Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: 1mAcDsHvup+UddV+Xj/32KfUOWL9FEZrPNaLor0bQNM=
Subject key identifier: 04:EA:AC:51:CF:1B:21:0B:4B:00:CB:77:E8:0F:29:3A:98:3F:9E:B3
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 01A0E1AB7F462249FF67C01FB7DFED8C0337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 09C8
Signing time: Sun 27 Sep 2026 07:01:47 +0000
Manifest this update: Sun 27 Sep 2026 07:01:47 +0000
Manifest next update: Mon 28 Sep 2026 07:01:47 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: O6M6vusB8aLY+S0yYNviftJpZRtnsrxhPOLSmLkL9Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:7f:46:22:49:ff:67:c0:1f:b7:df:ed:8c:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Sep 27 07:01:47 2026 GMT
Not After : Sep 28 07:01:47 2026 GMT
Subject: CN=04eaac51cf1b210b4b00cb77e80f293a983f9eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:e7:d3:10:32:b1:33:75:9b:e8:2e:16:53:
c0:d9:e3:03:04:6e:49:17:d3:56:22:db:fe:88:3c:
1d:d4:21:05:0f:db:60:57:b8:12:12:53:c9:59:2e:
4b:b3:c7:83:70:e4:8b:d6:75:1e:09:2b:67:cc:bf:
e8:8a:34:60:6a:88:e3:1a:9c:4d:27:f2:b8:b9:2f:
0c:c5:4d:ab:2f:c6:12:00:4a:00:ef:3c:5d:97:59:
94:f1:aa:ea:95:a9:a4:37:95:27:c1:86:85:f3:a9:
2f:40:33:ec:c4:a4:70:73:6d:ce:8c:c7:2f:56:1b:
da:d3:b5:5e:8d:c3:7e:c4:00:e9:51:79:a0:da:3e:
df:31:4c:99:03:b3:f2:a8:c0:6a:a6:f5:38:ef:cf:
39:09:35:97:17:fa:fc:7f:fb:83:bd:7e:f4:11:d8:
91:a5:79:52:a2:f4:65:8c:03:ef:c1:7c:13:14:a5:
22:ff:f3:f3:7e:67:97:ac:40:14:76:8b:d6:64:03:
7f:1c:d9:df:6e:1d:52:e6:e9:4b:7c:c8:ad:0e:44:
da:54:1f:a1:a4:4a:a1:aa:67:f2:71:bc:a3:e0:52:
f1:4c:45:b9:c3:58:d2:59:98:54:06:06:15:ff:b6:
cf:63:96:2c:60:4c:cd:b1:3c:a6:c0:0a:93:90:c9:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:AC:51:CF:1B:21:0B:4B:00:CB:77:E8:0F:29:3A:98:3F:9E:B3
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:3b:ff:cf:c9:d8:9e:3a:9d:11:0d:eb:bf:cc:64:25:63:
eb:ff:38:6c:69:f9:6e:54:2e:4b:24:df:88:b5:b6:ad:dd:4b:
c3:33:7b:52:0e:f8:41:6b:bc:42:08:42:d1:10:54:e3:1e:bb:
fd:1a:01:4a:84:c6:63:d9:63:71:db:dc:76:77:bd:f8:45:44:
5e:29:99:cd:83:64:87:28:fc:7b:c7:ed:07:53:e7:50:c0:3c:
65:38:c2:3d:e5:95:53:a2:b8:e6:f6:93:8f:d7:99:32:24:e5:
cf:58:50:41:97:fe:11:d8:fd:14:61:a1:89:58:8f:32:55:d3:
cd:eb:cb:21:b2:58:b7:eb:ae:10:99:24:94:b1:56:07:d2:32:
fc:af:cb:cb:b0:7e:ed:64:ea:84:f4:4d:e3:bc:c8:e5:3a:d8:
30:03:ba:42:de:04:12:e0:96:0b:cb:db:0e:66:4b:5d:a6:9b:
4c:bd:21:21:21:e2:c6:9d:ad:27:ee:a5:af:fc:30:d2:af:a3:
d1:33:29:4d:b9:6d:d0:36:bd:dc:54:0f:6e:67:f9:69:fd:c2:
c2:0d:d0:9f:67:34:c7:09:a7:2d:be:89:29:2d:52:66:e8:bd:
eb:a0:63:77:88:04:92:2a:53:d8:1f:99:7e:b9:c8:2e:a2:7c:
6e:de:aa:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhq39GIkn/Z8Aft9/tjAM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4
ZGQ5ZGQwHhcNMjYwOTI3MDcwMTQ3WhcNMjYwOTI4MDcwMTQ3WjAzMTEwLwYDVQQD
EygwNGVhYWM1MWNmMWIyMTBiNGIwMGNiNzdlODBmMjkzYTk4M2Y5ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfDn0xAysTN1m+guFlPA2eMDBG5J
F9NWItv+iDwd1CEFD9tgV7gSElPJWS5Ls8eDcOSL1nUeCStnzL/oijRgaojjGpxN
J/K4uS8MxU2rL8YSAEoA7zxdl1mU8arqlamkN5UnwYaF86kvQDPsxKRwc23OjMcv
Vhva07VejcN+xADpUXmg2j7fMUyZA7PyqMBqpvU47885CTWXF/r8f/uDvX70EdiR
pXlSovRljAPvwXwTFKUi//PzfmeXrEAUdovWZAN/HNnfbh1S5ulLfMitDkTaVB+h
pEqhqmfycbyj4FLxTEW5w1jSWZhUBgYV/7bPY5YsYEzNsTymwAqTkMnT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATqrFHPGyELSwDLd+gPKTqYP56zMB8GA1UdIwQY
MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt
M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5
LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMI7/8/J
2J46nREN67/MZCVj6/84bGn5blQuSyTfiLW2rd1LwzN7Ug74QWu8QghC0RBU4x67
/RoBSoTGY9ljcdvcdne9+EVEXimZzYNkhyj8e8ftB1PnUMA8ZTjCPeWVU6K45vaT
j9eZMiTlz1hQQZf+Edj9FGGhiViPMlXTzevLIbJYt+uuEJkklLFWB9Iy/K/Ly7B+
7WTqhPRN47zI5TrYMAO6Qt4EEuCWC8vbDmZLXaabTL0hISHixp2tJ+6lr/ww0q+j
0TMpTblt0Da93FQPbmf5af3Cwg3Qn2c0xwmnLb6JKS1SZui966Bjd4gEkipT2B+Z
frnILqJ8bt6qWQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:06:15 2026 by rpki-client