Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: a0xRuY7Jap9+ryk3g8qfCPgSFPe4oktSshlPASYzAGM=
Subject key identifier: 0E:D3:B2:44:9D:FA:32:9D:DC:AC:3E:CF:8D:5E:C5:45:35:73:DB:E9
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 01A18F0B06D7A350B7D4025CB75798B53819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 17DA
Signing time: Fri 30 Oct 2026 23:00:26 +0000
Manifest this update: Fri 30 Oct 2026 23:00:26 +0000
Manifest next update: Sat 31 Oct 2026 23:00:26 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: E6vn7FLZeV/xMYPKHibPkmnqdJ5pmgHqaLdf7ClWxOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:06:d7:a3:50:b7:d4:02:5c:b7:57:98:b5:38:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Oct 30 23:00:26 2026 GMT
Not After : Oct 31 23:00:26 2026 GMT
Subject: CN=0ed3b2449dfa329ddcac3ecf8d5ec5453573dbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:1c:e2:17:03:36:0e:16:20:b7:da:4d:e0:
27:8e:a7:a9:55:e7:5a:30:87:ba:bc:08:0f:89:a8:
b6:f8:85:01:85:4c:08:89:25:83:9f:6e:c6:bc:db:
c4:9c:5a:8f:fc:30:98:b3:4d:73:af:ed:0a:39:f5:
c6:c0:47:a0:46:f3:36:1d:78:25:32:16:7f:14:0c:
b4:92:16:d4:5d:eb:fa:cc:ab:c9:19:ea:82:2e:27:
f2:8b:bb:36:ac:2a:c9:72:23:b7:fb:00:7b:e2:1f:
1b:47:9f:5d:21:f8:0c:c9:a0:cd:7d:98:45:02:60:
40:a0:c2:b7:7c:14:7f:67:2d:6d:ea:d2:3f:0f:ae:
10:f2:a1:2e:50:fb:fe:fc:98:cd:01:b8:69:a1:04:
fa:d1:88:6a:4f:ad:85:8a:10:51:d5:b0:e7:06:07:
74:58:2d:c5:2e:9a:c4:ad:e1:87:ac:a0:58:75:ff:
70:fb:e2:53:a1:64:a6:e8:25:19:c7:18:46:e1:85:
3d:6e:45:9f:c2:c7:01:44:3e:e6:c0:01:dd:21:59:
aa:ca:9e:fc:d7:80:e8:ee:31:27:f0:80:4c:2f:b4:
57:2c:c6:be:27:67:0e:52:d6:0f:6a:94:4a:8b:b1:
34:3c:67:8e:3c:f2:0a:cc:11:88:dd:9d:c8:f3:e7:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:B2:44:9D:FA:32:9D:DC:AC:3E:CF:8D:5E:C5:45:35:73:DB:E9
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:3e:c1:ac:9e:6c:48:da:f8:75:c1:94:57:71:fc:c7:24:
a4:b4:99:d5:c2:93:fa:c5:4b:8d:55:7a:4a:06:83:fc:da:f0:
32:8c:e0:0c:91:44:5a:0e:d5:05:db:31:64:ad:95:7b:ba:63:
8c:59:10:ca:c3:cc:95:a5:56:56:ad:78:50:39:93:16:c3:21:
81:9b:54:1f:ca:47:a6:28:64:76:75:1d:38:2e:4d:f3:12:51:
48:06:31:1e:c1:0c:4d:59:43:b8:f5:da:c5:1d:b1:be:81:77:
3f:cc:84:22:84:27:d9:74:41:03:c9:78:fc:bc:63:13:85:df:
6d:5c:2f:c6:25:43:7a:1e:6e:64:39:6f:aa:e9:8b:0c:79:91:
14:1a:e7:0e:92:ea:c4:33:ba:b2:ba:f0:13:5e:92:73:c6:00:
88:42:9e:fd:bb:bd:0b:c3:37:51:f3:a9:e7:97:23:0c:7c:e3:
04:5e:d6:eb:99:d5:db:80:6b:c2:41:a7:d1:ce:be:c0:2c:d7:
f6:53:b5:67:b2:84:e1:3a:d7:28:63:5a:48:b1:d4:f7:dc:a7:
3d:d1:f2:b2:7a:6f:97:f2:bf:aa:a5:89:99:91:c6:4c:09:99:
0b:65:07:ac:66:fd:e6:03:38:f6:95:e9:a6:c9:21:bb:dd:7e:
4a:1d:87:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPCwbXo1C31AJct1eYtTgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj
OTc3ZDgwHhcNMjYxMDMwMjMwMDI2WhcNMjYxMDMxMjMwMDI2WjAzMTEwLwYDVQQD
EygwZWQzYjI0NDlkZmEzMjlkZGNhYzNlY2Y4ZDVlYzU0NTM1NzNkYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Qc4hcDNg4WILfaTeAnjqepVeda
MIe6vAgPiai2+IUBhUwIiSWDn27GvNvEnFqP/DCYs01zr+0KOfXGwEegRvM2HXgl
MhZ/FAy0khbUXev6zKvJGeqCLifyi7s2rCrJciO3+wB74h8bR59dIfgMyaDNfZhF
AmBAoMK3fBR/Zy1t6tI/D64Q8qEuUPv+/JjNAbhpoQT60YhqT62FihBR1bDnBgd0
WC3FLprEreGHrKBYdf9w++JToWSm6CUZxxhG4YU9bkWfwscBRD7mwAHdIVmqyp78
14Do7jEn8IBML7RXLMa+J2cOUtYPapRKi7E0PGeOPPIKzBGI3Z3I8+eZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7TskSd+jKd3Kw+z41exUU1c9vpMB8GA1UdIwQY
MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt
YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi
LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6c+waye
bEja+HXBlFdx/MckpLSZ1cKT+sVLjVV6SgaD/NrwMozgDJFEWg7VBdsxZK2Ve7pj
jFkQysPMlaVWVq14UDmTFsMhgZtUH8pHpihkdnUdOC5N8xJRSAYxHsEMTVlDuPXa
xR2xvoF3P8yEIoQn2XRBA8l4/LxjE4XfbVwvxiVDeh5uZDlvqumLDHmRFBrnDpLq
xDO6srrwE16Sc8YAiEKe/bu9C8M3UfOp55cjDHzjBF7W65nV24BrwkGn0c6+wCzX
9lO1Z7KE4TrXKGNaSLHU99ynPdHysnpvl/K/qqWJmZHGTAmZC2UHrGb95gM49pXp
pskhu91+Sh2HCQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 10:00:57 2026 by rpki-client