Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: 25J70UnRM1yA+MgoDAUIBR25RxPd4yCYyQNb15BsQBM=
Subject key identifier: A3:D0:B4:9D:86:17:27:A6:32:D8:0C:AC:A6:7D:F4:4F:65:6D:B3:A9
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 01A0DA287AFE96E7C4A763BFE89D48A36DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 038B
Signing time: Fri 25 Sep 2026 20:01:21 +0000
Manifest this update: Fri 25 Sep 2026 20:01:21 +0000
Manifest next update: Sat 26 Sep 2026 20:01:21 +0000
Files and hashes: 1: 2iC8kbXKFjWmx_dbdVyppAM0-6Y.roa (hash: tmWp7mxjB9vdgjX2gtWUKioc5qEfAmveNcok4dIUQAo=)
2: GRea9lk1vceom4TFm3UHffkyQH8.roa (hash: 7sx9fKJ6zSwa6txM9tmVfdAR/9hActQM7paLbf+Thbw=)
3: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: ZxxqCIrEK5GRgYxjiOXweIQy5hkdtsvK0Vsj/Xcbnds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:7a:fe:96:e7:c4:a7:63:bf:e8:9d:48:a3:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Sep 25 20:01:21 2026 GMT
Not After : Sep 26 20:01:21 2026 GMT
Subject: CN=a3d0b49d861727a632d80caca67df44f656db3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:c1:78:ab:41:c1:2a:f9:4b:3f:36:d5:ab:
5a:dd:65:5f:df:9b:cd:30:96:2f:54:32:82:95:ce:
0d:51:0d:73:8c:ab:17:f7:db:7e:aa:30:eb:f6:93:
60:7f:7b:3d:c4:e5:38:53:bf:a2:45:f4:c7:7e:3e:
2c:ce:d1:3b:c3:55:5b:97:74:f9:aa:ca:5c:c1:f7:
e3:2d:c4:7c:1f:52:65:84:cd:10:bd:55:1b:0e:dd:
7c:c8:50:33:4f:7d:38:ea:f8:00:71:46:df:60:87:
2a:bc:fe:1c:5d:aa:af:b4:37:b6:e5:17:75:fb:bb:
7f:bc:fd:65:26:5f:6a:2b:51:9d:00:18:67:8d:e6:
36:31:59:31:42:19:3c:16:60:29:71:be:8c:d5:8e:
31:18:49:0d:63:e3:ed:81:5d:89:5d:5a:55:88:f7:
07:bc:a3:ed:30:52:39:90:e6:25:5b:35:1d:b0:2d:
15:f2:85:d2:fe:0b:d8:14:b1:5a:f6:07:53:1c:23:
93:7b:d9:c1:92:4f:c0:c2:bf:ce:81:20:f9:67:80:
ae:61:97:a3:f6:72:60:f7:e3:83:48:51:30:82:d0:
ce:41:4e:e9:ae:db:4a:cb:30:e8:13:c6:4a:8d:28:
c6:87:32:9e:bd:e6:64:22:0b:92:f2:9f:bc:0e:08:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:B4:9D:86:17:27:A6:32:D8:0C:AC:A6:7D:F4:4F:65:6D:B3:A9
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:e7:70:3b:8e:b8:6b:61:12:35:69:75:55:1f:b7:ec:cf:1c:
59:4a:a3:a9:aa:a8:11:57:1e:7a:47:70:0a:6d:55:13:7b:21:
20:f5:1a:cf:7c:51:f0:3f:86:9d:4c:8e:42:5a:ff:77:82:39:
a5:d0:15:d1:da:88:69:5b:ae:d7:83:55:ae:3a:af:12:d3:f0:
cb:82:c3:86:2a:8b:d2:d3:55:44:10:6c:f0:ab:c1:17:59:d2:
ac:e5:ba:c2:93:a6:0d:58:e9:55:95:d3:8f:b3:2e:93:e5:0e:
41:d9:5a:be:73:f9:0e:95:8f:d4:b2:c1:00:a7:b1:0b:9b:28:
1b:45:8e:16:f9:e1:66:b1:0c:03:0c:7e:5f:ae:7e:1b:64:54:
ca:ae:98:cb:4c:03:45:05:e6:bf:74:f3:5d:81:81:b2:ac:84:
db:53:42:b5:cc:24:f8:b1:ad:c3:ee:6e:10:73:7f:55:16:a1:
48:a7:b4:61:9d:17:fb:3d:48:07:1e:eb:e6:87:59:77:04:55:
2e:d4:3b:c7:37:89:17:1d:da:f5:99:2e:a2:68:ff:05:28:f5:
b2:c9:d3:f8:f1:cf:1c:23:5d:ca:80:55:97:2b:d6:59:8b:ad:
5b:2d:e3:9d:77:c5:c6:67:cf:ba:fb:33:65:ac:67:0b:e5:0c:
29:86:2b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKHr+lufEp2O/6J1Io22oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzE5YzZkOGI5OTUwMzc4YTc0ODkzMTVmYjA3ODExMWEx
OGFkNTUwHhcNMjYwOTI1MjAwMTIxWhcNMjYwOTI2MjAwMTIxWjAzMTEwLwYDVQQD
EyhhM2QwYjQ5ZDg2MTcyN2E2MzJkODBjYWNhNjdkZjQ0ZjY1NmRiM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vzBeKtBwSr5Sz821ata3WVf35vN
MJYvVDKClc4NUQ1zjKsX99t+qjDr9pNgf3s9xOU4U7+iRfTHfj4sztE7w1Vbl3T5
qspcwffjLcR8H1JlhM0QvVUbDt18yFAzT3046vgAcUbfYIcqvP4cXaqvtDe25Rd1
+7t/vP1lJl9qK1GdABhnjeY2MVkxQhk8FmApcb6M1Y4xGEkNY+PtgV2JXVpViPcH
vKPtMFI5kOYlWzUdsC0V8oXS/gvYFLFa9gdTHCOTe9nBkk/Awr/OgSD5Z4CuYZej
9nJg9+ODSFEwgtDOQU7prttKyzDoE8ZKjSjGhzKeveZkIguS8p+8DgjJqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPQtJ2GFyemMtgMrKZ99E9lbbOpMB8GA1UdIwQY
MBaAFGJxnG2LmVA3inSJMV+weBEaGK1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQt
NzVmYTI5NTQxMWY1LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQtNzVmYTI5NTQxMWY1
LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5edwO464
a2ESNWl1VR+37M8cWUqjqaqoEVceekdwCm1VE3shIPUaz3xR8D+GnUyOQlr/d4I5
pdAV0dqIaVuu14NVrjqvEtPwy4LDhiqL0tNVRBBs8KvBF1nSrOW6wpOmDVjpVZXT
j7Muk+UOQdlavnP5DpWP1LLBAKexC5soG0WOFvnhZrEMAwx+X65+G2RUyq6Yy0wD
RQXmv3TzXYGBsqyE21NCtcwk+LGtw+5uEHN/VRahSKe0YZ0X+z1IBx7r5odZdwRV
LtQ7xzeJFx3a9Zkuomj/BSj1ssnT+PHPHCNdyoBVlyvWWYutWy3jnXfFxmfPuvsz
ZaxnC+UMKYYrsA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:54:07 2026 by rpki-client