Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: Yup1CKHHhzge5PBJ0h14Phlwhu0OFXJkRi9hDVnZhEk=
Subject key identifier: 0E:FD:46:70:95:EF:6A:6A:33:07:CC:87:83:7F:41:B3:59:E5:5F:38
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 01A0C9A1B6D49B688A8D44A133E54FDD0376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 09FE
Signing time: Tue 22 Sep 2026 15:00:13 +0000
Manifest this update: Tue 22 Sep 2026 15:00:13 +0000
Manifest next update: Wed 23 Sep 2026 15:00:13 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: OiDn23P30K8xhWMcU3WtQEP2yh5VnP3K8EIJmCBhGVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:b6:d4:9b:68:8a:8d:44:a1:33:e5:4f:dd:03:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Sep 22 15:00:13 2026 GMT
Not After : Sep 23 15:00:13 2026 GMT
Subject: CN=0efd467095ef6a6a3307cc87837f41b359e55f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:aa:1f:2e:b2:a7:27:f9:8d:00:99:b2:16:
69:9c:0f:54:08:fe:d5:21:77:22:fc:69:53:02:52:
e9:4a:1d:02:44:cb:31:b5:31:e5:08:26:61:c6:41:
f8:d6:6b:b2:ab:14:ec:37:b9:00:16:ee:8f:04:1a:
0a:84:06:77:67:ff:6a:b4:9d:89:21:90:75:b3:f7:
1b:bb:5e:12:4f:de:65:fc:c0:c2:51:03:19:f7:2a:
7a:d7:47:5b:62:c4:5f:fb:5f:5a:5e:b8:ae:71:df:
82:ac:44:93:75:5c:e0:d8:1c:97:0d:d1:d9:25:61:
8a:a2:48:77:c3:50:8f:36:41:f2:7d:78:9c:b2:dd:
2c:72:54:9d:3b:18:5a:f7:1f:40:71:87:d2:71:60:
f8:77:41:b1:9a:42:9b:3e:ed:a0:81:0a:55:e2:70:
5e:df:8f:59:4d:09:ea:f1:e9:d4:8b:1b:75:50:41:
7d:25:62:db:cd:ae:91:f5:8a:c6:ea:88:b7:39:ea:
99:27:83:e8:1f:b6:4d:7f:a0:e2:03:a8:ce:e2:b8:
83:db:52:fe:15:89:ba:26:ad:7d:73:6b:22:33:20:
e7:c7:e7:a5:d7:a2:20:05:d6:a6:07:76:8a:88:16:
5a:7b:7b:3d:1f:fd:64:cf:8a:39:0d:6e:f6:96:26:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:46:70:95:EF:6A:6A:33:07:CC:87:83:7F:41:B3:59:E5:5F:38
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:93:fd:40:59:83:a7:17:90:53:e3:cb:cf:39:bf:68:12:
6a:e7:64:57:08:4c:dd:3a:5a:27:f7:e9:b4:ed:ba:63:3d:02:
b5:d1:c8:b3:d1:88:bf:06:49:7f:ee:21:42:ef:af:68:5a:8f:
8a:2f:fd:34:20:bb:e2:24:1d:0f:92:b7:00:ae:f0:14:b3:e3:
6e:ab:f3:d9:cc:75:c8:88:9e:60:89:f9:59:a8:4e:11:b6:59:
90:a9:e0:1f:46:43:89:96:c2:b5:e8:46:c9:d6:5b:b0:52:9c:
73:97:5d:ef:d4:8c:5e:cd:db:e6:9b:4e:d7:03:8f:b9:68:9a:
cc:e5:c0:cf:9a:9a:0d:29:4a:be:c5:6c:0b:7a:88:45:e4:d6:
8b:c3:5d:2e:c0:34:4a:c2:fb:65:b7:1f:42:fd:a1:6d:35:cb:
48:90:99:11:50:1f:d5:63:14:4f:ea:17:1f:e6:84:52:93:7d:
df:40:44:b1:46:6c:33:cc:58:75:c7:20:94:7f:3f:83:07:dc:
a6:a2:b0:d1:95:66:95:80:3d:c5:58:c3:9e:d2:5e:51:42:7b:
f0:6f:ea:82:cf:dc:53:e9:bf:a3:fe:3b:27:5e:29:1b:23:83:
b9:2b:60:e4:fe:42:6c:c4:9c:9f:67:be:95:72:6b:84:1b:23:
32:67:d0:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJobbUm2iKjUShM+VP3QN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZWI1ZmI3MzNhYmIzZTA3ZDc1ZmE4MGQ3YmU5Y2IxODEz
Y2QzZTAwHhcNMjYwOTIyMTUwMDEzWhcNMjYwOTIzMTUwMDEzWjAzMTEwLwYDVQQD
EygwZWZkNDY3MDk1ZWY2YTZhMzMwN2NjODc4MzdmNDFiMzU5ZTU1ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxiqHy6ypyf5jQCZshZpnA9UCP7V
IXci/GlTAlLpSh0CRMsxtTHlCCZhxkH41muyqxTsN7kAFu6PBBoKhAZ3Z/9qtJ2J
IZB1s/cbu14ST95l/MDCUQMZ9yp610dbYsRf+19aXriucd+CrESTdVzg2ByXDdHZ
JWGKokh3w1CPNkHyfXicst0sclSdOxha9x9AcYfScWD4d0GxmkKbPu2ggQpV4nBe
349ZTQnq8enUixt1UEF9JWLbza6R9YrG6oi3OeqZJ4PoH7ZNf6DiA6jO4riD21L+
FYm6Jq19c2siMyDnx+el16IgBdamB3aKiBZae3s9H/1kz4o5DW72liaD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA79RnCV72pqMwfMh4N/QbNZ5V84MB8GA1UdIwQY
MBaAFMvrX7czq7PgfXX6gNe+nLGBPNPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQt
MmNjZmIzYjQxMjYwLzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wYTdjNGUtOTViYy00NTZiLThmNzQtMmNjZmIzYjQxMjYw
LzEveS10ZnR6T3JzLUI5ZGZxQTE3NmNzWUU4MC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCWT/UBZ
g6cXkFPjy885v2gSaudkVwhM3TpaJ/fptO26Yz0CtdHIs9GIvwZJf+4hQu+vaFqP
ii/9NCC74iQdD5K3AK7wFLPjbqvz2cx1yIieYIn5WahOEbZZkKngH0ZDiZbCtehG
ydZbsFKcc5dd79SMXs3b5ptO1wOPuWiazOXAz5qaDSlKvsVsC3qIReTWi8NdLsA0
SsL7ZbcfQv2hbTXLSJCZEVAf1WMUT+oXH+aEUpN930BEsUZsM8xYdccglH8/gwfc
pqKw0ZVmlYA9xVjDntJeUUJ78G/qgs/cU+m/o/47J14pGyODuStg5P5CbMScn2e+
lXJrhBsjMmfQ2Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:29 2026 by rpki-client