Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: EGDHr8ZOM+uHGglVGm3cgv0rOwoN5c/nUZn3l0s2pXI=
Subject key identifier: C6:92:4B:6D:D9:B6:0D:93:7C:0C:BA:A1:3D:83:9B:E4:C2:88:46:BD
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01A0D56F9C2361B95A56AF36C05AFDA92B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0BA2
Signing time: Thu 24 Sep 2026 22:00:56 +0000
Manifest this update: Thu 24 Sep 2026 22:00:56 +0000
Manifest next update: Fri 25 Sep 2026 22:00:56 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: ocu83elILIwEI4ND9xkJBCKKuegoW7os8tF6SEfmYIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:9c:23:61:b9:5a:56:af:36:c0:5a:fd:a9:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Sep 24 22:00:56 2026 GMT
Not After : Sep 25 22:00:56 2026 GMT
Subject: CN=c6924b6dd9b60d937c0cbaa13d839be4c28846bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:cc:e4:0a:4d:e0:f4:cb:9d:91:8c:fb:c1:
81:3b:23:0a:a9:17:44:e1:87:28:58:68:c6:6b:44:
4e:8e:d9:d9:d1:f3:43:17:0c:d9:c5:80:86:d6:05:
80:30:ce:a9:ea:66:6f:40:e2:27:4b:c5:82:f4:c2:
dd:78:d2:22:04:c2:ab:f5:a3:7b:97:46:87:3d:f1:
f4:b9:99:e5:81:02:35:b4:7b:93:62:62:e5:c6:35:
56:e6:ac:f2:a1:f7:47:c4:e2:4f:55:aa:11:85:ce:
56:c7:0a:33:97:62:57:da:f4:3e:71:ee:07:60:16:
77:91:a8:7a:48:ba:b0:8d:c8:34:dc:fc:c6:21:99:
46:3f:ed:39:7d:34:ad:0f:a1:bd:db:72:96:49:46:
1a:e8:51:cc:a4:55:98:58:dd:95:9c:a0:e3:4e:c7:
0a:ab:3d:e9:25:77:b1:ff:a9:5a:9a:33:84:3a:cb:
5d:84:5d:18:6c:6b:03:39:cc:d9:40:f2:73:6c:12:
06:c7:4a:73:d9:fa:bb:b7:c6:f7:36:4b:6a:c3:3a:
bd:96:94:ef:12:be:fb:87:fc:66:99:ea:8f:88:07:
78:fe:31:47:86:0a:53:02:7c:d0:0b:96:59:52:69:
10:26:e2:12:00:d6:34:a6:f6:ba:32:d8:bd:cc:22:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:4B:6D:D9:B6:0D:93:7C:0C:BA:A1:3D:83:9B:E4:C2:88:46:BD
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:bb:e0:8f:7b:62:11:13:dd:b3:34:b5:3a:74:71:45:5b:
30:d8:e1:a7:f5:cb:7a:6b:90:a0:44:d0:f8:61:48:2d:d6:0e:
b1:99:2c:61:6d:1d:16:10:80:2e:89:54:56:1f:ed:aa:b7:aa:
89:c7:f4:29:0f:c8:1d:1b:51:c0:25:85:01:a5:be:87:88:c5:
48:d2:c7:a2:11:7f:5c:f4:44:ff:2c:46:f4:61:a5:15:23:8c:
52:5b:0a:85:f9:3a:48:62:5f:56:74:03:0f:9e:0b:c2:05:b8:
ef:41:cd:6d:55:c3:82:95:40:d5:e8:8b:52:b2:e8:64:9c:28:
c6:22:c1:3e:4c:80:cb:68:b6:fc:8e:8f:1f:2a:30:ad:91:71:
83:d4:11:40:77:3d:b5:14:85:a9:a6:41:8a:0a:71:10:67:1f:
58:66:24:ea:e4:36:cd:84:37:5a:2a:e7:db:4b:d9:f4:b1:83:
52:33:84:d7:a4:e5:61:84:a5:aa:26:0d:2d:11:15:e1:3c:b5:
87:36:89:cd:ac:1c:99:8c:23:26:7e:0d:a1:d0:bb:84:29:ab:
8c:a6:70:54:a2:48:28:4d:3a:c9:8c:16:b5:0a:0f:4c:4b:b3:
22:9e:4b:f9:a7:6e:98:7f:3d:25:dc:3f:95:79:6f:dc:c9:2e:
d4:17:89:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb5wjYblaVq82wFr9qStTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi
ODBkYmQwHhcNMjYwOTI0MjIwMDU2WhcNMjYwOTI1MjIwMDU2WjAzMTEwLwYDVQQD
EyhjNjkyNGI2ZGQ5YjYwZDkzN2MwY2JhYTEzZDgzOWJlNGMyODg0NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8rM5ApN4PTLnZGM+8GBOyMKqRdE
4YcoWGjGa0ROjtnZ0fNDFwzZxYCG1gWAMM6p6mZvQOInS8WC9MLdeNIiBMKr9aN7
l0aHPfH0uZnlgQI1tHuTYmLlxjVW5qzyofdHxOJPVaoRhc5Wxwozl2JX2vQ+ce4H
YBZ3kah6SLqwjcg03PzGIZlGP+05fTStD6G923KWSUYa6FHMpFWYWN2VnKDjTscK
qz3pJXex/6lamjOEOstdhF0YbGsDOczZQPJzbBIGx0pz2fq7t8b3Nktqwzq9lpTv
Er77h/xmmeqPiAd4/jFHhgpTAnzQC5ZZUmkQJuISANY0pva6Mti9zCJ9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaSS23Ztg2TfAy6oT2Dm+TCiEa9MB8GA1UdIwQY
MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt
YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk
LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEO74I97
YhET3bM0tTp0cUVbMNjhp/XLemuQoETQ+GFILdYOsZksYW0dFhCALolUVh/tqreq
icf0KQ/IHRtRwCWFAaW+h4jFSNLHohF/XPRE/yxG9GGlFSOMUlsKhfk6SGJfVnQD
D54LwgW470HNbVXDgpVA1eiLUrLoZJwoxiLBPkyAy2i2/I6PHyowrZFxg9QRQHc9
tRSFqaZBigpxEGcfWGYk6uQ2zYQ3Wirn20vZ9LGDUjOE16TlYYSlqiYNLREV4Ty1
hzaJzawcmYwjJn4NodC7hCmrjKZwVKJIKE06yYwWtQoPTEuzIp5L+adumH89Jdw/
lXlv3Mku1BeJTw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:33 2026 by rpki-client