p3YqRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNmRjZGFkOTkyOTA0NTZjNmQ3YzE4ZWIxYzA1OGQ5NDEw
ODg4MDEwHhcNMjYxMDA0MTUwMTM0WhcNMjYxMDA1MTUwMTM0WjAzMTEwLwYDVQQD
EyhiNjhkYzQzN2M1Nzk1NTVhZDdkMmFhMWVhMGNjZDM3NTM0NjA4YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWzJ5e9mU4Ahpcd5NPpUwa7iwbe
+y0lOUORbjut1tR1iUurAg1bY1F7kvEVf8U32iqyfy+DxENsfzWq4B0JM/cnx9UG
kwpbFSMJVqFBaeTQsPJ0OU/oMwN/jzdZmXbOO9PaL7l5sDKooP3MfqHSZoSFBRCH
8cB/GiCkoYHRujkQ5t3Uz+4jCY86kzmVFzEy9TWGzljIJfl2Yu0wQm28fF0aH0DV
Yog3bUvNs9i0B0wAt9jelQGgI4ghU6z92ggnrpikEUDspzZvvV4Av3wN9+P4Jxss
MCCbP6twmvprk1+giarP4DSan0fXirLEPZd7HO1Xg80GOAOFVsTGNpIxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaNxDfFeVVa19KqHqDM03U0YItjMB8GA1UdIwQY
MBaAFMptza2ZKQRWxtfBjrHAWNlBCIgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmIt
YmM0NzVkMDA4ODY5LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83Njc1OWUtMzk2NC00YzRmLTg3NmItYmM0NzVkMDA4ODY5
LzEveW0zTnJaa3BCRmJHMThHT3NjQlkyVUVJaUFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5qh+sRd
82HVFziBunHo+Om7G1WjJuIoDfeFUwXPa9uTYrerztYYFqO5efjvUr7TX14J7aNA
Ef0F/Jz0Lz0+PSjQ6BVYsLhvF6SlTlUCUD6QmsFhS7zOvGN/0EZZn33nUnhnxDny
lgYQcyIOWvfpvEg0Zxd9+r2oN/47eh4lAGSwsbHDaB01pbmAFebNRoCX82RyXavo
CRGuH9catJ8uNbYIMf1Srkdgkfv4d7ojlVrlP4ZIQO7cRvfZP1Q2GjgeOcVUWo+i
vjXtzoc0p8T5gv9JN4QjW83nkDCfye2QoU7gTSsCwHpIu8gbwWQYvzR+KBWBBvjE
r7BxbVvhOIaMdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:07:13 2026 by rpki-client