Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: 5U5EgOOi4UuQb+YZem5VYBIvN7xa26OXUFtj3iKXqho=
Subject key identifier: 42:32:0B:71:A8:AE:4F:C1:DB:AC:24:AD:71:DB:5D:26:25:7C:86:F0
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01A06EDEBE2931ED4CFDFA76033C2CC84C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 00:01:26 +0000
Manifest this update: Sat 05 Sep 2026 00:01:26 +0000
Manifest next update: Sun 06 Sep 2026 00:01:26 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: erSj1XgHBrV6Mc7VylNGoqKzoGZWc+SAb6aG61j/iOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:be:29:31:ed:4c:fd:fa:76:03:3c:2c:c8:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Sep 5 00:01:26 2026 GMT
Not After : Sep 6 00:01:26 2026 GMT
Subject: CN=42320b71a8ae4fc1dbac24ad71db5d26257c86f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:fc:46:ae:2c:69:d0:88:24:2a:73:16:02:
8e:4d:b4:91:74:d3:ba:0c:fa:24:14:86:88:f1:92:
13:e5:67:bd:92:6d:d3:7c:30:29:18:cc:77:78:f8:
fb:ae:af:a7:d8:cf:3f:72:dd:e9:8b:8b:9a:1c:1c:
94:ef:e4:ab:e1:59:9d:06:da:66:14:ce:cb:1f:ce:
b7:8a:78:b4:f8:9b:c9:1f:61:11:f8:93:fd:6f:02:
08:90:2f:fc:81:8c:7f:6a:a7:4c:b1:1f:d1:ea:1c:
9a:cb:f8:ec:86:dd:cc:e6:61:75:e6:2e:af:da:b2:
7f:22:88:c4:1f:ec:85:ff:ac:35:c9:3c:62:92:9f:
c4:46:8e:40:8a:76:36:b1:da:a2:2f:06:cc:1a:9e:
dc:53:5e:05:e2:a5:5d:08:90:d3:1b:66:dd:45:e6:
f3:41:dc:f7:2c:cb:53:2e:76:9e:d3:7d:dd:f1:4a:
27:fe:46:71:6e:64:83:0e:8b:60:79:02:16:c6:1d:
08:96:47:c4:3f:d9:1e:91:66:b7:ee:69:6c:c7:55:
19:02:7e:44:c3:d8:d5:77:4e:bd:bc:4b:ca:26:77:
5d:5d:be:b8:d0:7c:c0:22:04:4a:58:e5:47:9b:3b:
32:1b:80:2b:d5:ac:d0:f9:50:6d:02:99:90:4a:21:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:0B:71:A8:AE:4F:C1:DB:AC:24:AD:71:DB:5D:26:25:7C:86:F0
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:e9:24:ff:f9:0a:26:ef:12:94:f8:4b:40:9a:f7:64:da:
36:43:8c:ca:ca:50:38:67:47:c8:3c:44:df:cf:1d:08:02:69:
b6:d0:62:b2:f0:4b:5f:0c:01:f2:69:93:61:77:2c:42:8e:33:
65:5a:2c:c6:9a:ac:e5:56:97:7f:66:a6:d2:8a:c5:79:f1:ef:
7a:d9:52:e6:c0:8f:15:c9:2b:e3:f2:00:c5:67:12:c3:85:30:
7f:b5:8f:19:04:ae:96:95:dc:a6:92:84:ee:f6:ea:96:e2:fb:
f8:85:90:24:5e:f1:a1:8a:6e:b2:6f:f1:a9:25:23:f1:6a:1b:
dd:44:e1:e3:0f:e3:68:15:74:85:ed:24:8e:c5:0c:35:2b:96:
73:b3:25:f0:a1:26:53:50:11:ad:2a:57:50:7d:91:88:5c:4d:
9c:2c:91:94:18:74:63:ec:02:23:61:ee:c3:d7:cf:9f:74:ad:
a3:f1:c8:54:68:bd:89:c2:a5:03:94:f0:0b:10:f9:6c:1d:4f:
09:4a:07:91:47:13:39:4b:df:a9:24:5d:0a:60:87:b2:0b:fb:
b3:7d:46:1d:44:78:e5:3a:a6:2c:39:d8:7e:e1:65:60:67:0a:
04:67:a7:ed:b9:61:8c:37:e2:f3:d9:21:f6:1e:6a:c8:89:6e:
4d:2a:a2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3r4pMe1M/fp2AzwsyEyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjYwOTA1MDAwMTI2WhcNMjYwOTA2MDAwMTI2WjAzMTEwLwYDVQQD
Eyg0MjMyMGI3MWE4YWU0ZmMxZGJhYzI0YWQ3MWRiNWQyNjI1N2M4NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4z8Rq4sadCIJCpzFgKOTbSRdNO6
DPokFIaI8ZIT5We9km3TfDApGMx3ePj7rq+n2M8/ct3pi4uaHByU7+Sr4VmdBtpm
FM7LH863ini0+JvJH2ER+JP9bwIIkC/8gYx/aqdMsR/R6hyay/jsht3M5mF15i6v
2rJ/IojEH+yF/6w1yTxikp/ERo5AinY2sdqiLwbMGp7cU14F4qVdCJDTG2bdRebz
Qdz3LMtTLnae033d8Uon/kZxbmSDDotgeQIWxh0IlkfEP9kekWa37mlsx1UZAn5E
w9jVd069vEvKJnddXb640HzAIgRKWOVHmzsyG4Ar1azQ+VBtApmQSiHyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIyC3Gork/B26wkrXHbXSYlfIbwMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3TpJP/5
CibvEpT4S0Ca92TaNkOMyspQOGdHyDxE388dCAJpttBisvBLXwwB8mmTYXcsQo4z
ZVosxpqs5VaXf2am0orFefHvetlS5sCPFckr4/IAxWcSw4Uwf7WPGQSulpXcppKE
7vbqluL7+IWQJF7xoYpusm/xqSUj8Wob3UTh4w/jaBV0he0kjsUMNSuWc7Ml8KEm
U1ARrSpXUH2RiFxNnCyRlBh0Y+wCI2Huw9fPn3Sto/HIVGi9icKlA5TwCxD5bB1P
CUoHkUcTOUvfqSRdCmCHsgv7s31GHUR45TqmLDnYfuFlYGcKBGen7blhjDfi89kh
9h5qyIluTSqi+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:26:08 2026 by rpki-client