Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: NMKcjs5/uXPK6Ja9kmPNutyNtO+FP4MebcM1dywpBE4=
Subject key identifier: EA:9F:E3:80:6D:30:A9:97:B0:DC:06:17:F0:74:32:D7:F1:6E:CD:8F
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 01A0FC0FA8CD5A30B7290397AAE6A8D523DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0A25
Signing time: Fri 02 Oct 2026 10:01:19 +0000
Manifest this update: Fri 02 Oct 2026 10:01:19 +0000
Manifest next update: Sat 03 Oct 2026 10:01:19 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: dTln5fbD2hK7AtY9yvR+an/glZGcwLx6ceCSFFBMHLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:0f:a8:cd:5a:30:b7:29:03:97:aa:e6:a8:d5:23:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Oct 2 10:01:19 2026 GMT
Not After : Oct 3 10:01:19 2026 GMT
Subject: CN=ea9fe3806d30a997b0dc0617f07432d7f16ecd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:c7:49:4b:85:fb:02:ed:cb:de:ab:68:e2:
18:ce:68:5a:23:c5:a8:52:19:8c:df:45:fb:15:c6:
07:20:dd:51:4a:74:5d:48:bd:88:cc:d6:be:61:4b:
ad:b6:90:8c:53:78:c1:ad:36:24:7d:af:cd:bf:43:
fa:8d:e1:36:52:4b:d3:14:4e:4e:b3:50:11:58:d0:
08:a4:a8:c9:8a:83:4b:90:a9:f6:1e:2b:8e:ce:bb:
d3:48:1a:6c:3e:47:bc:a2:d2:cd:7f:93:9b:96:05:
a6:ca:99:b8:9a:9b:51:e3:ff:a1:d2:86:9a:32:a6:
ba:a6:f7:eb:0f:b1:fc:62:20:1a:cd:ef:60:3f:35:
65:19:57:25:2d:33:45:dc:38:dc:f6:c6:2b:bd:5f:
e1:b8:6e:f2:8d:c5:cf:b6:5f:34:0a:4e:6b:82:e1:
9a:00:e6:22:4d:fe:f2:c8:6d:fb:20:e7:cf:37:7e:
87:97:63:f3:fc:7e:a5:bf:3b:58:af:0e:5f:41:80:
47:ed:a9:5b:b5:a5:ac:97:e1:6b:76:f3:2d:74:35:
32:ed:f2:7e:05:91:cb:13:bd:a5:e1:41:0c:57:7d:
a5:b3:16:2f:61:14:5f:48:b3:84:57:3a:22:29:59:
f4:6b:f7:a4:7f:f8:6b:c7:73:03:fb:1d:43:2e:e3:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:E3:80:6D:30:A9:97:B0:DC:06:17:F0:74:32:D7:F1:6E:CD:8F
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:4c:3f:65:b5:2d:5d:12:8c:65:8f:93:fc:ef:4d:3d:19:
eb:2e:db:32:a3:8d:aa:c0:08:d2:43:f4:02:56:db:b1:09:00:
c0:d0:28:ea:18:fd:5e:cb:3e:51:66:1b:cd:8d:73:86:fb:7b:
21:09:77:b9:aa:57:68:52:57:5c:47:52:7c:26:b0:ce:ed:75:
8f:ac:7c:e0:8c:5e:e9:79:ea:d5:93:d3:2a:7f:31:f3:e7:3d:
e5:c6:52:88:9b:75:d6:09:f6:55:bf:e2:8e:66:d0:20:ea:1a:
07:31:13:35:fa:d5:b4:75:72:a4:3c:79:9b:00:a9:f1:eb:80:
15:e3:90:a1:38:0d:55:f0:99:8d:49:1f:b7:27:af:5e:4d:a8:
59:50:c8:d2:63:fd:47:a6:c3:b2:43:39:1f:a0:e2:1e:8f:57:
f0:61:e2:a2:a0:61:ca:09:06:05:dc:6f:01:cc:13:f1:38:b6:
73:61:7b:a1:55:3e:5e:36:3c:37:31:06:fc:8e:02:e1:73:b6:
bb:82:aa:f6:f9:af:32:6d:da:4e:48:fc:51:b3:2b:ac:8f:78:
d5:58:c5:89:d7:48:d7:91:72:e6:98:cf:86:3e:45:ef:23:77:
c8:f9:72:1b:2d:68:12:50:27:ae:0b:91:c1:43:3f:76:91:26:
95:38:ed:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8D6jNWjC3KQOXquao1SPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MThjNDAxOTQ3NGNjODFlYzY2MWZjZTY0ZTZjOTM4OTcy
MTk2ZGEwHhcNMjYxMDAyMTAwMTE5WhcNMjYxMDAzMTAwMTE5WjAzMTEwLwYDVQQD
EyhlYTlmZTM4MDZkMzBhOTk3YjBkYzA2MTdmMDc0MzJkN2YxNmVjZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszTHSUuF+wLty96raOIYzmhaI8Wo
UhmM30X7FcYHIN1RSnRdSL2IzNa+YUuttpCMU3jBrTYkfa/Nv0P6jeE2UkvTFE5O
s1ARWNAIpKjJioNLkKn2HiuOzrvTSBpsPke8otLNf5OblgWmypm4mptR4/+h0oaa
Mqa6pvfrD7H8YiAaze9gPzVlGVclLTNF3Djc9sYrvV/huG7yjcXPtl80Ck5rguGa
AOYiTf7yyG37IOfPN36Hl2Pz/H6lvztYrw5fQYBH7albtaWsl+FrdvMtdDUy7fJ+
BZHLE72l4UEMV32lsxYvYRRfSLOEVzoiKVn0a/ekf/hrx3MD+x1DLuNqLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqf44BtMKmXsNwGF/B0Mtfxbs2PMB8GA1UdIwQY
MBaAFMkYxAGUdMyB7GYfzmTmyTiXIZbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYt
OGFiY2JiNjVjNjIxLzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYtOGFiY2JiNjVjNjIx
LzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDBMP2W1
LV0SjGWPk/zvTT0Z6y7bMqONqsAI0kP0AlbbsQkAwNAo6hj9Xss+UWYbzY1zhvt7
IQl3uapXaFJXXEdSfCawzu11j6x84Ixe6Xnq1ZPTKn8x8+c95cZSiJt11gn2Vb/i
jmbQIOoaBzETNfrVtHVypDx5mwCp8euAFeOQoTgNVfCZjUkftyevXk2oWVDI0mP9
R6bDskM5H6DiHo9X8GHioqBhygkGBdxvAcwT8Ti2c2F7oVU+XjY8NzEG/I4C4XO2
u4Kq9vmvMm3aTkj8UbMrrI941VjFiddI15Fy5pjPhj5F7yN3yPlyGy1oElAnrguR
wUM/dpEmlTjtZQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:28:52 2026 by rpki-client