Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: DqYTgekF1J95E9OdCpsgxJ7qML4KUXwIaqmKutKVoMA=
Subject key identifier: D8:72:35:F3:05:94:A3:EA:A3:14:97:A1:3C:50:6A:0B:96:7B:54:94
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A1DBDDD08BE5F56A75EA206D1226D9C049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0A5A
Signing time: Sat 14 Nov 2026 21:01:49 +0000
Manifest this update: Sat 14 Nov 2026 21:01:49 +0000
Manifest next update: Sun 15 Nov 2026 21:01:49 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: jqM10N6s3ytxCRuak2IwneK0MwoNAqmV+uapPoRiUJg=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:d0:8b:e5:f5:6a:75:ea:20:6d:12:26:d9:c0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Nov 14 21:01:49 2026 GMT
Not After : Nov 15 21:01:49 2026 GMT
Subject: CN=d87235f30594a3eaa31497a13c506a0b967b5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:9b:b8:78:9c:11:b2:01:9c:7c:a2:ef:8c:
f6:e3:24:cc:8d:ad:95:93:2c:f4:13:53:6b:27:cf:
ee:97:9f:f6:fd:1d:1a:d1:06:48:38:2e:e7:ae:d8:
09:69:29:4f:0a:18:b6:ab:c7:4c:18:65:27:58:f2:
47:4a:d7:08:4b:77:ec:8c:71:34:db:7d:4f:bd:bd:
0b:95:d0:b9:e4:41:b6:a1:67:52:15:7a:11:a3:56:
7e:ce:db:b6:59:09:ff:5d:74:22:0f:be:c8:0f:36:
c7:bb:39:9b:e6:3d:0f:90:85:7b:35:8d:d4:27:35:
d2:ea:44:92:c5:03:94:a7:d3:8b:37:2f:d2:6b:db:
01:95:0e:06:a0:76:b8:c9:0a:f9:04:96:58:99:0d:
89:72:08:87:2d:89:f1:be:36:92:bd:75:07:5f:b4:
5c:6f:d4:41:05:2f:90:a4:63:ea:b8:4d:3a:11:cc:
24:ce:18:92:4d:0f:b2:42:73:2c:07:c1:b8:ba:84:
ab:7b:f9:a9:a7:7c:8d:73:7a:05:2d:57:52:54:89:
7d:ef:7c:36:f7:9f:5a:27:09:a8:37:7c:a3:c4:1e:
25:8c:44:46:ef:0c:ee:d9:20:88:12:9d:cc:d7:ae:
1a:7a:60:fe:fc:41:a9:10:d3:2a:57:46:fb:89:6e:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:35:F3:05:94:A3:EA:A3:14:97:A1:3C:50:6A:0B:96:7B:54:94
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6a:94:3e:e1:e1:41:49:64:82:a0:8a:88:3f:52:d3:0a:db:
8a:08:65:05:23:fc:91:d0:c1:43:a1:9d:2d:c2:2b:30:96:91:
78:17:c1:66:d1:2a:1c:1b:74:a8:3e:a9:83:de:52:67:db:8e:
8c:55:b2:2c:2d:9d:e1:c0:f4:d9:14:8f:ed:08:65:78:4f:2d:
59:44:a5:f9:3a:c2:e2:cb:94:cf:fa:1e:af:57:7b:cd:ba:d7:
00:a0:b9:a6:4a:27:ac:d8:96:5c:57:85:03:ab:19:c5:b1:fe:
03:be:dc:9d:79:88:ee:44:8e:78:10:93:1e:00:d3:e1:09:e4:
f2:51:d5:f9:e3:ca:15:cf:b3:e8:da:d6:dd:48:2b:99:ad:87:
d5:f6:33:bb:b5:87:ef:3b:a3:8d:eb:16:07:b5:fa:77:45:5c:
69:46:3c:29:08:6b:5b:5f:51:91:45:2c:57:1b:39:ca:04:47:
83:3d:0b:4a:96:0d:ba:72:2c:aa:24:61:61:99:1c:a5:63:69:
83:c6:43:7a:75:19:2e:5a:62:91:a9:8d:36:49:5d:36:66:dd:
97:8a:54:29:7a:a7:d2:56:30:95:4c:0b:ca:ca:c2:f9:32:aa:
5b:22:b2:a8:2b:2a:d7:a7:66:87:bd:54:b1:fa:52:51:2a:e2:
52:5e:3a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHb3dCL5fVqdeogbRIm2cBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjBiZGJhNDZjZTUwYzBhYTBjNDFmMGIxYjQ5ZmE3ZWQ2
ODEwY2IwHhcNMjYxMTE0MjEwMTQ5WhcNMjYxMTE1MjEwMTQ5WjAzMTEwLwYDVQQD
EyhkODcyMzVmMzA1OTRhM2VhYTMxNDk3YTEzYzUwNmEwYjk2N2I1NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpObuHicEbIBnHyi74z24yTMja2V
kyz0E1NrJ8/ul5/2/R0a0QZIOC7nrtgJaSlPChi2q8dMGGUnWPJHStcIS3fsjHE0
231Pvb0LldC55EG2oWdSFXoRo1Z+ztu2WQn/XXQiD77IDzbHuzmb5j0PkIV7NY3U
JzXS6kSSxQOUp9OLNy/Sa9sBlQ4GoHa4yQr5BJZYmQ2JcgiHLYnxvjaSvXUHX7Rc
b9RBBS+QpGPquE06EcwkzhiSTQ+yQnMsB8G4uoSre/mpp3yNc3oFLVdSVIl973w2
959aJwmoN3yjxB4ljERG7wzu2SCIEp3M164aemD+/EGpENMqV0b7iW6t1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhyNfMFlKPqoxSXoTxQaguWe1SUMB8GA1UdIwQY
MBaAFGAgvbpGzlDAqgxB8LG0n6ftaBDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2Yt
YjMwOTExMmQyZWVjLzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2YtYjMwOTExMmQyZWVj
LzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmqUPuHh
QUlkgqCKiD9S0wrbighlBSP8kdDBQ6GdLcIrMJaReBfBZtEqHBt0qD6pg95SZ9uO
jFWyLC2d4cD02RSP7QhleE8tWUSl+TrC4suUz/oer1d7zbrXAKC5pkonrNiWXFeF
A6sZxbH+A77cnXmI7kSOeBCTHgDT4Qnk8lHV+ePKFc+z6NrW3Ugrma2H1fYzu7WH
7zujjesWB7X6d0VcaUY8KQhrW19RkUUsVxs5ygRHgz0LSpYNunIsqiRhYZkcpWNp
g8ZDenUZLlpikamNNkldNmbdl4pUKXqn0lYwlUwLysrC+TKqWyKyqCsq16dmh71U
sfpSUSriUl46PA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:32:52 2026 by rpki-client