Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier: wWbJ1vKKiSuc7MrEx9GkAw6jKmihVfTHyx/ukfJT738=
Subject key identifier: A3:21:0F:BC:49:AB:99:1F:25:6E:67:8E:9D:00:F8:43:53:B5:AB:3D
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 01A0CB598BFF26EF69A52E3C04AA48050D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number: 0681
Signing time: Tue 22 Sep 2026 23:00:38 +0000
Manifest this update: Tue 22 Sep 2026 23:00:38 +0000
Manifest next update: Wed 23 Sep 2026 23:00:38 +0000
Files and hashes: 1: hLDJZ-V17lQ1uYy4Yb_7EyNt5EY.roa (hash: 0stvy4uT+ZzDa9Ceq2lwui9WwwpxCgyyC5wsX5cUjjE=)
2: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: 2VndaOuZW/91uJtbZPJ9PVIU3j89l/d+uNePCeBmxwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:8b:ff:26:ef:69:a5:2e:3c:04:aa:48:05:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Sep 22 23:00:38 2026 GMT
Not After : Sep 23 23:00:38 2026 GMT
Subject: CN=a3210fbc49ab991f256e678e9d00f84353b5ab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:45:37:2a:03:b7:e7:91:c8:f7:f6:b7:74:
fa:74:b5:02:8d:e5:a9:a8:cb:8e:0c:91:96:d3:4d:
6f:70:85:9f:76:e0:87:c4:1b:a9:83:2d:3b:cf:f4:
0e:72:34:65:98:e9:bd:fe:2d:ea:90:61:68:d6:b4:
1c:42:cc:bd:cc:1f:e3:cb:18:e3:64:6f:4b:f1:41:
eb:5d:57:6c:8c:cb:e8:86:12:b8:fa:3a:04:82:57:
b7:3f:bf:bd:8f:0c:64:23:55:2b:c6:05:c0:a2:29:
60:d3:20:59:27:11:b0:a0:7e:88:b3:b1:04:2b:b9:
e6:52:75:a6:fb:9a:82:25:5a:2d:97:88:af:46:d3:
eb:68:fe:0a:f6:8c:ed:7b:a0:c0:d8:60:18:2c:1b:
c0:9c:6b:a1:34:bf:ce:de:a5:88:24:19:e9:04:ab:
d7:66:88:2e:07:b6:d4:97:e1:d7:ba:af:6e:07:6e:
6e:59:87:51:b2:1d:62:02:fb:44:c0:22:86:73:fb:
43:13:87:92:fa:d6:e8:67:2f:0f:ce:6f:1d:35:63:
e1:9f:e7:51:75:2b:62:11:f6:0d:49:2c:5d:ed:25:
8a:8f:ce:41:da:b4:92:cc:eb:c3:1c:ca:e1:f0:6f:
f5:8b:29:db:6a:9b:f3:04:7f:1d:25:84:3f:d0:4c:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:0F:BC:49:AB:99:1F:25:6E:67:8E:9D:00:F8:43:53:B5:AB:3D
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a9:17:3d:a9:57:8f:e7:fa:46:29:93:23:8e:ac:14:f4:40:
0f:6e:26:8b:88:1b:12:a0:8e:65:98:a3:44:93:ec:5c:5f:5e:
45:fe:3d:8f:b9:bf:6a:6f:6f:61:14:b9:41:89:ff:07:b2:5c:
e1:05:01:08:49:eb:53:d1:0c:8c:a3:90:66:8b:e9:8e:73:f5:
c9:4c:06:ce:0b:04:73:2f:11:44:c1:de:29:f4:82:1a:78:76:
e6:5d:86:09:e5:dc:9a:2a:02:4d:cf:bc:ea:5f:66:07:e2:e8:
10:bd:3f:4f:b3:24:0f:b0:0c:eb:04:ac:67:0b:26:9a:b8:cc:
af:2b:c7:04:6b:91:71:c8:f5:bd:17:d4:5c:49:9f:a7:70:fb:
dd:e1:91:39:3f:2b:d9:bd:64:d7:47:43:bc:41:d1:5b:ad:33:
cb:98:a7:ba:f1:85:31:64:04:38:dd:08:5f:7c:56:29:10:f3:
fb:73:68:a9:fa:34:f0:72:eb:8c:ac:a3:55:9b:c8:73:55:a5:
32:aa:59:ac:2e:da:0e:51:e7:cb:29:71:e7:35:2c:b5:74:04:
bd:57:04:7e:fb:a6:68:29:5d:85:7c:e4:7e:7c:53:38:b3:08:
e8:38:c2:8e:6b:a8:60:97:12:32:10:4e:4c:6f:88:a6:ee:a6:
ba:48:ad:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWYv/Ju9ppS48BKpIBQ04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNTk5YmRjMWNmYzdhZThjYzJmYmExNWZjZDgwY2ExMTcz
Nzg0NjcwHhcNMjYwOTIyMjMwMDM4WhcNMjYwOTIzMjMwMDM4WjAzMTEwLwYDVQQD
EyhhMzIxMGZiYzQ5YWI5OTFmMjU2ZTY3OGU5ZDAwZjg0MzUzYjVhYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MtFNyoDt+eRyPf2t3T6dLUCjeWp
qMuODJGW001vcIWfduCHxBupgy07z/QOcjRlmOm9/i3qkGFo1rQcQsy9zB/jyxjj
ZG9L8UHrXVdsjMvohhK4+joEgle3P7+9jwxkI1UrxgXAoilg0yBZJxGwoH6Is7EE
K7nmUnWm+5qCJVotl4ivRtPraP4K9ozte6DA2GAYLBvAnGuhNL/O3qWIJBnpBKvX
ZoguB7bUl+HXuq9uB25uWYdRsh1iAvtEwCKGc/tDE4eS+tboZy8Pzm8dNWPhn+dR
dStiEfYNSSxd7SWKj85B2rSSzOvDHMrh8G/1iynbapvzBH8dJYQ/0EyHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMhD7xJq5kfJW5njp0A+ENTtas9MB8GA1UdIwQY
MBaAFMpZm9wc/HrozC+6FfzYDKEXN4RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQt
Y2M5MTI3NDZlNDdlLzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQtY2M5MTI3NDZlNDdl
LzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6kXPalX
j+f6RimTI46sFPRAD24mi4gbEqCOZZijRJPsXF9eRf49j7m/am9vYRS5QYn/B7Jc
4QUBCEnrU9EMjKOQZovpjnP1yUwGzgsEcy8RRMHeKfSCGnh25l2GCeXcmioCTc+8
6l9mB+LoEL0/T7MkD7AM6wSsZwsmmrjMryvHBGuRccj1vRfUXEmfp3D73eGROT8r
2b1k10dDvEHRW60zy5inuvGFMWQEON0IX3xWKRDz+3Noqfo08HLrjKyjVZvIc1Wl
MqpZrC7aDlHnyylx5zUstXQEvVcEfvumaCldhXzkfnxTOLMI6DjCjmuoYJcSMhBO
TG+Ipu6mukitvQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:27:07 2026 by rpki-client