Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: /QMxbkQjBCMKpNFeE38wE+twVTYxlxou4HjLfo44++g=
Subject key identifier: B2:49:B2:E8:84:78:77:A6:17:8D:C7:95:C4:43:A0:6D:15:9E:D8:E2
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 01A1DE396AAA7FDA94A43772224A4AAA124F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 141F
Signing time: Sun 15 Nov 2026 08:01:07 +0000
Manifest this update: Sun 15 Nov 2026 08:01:07 +0000
Manifest next update: Mon 16 Nov 2026 08:01:07 +0000
Files and hashes: 1: OBsf5wUgmkS4iR6H0BmIA3BzcEk.roa (hash: mN4FHKBeTLmR7Dl9yQhV5RyiRCbKLYO1JXNyTxcEMBo=)
2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: PIAugSxSF3F3AKJB+1WDtcen+ENF8+toVfOejM/Bf3k=)
3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:6a:aa:7f:da:94:a4:37:72:22:4a:4a:aa:12:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Nov 15 08:01:07 2026 GMT
Not After : Nov 16 08:01:07 2026 GMT
Subject: CN=b249b2e8847877a6178dc795c443a06d159ed8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:7b:d5:be:46:f1:42:6f:20:dd:5d:04:6c:
f7:e3:d1:ae:5c:af:00:3f:6f:3a:4d:c7:12:ff:24:
d3:bc:83:19:b2:f4:5d:60:6c:0b:7f:cd:46:c2:7a:
8d:8e:38:82:2d:fb:c5:62:15:a8:a9:5e:43:f2:5e:
eb:11:78:91:91:97:5e:97:9f:60:e0:98:89:4e:30:
aa:54:8d:cd:4c:e6:07:7e:e4:5e:e1:29:e1:40:77:
1a:9c:05:82:01:82:03:cd:ff:32:d5:f6:56:5a:85:
e3:6a:0f:52:05:e0:a5:54:4a:82:3b:8e:f4:1f:ee:
0f:47:b2:5b:e7:a1:b1:ac:83:47:6b:eb:e4:98:79:
24:fb:30:b9:ec:30:4e:95:1a:23:68:d4:ed:aa:b2:
d2:89:c5:a3:9d:73:e8:f2:43:7c:e7:4b:40:22:88:
0a:01:01:1c:2d:55:95:8d:a2:ff:40:8d:5c:86:cf:
9c:09:f2:af:2d:dc:4e:a8:d0:11:22:ed:9d:74:f3:
44:25:73:8a:a6:1d:93:ba:cb:5f:30:c9:19:3b:80:
a6:50:ba:2d:7d:bd:f4:46:96:49:ff:72:0a:df:89:
36:f7:41:be:fd:63:2a:2c:fa:cc:64:b8:7a:29:63:
d4:61:6f:f8:dc:08:05:00:37:d4:5e:43:6f:03:9a:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:B2:E8:84:78:77:A6:17:8D:C7:95:C4:43:A0:6D:15:9E:D8:E2
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6d:8e:77:38:c5:70:fc:20:a1:77:2e:e9:29:3b:36:2e:58:
7f:be:ea:8a:bd:93:75:00:f6:e0:33:0f:33:8e:81:3a:89:51:
ed:f0:21:fe:1a:03:9a:cc:03:d4:12:fa:f1:48:7d:7c:eb:37:
0a:28:69:bb:39:47:af:9e:19:43:61:e1:b5:fd:6a:2e:d7:9e:
1b:48:f8:0f:12:da:37:a0:a2:cd:2a:a7:35:c7:36:77:6a:fe:
6c:cc:c3:9f:04:63:96:73:cc:73:9d:f0:7e:5e:be:30:bb:fe:
06:65:46:22:2b:d5:bb:94:29:fb:e4:b7:1c:c8:de:80:d2:a0:
85:c8:92:fe:44:e1:6a:36:f3:3b:8f:75:fb:25:6e:74:8e:37:
f0:bc:49:bd:fd:2d:51:d6:8f:9f:91:af:1b:4e:c2:61:cb:48:
21:46:4a:10:c2:fa:e6:49:a0:a5:aa:f1:85:f6:fd:cf:8c:c0:
73:47:3c:29:56:e6:0c:d3:08:13:8b:34:bf:e8:a1:7d:5c:b9:
22:dc:c7:47:ca:e7:bd:c0:00:c7:e4:81:6b:ec:f1:b4:99:76:
20:90:e1:2b:56:0f:2d:7e:15:63:50:97:2a:ff:ba:e8:f8:92:
94:7b:3d:52:04:43:9b:fd:3e:8a:f0:a7:8a:71:c7:c5:40:cc:
e6:cf:8c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOWqqf9qUpDdyIkpKqhJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1
Y2MzMTIwHhcNMjYxMTE1MDgwMTA3WhcNMjYxMTE2MDgwMTA3WjAzMTEwLwYDVQQD
EyhiMjQ5YjJlODg0Nzg3N2E2MTc4ZGM3OTVjNDQzYTA2ZDE1OWVkOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFp71b5G8UJvIN1dBGz349GuXK8A
P286TccS/yTTvIMZsvRdYGwLf81GwnqNjjiCLfvFYhWoqV5D8l7rEXiRkZdel59g
4JiJTjCqVI3NTOYHfuRe4SnhQHcanAWCAYIDzf8y1fZWWoXjag9SBeClVEqCO470
H+4PR7Jb56GxrINHa+vkmHkk+zC57DBOlRojaNTtqrLSicWjnXPo8kN850tAIogK
AQEcLVWVjaL/QI1chs+cCfKvLdxOqNARIu2ddPNEJXOKph2TustfMMkZO4CmULot
fb30RpZJ/3IK34k290G+/WMqLPrMZLh6KWPUYW/43AgFADfUXkNvA5oKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJJsuiEeHemF43HlcRDoG0VntjiMB8GA1UdIwQY
MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt
MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy
LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvW2OdzjF
cPwgoXcu6Sk7Ni5Yf77qir2TdQD24DMPM46BOolR7fAh/hoDmswD1BL68Uh9fOs3
CihpuzlHr54ZQ2Hhtf1qLteeG0j4DxLaN6CizSqnNcc2d2r+bMzDnwRjlnPMc53w
fl6+MLv+BmVGIivVu5Qp++S3HMjegNKghciS/kThajbzO491+yVudI438LxJvf0t
UdaPn5GvG07CYctIIUZKEML65kmgparxhfb9z4zAc0c8KVbmDNMIE4s0v+ihfVy5
ItzHR8rnvcAAx+SBa+zxtJl2IJDhK1YPLX4VY1CXKv+66PiSlHs9UgRDm/0+ivCn
inHHxUDM5s+MhA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:18:28 2026 by rpki-client