Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: jpFbxI2feKpLtorVmGG7z2k0tVgc9bSHMBgw11DHQiM=
Subject key identifier: F8:64:2F:78:79:B4:A2:55:8B:5B:28:2B:15:67:0C:B5:6F:C5:F2:BE
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 01A0CEC84115C33CD74D2418B436D2A1DC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: 0140
Signing time: Wed 23 Sep 2026 15:00:25 +0000
Manifest this update: Wed 23 Sep 2026 15:00:25 +0000
Manifest next update: Thu 24 Sep 2026 15:00:25 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: kIprfSApx1l6rNT8XW9BchC+Fql2DbVml0+t8Zk0H00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:41:15:c3:3c:d7:4d:24:18:b4:36:d2:a1:dc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Sep 23 15:00:25 2026 GMT
Not After : Sep 24 15:00:25 2026 GMT
Subject: CN=f8642f7879b4a2558b5b282b15670cb56fc5f2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:7b:75:0a:39:f9:e7:e2:77:d3:14:9f:7d:
94:71:0a:0b:fd:cd:ab:10:83:16:f8:d3:15:5c:33:
d1:5e:12:7d:66:88:fd:a7:d0:40:e2:52:7a:52:07:
cc:6c:c1:2c:3b:c5:7b:59:54:85:64:02:3a:d0:b7:
92:78:69:c9:a2:1d:da:40:99:db:14:e9:ff:03:4d:
08:eb:a7:2e:a7:70:c9:df:a4:f4:75:98:fd:b5:36:
ad:e4:af:af:4b:7c:e2:9a:33:fc:70:44:3b:3a:60:
bd:d3:b2:b6:9a:53:3b:4c:3c:60:ff:2f:63:85:a5:
27:0b:8f:ee:2d:c8:ee:86:79:99:a6:99:85:03:e5:
9d:d0:10:46:ac:0b:53:c2:1c:78:98:da:04:08:e0:
86:d9:30:aa:07:a7:ad:cb:1d:a2:b2:15:53:95:f3:
b0:1c:bd:6a:d7:68:04:b2:0d:e1:69:10:5e:f1:40:
a8:04:8d:63:45:a0:0d:37:5a:f4:c9:dc:47:0f:be:
20:82:f6:45:bb:e5:f0:8e:e2:a1:7f:02:98:a1:80:
3d:f2:45:e7:ad:03:f8:9e:29:6b:0d:5c:81:d5:a1:
82:7d:d7:90:a2:d3:1a:b9:ff:9d:1a:f2:9b:33:9a:
4b:97:19:05:ad:11:7f:7f:10:9b:c4:dc:65:8a:2a:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:2F:78:79:B4:A2:55:8B:5B:28:2B:15:67:0C:B5:6F:C5:F2:BE
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:e0:54:ce:b1:4a:44:a9:e4:95:d4:f8:08:be:e2:5a:88:
d3:21:7c:6b:a6:69:5c:a3:75:10:6b:1d:14:d8:05:df:bd:28:
70:c8:cf:2d:13:ba:ca:ae:21:c5:80:51:2d:ca:93:09:90:2f:
a6:a9:0b:81:b6:e4:aa:c3:3e:9c:24:c0:2a:6c:0f:8d:3d:92:
75:bb:1d:a0:30:56:6b:dc:e1:61:e3:98:33:f2:32:5e:1e:0e:
8d:03:fe:34:32:b5:da:69:67:b8:25:49:83:67:0a:1f:1b:fb:
cc:5b:1b:57:8e:3e:67:a4:d3:92:f0:ae:40:ed:46:c9:dc:33:
39:96:0c:48:4e:69:be:cf:aa:52:99:e0:77:e9:bc:8d:1e:36:
4b:40:d7:b7:20:60:e5:54:d8:69:06:f1:af:8b:a5:d8:98:b7:
99:5a:25:54:66:dc:6a:c9:46:71:09:99:3e:89:24:fc:c7:32:
54:67:65:2a:f3:6e:06:cf:f7:d6:d9:04:1d:fd:c9:ca:b8:ea:
96:a6:b7:8b:60:de:9d:94:04:04:0b:16:0e:75:0d:4f:4d:61:
57:64:ac:b9:c1:83:28:e7:1f:f3:58:0a:31:52:73:36:2c:55:
5f:56:2b:6e:f7:a4:81:83:50:a6:a5:75:0d:09:66:b9:76:d4:
d1:b7:44:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyEEVwzzXTSQYtDbSodxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjVkZmI5NTBkNjA0OGZkYzc5OGY2ZTBkM2ZkYTUxN2Vj
YmM2NDgwHhcNMjYwOTIzMTUwMDI1WhcNMjYwOTI0MTUwMDI1WjAzMTEwLwYDVQQD
EyhmODY0MmY3ODc5YjRhMjU1OGI1YjI4MmIxNTY3MGNiNTZmYzVmMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknR7dQo5+efid9MUn32UcQoL/c2r
EIMW+NMVXDPRXhJ9Zoj9p9BA4lJ6UgfMbMEsO8V7WVSFZAI60LeSeGnJoh3aQJnb
FOn/A00I66cup3DJ36T0dZj9tTat5K+vS3zimjP8cEQ7OmC907K2mlM7TDxg/y9j
haUnC4/uLcjuhnmZppmFA+Wd0BBGrAtTwhx4mNoECOCG2TCqB6etyx2ishVTlfOw
HL1q12gEsg3haRBe8UCoBI1jRaANN1r0ydxHD74ggvZFu+XwjuKhfwKYoYA98kXn
rQP4nilrDVyB1aGCfdeQotMauf+dGvKbM5pLlxkFrRF/fxCbxNxliipiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhkL3h5tKJVi1soKxVnDLVvxfK+MB8GA1UdIwQY
MBaAFMu137lQ1gSP3HmPbg0/2lF+y8ZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lZTcxNjUtZWI2My00MzQ2LWE4ZGYt
NWY1YTkzZGE1MGY4LzEveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lZTcxNjUtZWI2My00MzQ2LWE4ZGYtNWY1YTkzZGE1MGY4
LzEveTdYZnVWRFdCSV9jZVk5dURUX2FVWDdMeGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr/gVM6x
SkSp5JXU+Ai+4lqI0yF8a6ZpXKN1EGsdFNgF370ocMjPLRO6yq4hxYBRLcqTCZAv
pqkLgbbkqsM+nCTAKmwPjT2SdbsdoDBWa9zhYeOYM/IyXh4OjQP+NDK12mlnuCVJ
g2cKHxv7zFsbV44+Z6TTkvCuQO1GydwzOZYMSE5pvs+qUpngd+m8jR42S0DXtyBg
5VTYaQbxr4ul2Ji3mVolVGbcaslGcQmZPokk/McyVGdlKvNuBs/31tkEHf3Jyrjq
lqa3i2DenZQEBAsWDnUNT01hV2SsucGDKOcf81gKMVJzNixVX1YrbvekgYNQpqV1
DQlmuXbU0bdErQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:12 2026 by rpki-client