
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier: nWSUpFH5C0YW7d8ejcqHjholNoRN0RkZvr+nJr6732I=
Subject key identifier: D8:E3:1E:A9:95:82:62:A4:C6:2F:50:D0:C2:F2:2A:6F:34:D1:88:12
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 01A0ED78C8991E92760DC6CFC35BB3B4AAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 14:01:50 +0000
Manifest this update: Tue 29 Sep 2026 14:01:50 +0000
Manifest next update: Wed 30 Sep 2026 14:01:50 +0000
Files and hashes: 1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: ygjSGsi7YHRC/qos6/WbJANjqgKWY/jHErKPbZA6Ubs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:c8:99:1e:92:76:0d:c6:cf:c3:5b:b3:b4:aa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Sep 29 14:01:50 2026 GMT
Not After : Sep 30 14:01:50 2026 GMT
Subject: CN=d8e31ea9958262a4c62f50d0c2f22a6f34d18812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:30:15:76:d7:22:7d:ee:b9:14:30:26:f6:
5b:cf:ad:28:8d:be:45:5b:71:21:bf:54:02:bf:6a:
d4:23:bb:c5:1d:09:6d:cf:26:6a:4f:3f:07:2d:82:
ca:c2:41:03:97:e0:c8:dc:a1:b5:e9:a7:73:0d:b4:
ce:7d:93:ce:81:cc:a7:c5:1b:5a:7c:00:86:1c:08:
4a:c1:ce:7f:66:ea:47:92:34:96:9b:76:60:33:3c:
cc:8f:31:6a:e2:d6:6e:f2:7f:24:81:97:f7:a6:07:
cb:35:55:5f:a7:38:93:c0:fd:c2:b5:dc:04:e4:64:
0d:77:65:95:8a:7b:4a:9e:7c:b5:88:10:e0:b6:bf:
d1:bd:be:4e:84:7f:85:7d:b3:30:3f:d2:b3:fb:28:
c7:df:c4:6d:a9:ea:7f:5e:03:5b:98:1e:b1:7e:4e:
56:06:33:2c:25:58:d7:01:90:2a:cd:86:9e:34:72:
a9:bd:40:2f:57:4a:44:0f:11:f1:06:b4:82:2a:8f:
11:ab:bf:0e:35:9b:0d:85:36:ee:bd:d8:64:59:cf:
17:39:02:4f:fa:d8:b2:ca:54:08:8a:f8:6b:61:44:
41:66:cd:68:cb:19:8e:30:f3:44:af:ab:b1:20:a2:
1d:06:6e:88:80:35:c9:23:7e:25:11:50:9c:ff:0d:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:1E:A9:95:82:62:A4:C6:2F:50:D0:C2:F2:2A:6F:34:D1:88:12
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b8:fc:a6:9c:0a:da:5c:c0:49:d6:c8:f9:77:ad:f8:58:88:
a3:58:f2:dd:57:c4:80:af:4e:d6:d6:2a:d3:b9:e4:b9:04:7b:
dc:29:36:72:f9:6c:7b:30:68:6d:5b:03:70:58:50:e7:03:b6:
e0:1f:91:2f:88:a3:7f:4a:0e:11:d6:00:52:73:76:d3:f4:3e:
87:b6:9f:0c:56:51:e9:f8:5e:33:0b:83:eb:55:9f:77:b6:9c:
fb:e2:bc:91:37:ac:c1:e9:ae:53:cd:3b:ee:43:75:d2:6c:4a:
d2:14:8e:b2:0f:a3:bc:c6:9b:16:37:67:7e:6f:fb:6d:a4:63:
35:a7:0d:f9:fe:29:c3:88:73:ff:70:9d:d0:86:f5:77:81:94:
b6:3d:32:6a:be:e0:8d:e4:64:62:ad:a1:f3:c9:52:b8:b9:ff:
d0:99:79:85:51:ba:8a:06:f8:a3:d5:da:15:dd:c5:56:cb:1c:
63:aa:3a:89:2f:94:b8:a6:f0:26:1d:06:9c:27:34:54:b4:e4:
db:a7:72:bd:47:c1:1e:a5:34:9c:86:2b:40:fb:3f:0d:18:d5:
4e:1b:b7:39:30:90:08:86:4a:c4:de:62:46:02:89:65:a3:00:
7b:0f:04:eb:2d:db:9a:68:20:4e:c2:4e:0b:86:d2:f6:2f:f1:
39:ec:14:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDteMiZHpJ2DcbPw1uztKrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjYwOTI5MTQwMTUwWhcNMjYwOTMwMTQwMTUwWjAzMTEwLwYDVQQD
EyhkOGUzMWVhOTk1ODI2MmE0YzYyZjUwZDBjMmYyMmE2ZjM0ZDE4ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l0wFXbXIn3uuRQwJvZbz60ojb5F
W3Ehv1QCv2rUI7vFHQltzyZqTz8HLYLKwkEDl+DI3KG16adzDbTOfZPOgcynxRta
fACGHAhKwc5/ZupHkjSWm3ZgMzzMjzFq4tZu8n8kgZf3pgfLNVVfpziTwP3CtdwE
5GQNd2WVintKnny1iBDgtr/Rvb5OhH+FfbMwP9Kz+yjH38Rtqep/XgNbmB6xfk5W
BjMsJVjXAZAqzYaeNHKpvUAvV0pEDxHxBrSCKo8Rq78ONZsNhTbuvdhkWc8XOQJP
+tiyylQIivhrYURBZs1oyxmOMPNEr6uxIKIdBm6IgDXJI34lEVCc/w2GUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjjHqmVgmKkxi9Q0MLyKm800YgSMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarj8ppwK
2lzASdbI+Xet+FiIo1jy3VfEgK9O1tYq07nkuQR73Ck2cvlsezBobVsDcFhQ5wO2
4B+RL4ijf0oOEdYAUnN20/Q+h7afDFZR6fheMwuD61Wfd7ac++K8kTeswemuU807
7kN10mxK0hSOsg+jvMabFjdnfm/7baRjNacN+f4pw4hz/3Cd0Ib1d4GUtj0yar7g
jeRkYq2h88lSuLn/0Jl5hVG6igb4o9XaFd3FVsscY6o6iS+UuKbwJh0GnCc0VLTk
26dyvUfBHqU0nIYrQPs/DRjVThu3OTCQCIZKxN5iRgKJZaMAew8E6y3bmmggTsJO
C4bS9i/xOewUDA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:57:07 2026 by rpki-client