Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: /ZfsXkpyWu1rPSbJZhnIBe7SrXuHKZzwpW6Xf6YM+FA=
Subject key identifier: F7:F3:91:E2:9B:79:0A:AA:D1:82:6B:3B:36:4C:06:DB:43:79:06:F2
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 01A0F18BD2855E429739A5284563228B19BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 09:01:07 +0000
Manifest this update: Wed 30 Sep 2026 09:01:07 +0000
Manifest next update: Thu 01 Oct 2026 09:01:07 +0000
Files and hashes: 1: GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa (hash: YiX7Qs2KST8thxfSYFwxFXSaSOJJEYBSqj0X1pLOywI=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: WeviF+ADPcw2jpA0k7yj9uLmzARhlC2RmyhK/rDyk9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:d2:85:5e:42:97:39:a5:28:45:63:22:8b:19:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Sep 30 09:01:07 2026 GMT
Not After : Oct 1 09:01:07 2026 GMT
Subject: CN=f7f391e29b790aaad1826b3b364c06db437906f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:f1:4f:7d:c7:05:12:bf:e0:1a:df:19:6f:
e7:c8:51:28:6a:ed:ba:6a:27:cf:3b:7d:b9:90:c5:
63:8b:cc:58:2a:1e:6b:1b:1e:b3:28:2c:61:61:1d:
60:0d:37:73:0f:10:c3:b6:db:ec:af:24:c6:a9:66:
ef:85:30:4b:4d:da:3f:bf:40:8d:32:24:81:67:24:
28:50:89:8a:62:b9:7b:d2:e6:5d:08:c1:8b:76:ab:
dc:46:ac:47:1c:04:ee:a9:28:ef:18:db:4a:1c:82:
08:bc:65:3c:2d:5e:69:f7:af:f0:b5:b1:7e:c9:4d:
08:99:d4:e2:b8:56:19:30:dd:54:01:43:ce:b1:4b:
c4:f6:e6:54:df:b7:7a:3a:e6:8f:44:8a:26:6f:e1:
1a:cb:6b:cc:66:b6:b7:8b:92:a3:71:30:4d:4c:6b:
e7:44:24:77:c1:bb:a4:a6:d0:72:71:ba:6b:3b:74:
27:88:c1:fc:24:6b:f9:04:09:4c:af:1f:57:ed:b6:
19:0c:1a:55:a5:08:bb:9a:da:73:0a:77:f6:30:1f:
db:71:53:e0:b1:ff:2b:76:da:41:e4:d9:6f:c9:92:
fe:9f:88:eb:39:5a:9d:fb:a8:f2:bf:d5:fe:b6:0f:
79:4b:0e:53:68:ad:0f:87:90:84:b5:75:f4:6b:78:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:91:E2:9B:79:0A:AA:D1:82:6B:3B:36:4C:06:DB:43:79:06:F2
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:06:99:27:7a:26:4e:20:fa:10:fa:c0:c0:11:81:30:c4:
6a:21:cd:31:85:8f:57:de:52:03:9f:1a:34:09:08:8f:a3:d7:
07:79:e2:a5:61:c8:08:71:6e:75:8b:38:ad:b6:46:dc:c9:c3:
d8:14:12:57:2a:03:ba:95:1a:f3:55:4b:e1:74:84:36:0e:d4:
1e:18:66:f9:f1:d7:21:d4:89:9d:5a:f0:d3:fe:63:9f:de:2e:
5e:63:c1:d1:86:b5:92:50:46:d0:ec:cf:f4:9c:a3:6b:05:b9:
6d:94:fd:4b:3e:84:43:87:63:be:51:b5:8e:38:8a:50:09:b6:
fa:a3:a8:6d:6c:f8:7a:d0:fa:d2:f4:5a:a2:7b:55:24:8a:97:
0b:14:d6:e1:fa:dd:6e:b3:13:3d:16:fc:08:00:fd:a0:21:65:
1b:df:f1:b4:b4:e6:49:60:8b:eb:4e:14:cd:e4:26:58:db:70:
05:29:6e:4c:dd:ec:95:fe:89:93:43:fc:a5:49:9e:ac:62:fa:
1e:15:9d:12:be:91:39:35:32:4a:b9:f4:75:80:8c:a9:51:b4:
8f:a9:4c:c5:7b:cf:03:4f:39:5a:fc:23:0f:23:38:7f:81:d1:
e0:ea:f3:2c:00:63:3f:16:a7:5e:cd:28:b9:98:ee:37:14:e8:
e7:4a:94:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxi9KFXkKXOaUoRWMiixm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4
YmRiYmEwHhcNMjYwOTMwMDkwMTA3WhcNMjYxMDAxMDkwMTA3WjAzMTEwLwYDVQQD
EyhmN2YzOTFlMjliNzkwYWFhZDE4MjZiM2IzNjRjMDZkYjQzNzkwNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8jxT33HBRK/4BrfGW/nyFEoau26
aifPO325kMVji8xYKh5rGx6zKCxhYR1gDTdzDxDDttvsryTGqWbvhTBLTdo/v0CN
MiSBZyQoUImKYrl70uZdCMGLdqvcRqxHHATuqSjvGNtKHIIIvGU8LV5p96/wtbF+
yU0ImdTiuFYZMN1UAUPOsUvE9uZU37d6OuaPRIomb+Eay2vMZra3i5KjcTBNTGvn
RCR3wbukptBycbprO3QniMH8JGv5BAlMrx9X7bYZDBpVpQi7mtpzCnf2MB/bcVPg
sf8rdtpB5NlvyZL+n4jrOVqd+6jyv9X+tg95Sw5TaK0Ph5CEtXX0a3hzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfzkeKbeQqq0YJrOzZMBttDeQbyMB8GA1UdIwQY
MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt
MTNiYmNkMGY5Mzc2LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2
LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR0GmSd6
Jk4g+hD6wMARgTDEaiHNMYWPV95SA58aNAkIj6PXB3nipWHICHFudYs4rbZG3MnD
2BQSVyoDupUa81VL4XSENg7UHhhm+fHXIdSJnVrw0/5jn94uXmPB0Ya1klBG0OzP
9JyjawW5bZT9Sz6EQ4djvlG1jjiKUAm2+qOobWz4etD60vRaontVJIqXCxTW4frd
brMTPRb8CAD9oCFlG9/xtLTmSWCL604UzeQmWNtwBSluTN3slf6Jk0P8pUmerGL6
HhWdEr6ROTUySrn0dYCMqVG0j6lMxXvPA085WvwjDyM4f4HR4OrzLABjPxanXs0o
uZjuNxTo50qUYw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:00 2026 by rpki-client