Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: EhdJHoOsKL1JU+DyV7wmViqlDW5kiOw1IdDP5yYK/2Q=
Subject key identifier: 29:43:4E:F0:0A:72:67:E4:20:7C:F6:D0:D5:05:6E:34:CB:3E:4F:A7
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 01A10693F343C784DD0CC9A92C1533190D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 0938
Signing time: Sun 04 Oct 2026 11:02:01 +0000
Manifest this update: Sun 04 Oct 2026 11:02:01 +0000
Manifest next update: Mon 05 Oct 2026 11:02:01 +0000
Files and hashes: 1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: q5Be78+o5riTPHqJnIT/ecnrMu9CTeuFpQZ+w5L5rHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:f3:43:c7:84:dd:0c:c9:a9:2c:15:33:19:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Oct 4 11:02:01 2026 GMT
Not After : Oct 5 11:02:01 2026 GMT
Subject: CN=29434ef00a7267e4207cf6d0d5056e34cb3e4fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:ab:1e:67:74:52:f0:78:64:ef:ea:d3:a5:
69:4e:f7:10:38:a2:01:72:70:b2:a9:6d:1f:2c:43:
c3:79:19:f8:37:3a:8f:ff:80:9e:c1:9b:44:89:72:
f5:41:24:25:b8:2c:93:65:24:bc:01:e5:c2:95:1a:
63:3b:2e:f5:13:3b:ee:6a:d9:9d:15:47:3f:e5:f7:
07:2d:35:24:33:21:0e:a0:44:25:64:3d:32:9f:b0:
16:7f:0b:b8:cd:c9:b4:01:99:e1:74:b1:59:07:64:
f1:d8:a5:77:f5:f2:1d:43:a4:0a:79:2f:81:2a:00:
14:52:8d:e7:66:4e:d5:30:84:a4:ac:9b:ac:43:49:
00:a8:64:cd:51:2e:15:bd:95:4c:c5:57:47:c8:ba:
07:7e:a2:99:ec:31:56:06:56:80:82:e9:c5:52:6e:
f5:14:4b:6c:8c:20:22:0e:fc:c7:10:7e:5c:70:99:
0c:de:ec:ed:9c:7f:c2:df:08:28:07:e6:33:0b:e5:
85:7b:09:61:ed:01:b7:5d:51:d5:62:2d:f0:42:9b:
6c:22:e4:8e:e6:43:7f:b2:ae:73:f8:30:08:6c:2c:
f6:27:57:89:28:bb:50:cb:b9:33:b4:a5:87:05:56:
74:b8:e0:56:99:63:b3:0c:47:9e:02:57:dd:7e:f7:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:4E:F0:0A:72:67:E4:20:7C:F6:D0:D5:05:6E:34:CB:3E:4F:A7
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:82:7b:2b:25:cd:8d:92:be:d8:e6:63:e5:da:f9:3a:bb:
95:18:43:ad:8a:4e:73:af:b1:db:23:73:55:61:73:82:81:ba:
14:25:36:0a:a1:0a:bd:98:04:a4:00:47:c4:43:b1:79:14:28:
13:19:19:96:90:eb:d5:70:25:2f:d4:7a:9f:f2:c4:8d:c3:e8:
48:c4:bc:26:8e:f7:87:d7:0a:c8:c6:ca:3d:ee:7d:f9:c3:51:
72:b0:90:75:a5:82:a6:7c:b0:03:10:0a:a4:a8:f2:b9:e9:65:
f9:3b:b2:63:46:66:d3:10:fe:fc:73:ee:c9:6d:c7:22:e3:61:
08:be:98:89:5e:ad:8d:33:78:da:1d:2a:66:57:58:02:4f:35:
8c:cf:96:5d:0b:ba:fa:04:58:30:ad:a0:8e:a2:f4:5f:39:cf:
a7:e9:b9:76:83:c6:7c:63:d9:93:48:90:ba:66:ba:d7:c8:c5:
2d:b9:89:9c:5a:13:85:5f:66:42:19:a3:e3:a6:48:60:83:9a:
4a:43:ac:c9:10:2b:bc:e4:9b:75:c2:7f:2d:ad:73:b7:74:9e:
bc:83:1c:ff:bc:55:05:4f:da:9f:d9:37:21:e5:93:66:f5:ce:
0e:82:a5:cf:24:a8:ea:1c:45:97:2e:1e:cf:41:b4:48:e4:40:
c7:b3:e2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGk/NDx4TdDMmpLBUzGQ0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjYxMDA0MTEwMjAxWhcNMjYxMDA1MTEwMjAxWjAzMTEwLwYDVQQD
EygyOTQzNGVmMDBhNzI2N2U0MjA3Y2Y2ZDBkNTA1NmUzNGNiM2U0ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWyrHmd0UvB4ZO/q06VpTvcQOKIB
cnCyqW0fLEPDeRn4NzqP/4CewZtEiXL1QSQluCyTZSS8AeXClRpjOy71Ezvuatmd
FUc/5fcHLTUkMyEOoEQlZD0yn7AWfwu4zcm0AZnhdLFZB2Tx2KV39fIdQ6QKeS+B
KgAUUo3nZk7VMISkrJusQ0kAqGTNUS4VvZVMxVdHyLoHfqKZ7DFWBlaAgunFUm71
FEtsjCAiDvzHEH5ccJkM3uztnH/C3wgoB+YzC+WFewlh7QG3XVHVYi3wQptsIuSO
5kN/sq5z+DAIbCz2J1eJKLtQy7kztKWHBVZ0uOBWmWOzDEeeAlfdfvfHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClDTvAKcmfkIHz20NUFbjTLPk+nMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi+Ceysl
zY2SvtjmY+Xa+Tq7lRhDrYpOc6+x2yNzVWFzgoG6FCU2CqEKvZgEpABHxEOxeRQo
ExkZlpDr1XAlL9R6n/LEjcPoSMS8Jo73h9cKyMbKPe59+cNRcrCQdaWCpnywAxAK
pKjyuell+TuyY0Zm0xD+/HPuyW3HIuNhCL6YiV6tjTN42h0qZldYAk81jM+WXQu6
+gRYMK2gjqL0XznPp+m5doPGfGPZk0iQuma618jFLbmJnFoThV9mQhmj46ZIYIOa
SkOsyRArvOSbdcJ/La1zt3SevIMc/7xVBU/an9k3IeWTZvXODoKlzySo6hxFly4e
z0G0SORAx7PiIg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:07:02 2026 by rpki-client