Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
File: YiEr2gPikIllk3hQroSRo3O6h9Y.mft (raw, json)
Hash identifier: LMXZDiguJaKU2K5mT3F0L6qf3SjNLbV/QYKYENDM7Sk=
Subject key identifier: E8:99:D0:0F:33:52:67:97:B4:A2:55:82:E0:F3:4C:F4:A4:38:F7:3D
Authority key identifier: 62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
Certificate issuer: /CN=62212bda03e2908965937850ae8491a373ba87d6
Certificate serial: 01A08A8D244B5EE4F4C827362CECF07BE0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:40 +0000
Manifest this update: Thu 10 Sep 2026 09:01:40 +0000
Manifest next update: Fri 11 Sep 2026 09:01:40 +0000
Files and hashes: 1: J5ndYN47GulHNdd8j26GfEdBb4o.roa (hash: iuNL8Ztc0MFggBQFipuWLLh7iLuDAe58bhFd6SGPtXk=)
2: YiEr2gPikIllk3hQroSRo3O6h9Y.crl (hash: evjgiuR5pkHFDvk+B4MVJLFehPf+3CArbvWlwOrrRDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:24:4b:5e:e4:f4:c8:27:36:2c:ec:f0:7b:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62212bda03e2908965937850ae8491a373ba87d6
Validity
Not Before: Sep 10 09:01:40 2026 GMT
Not After : Sep 11 09:01:40 2026 GMT
Subject: CN=e899d00f33526797b4a25582e0f34cf4a438f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:bf:33:e8:0a:bb:e5:0a:2e:b4:86:56:37:
ce:80:d2:3c:a1:4a:0c:42:76:60:dc:2a:2f:71:cf:
e1:e4:fe:8e:b2:a1:62:c8:16:79:c3:ac:e6:7b:ca:
97:b4:5f:b9:61:4c:74:59:fb:a8:2f:c4:61:c5:6b:
f2:29:ce:88:68:8e:5a:d5:05:a0:fe:3a:67:7d:d9:
fd:4d:34:8e:14:28:e1:8d:c9:b1:59:4c:ee:1c:7b:
24:de:86:57:93:2b:5a:e9:a6:1e:dd:65:53:79:56:
61:3b:38:b0:cc:61:06:b1:d6:ae:39:70:11:f7:97:
ee:f8:77:24:18:49:55:ae:1d:df:36:9f:a0:33:dc:
56:41:14:8d:64:7d:a3:39:ac:76:e1:f3:f3:30:14:
19:e0:fd:60:93:26:d7:c9:2a:40:d1:60:6f:62:6b:
0c:1a:70:99:09:42:78:04:6c:73:fd:29:04:82:4c:
42:42:40:aa:4a:32:2a:6d:9d:93:3b:45:1d:a0:36:
e7:ad:e2:bc:5f:9d:14:e4:e2:45:d8:dc:c7:f1:a3:
4e:1e:98:fd:cc:e8:88:85:a0:1e:f8:fe:e1:b4:00:
00:bf:6f:3f:b3:07:05:3c:45:3a:cf:97:8c:bf:69:
c4:d4:05:32:e7:b8:6f:92:70:df:91:f9:d0:05:12:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:D0:0F:33:52:67:97:B4:A2:55:82:E0:F3:4C:F4:A4:38:F7:3D
X509v3 Authority Key Identifier:
keyid:62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:86:f1:c1:24:19:2d:f1:52:90:40:6e:30:cb:65:30:2a:
77:d5:56:32:c2:77:e7:7a:a2:83:05:d5:27:b9:14:fa:0e:55:
7e:d8:d2:7e:d4:93:11:e1:a6:a0:07:c6:ee:2a:e8:1e:ba:91:
6b:da:06:cc:5b:5e:c8:d4:2e:80:07:69:20:94:3d:72:9f:06:
3d:ce:11:8d:fd:51:ed:85:fc:3c:26:25:d6:4e:6e:1e:b6:77:
d2:66:38:26:80:05:12:6e:45:2d:64:38:f8:d0:c3:20:d3:d7:
1a:a5:a9:26:f7:b2:62:5b:c0:20:0e:5d:0a:b0:f5:72:20:58:
76:61:78:5e:6c:c0:2c:41:e2:11:81:16:77:08:1d:a7:df:30:
01:7a:af:9c:f5:e3:e3:aa:e7:97:93:33:d6:4e:08:73:4b:e2:
01:2b:ce:be:ac:6e:2e:a4:ef:8d:ad:ae:0e:a3:77:93:fa:6f:
07:b9:44:29:ef:81:a2:8a:0f:19:cb:6f:cd:f8:c4:45:f4:0e:
04:58:be:d8:0f:a4:e5:72:a9:08:2d:d7:61:90:75:8d:d9:24:
ea:df:f1:6f:33:af:5d:de:06:04:e1:1c:ee:ca:3d:3a:9c:c2:
ed:83:51:fc:b5:e4:f9:1a:32:8b:df:e1:a6:d8:24:9a:7c:01:
99:0d:c7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjSRLXuT0yCc2LOzwe+CzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjEyYmRhMDNlMjkwODk2NTkzNzg1MGFlODQ5MWEzNzNi
YTg3ZDYwHhcNMjYwOTEwMDkwMTQwWhcNMjYwOTExMDkwMTQwWjAzMTEwLwYDVQQD
EyhlODk5ZDAwZjMzNTI2Nzk3YjRhMjU1ODJlMGYzNGNmNGE0MzhmNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OG/M+gKu+UKLrSGVjfOgNI8oUoM
QnZg3Covcc/h5P6OsqFiyBZ5w6zme8qXtF+5YUx0WfuoL8RhxWvyKc6IaI5a1QWg
/jpnfdn9TTSOFCjhjcmxWUzuHHsk3oZXkyta6aYe3WVTeVZhOziwzGEGsdauOXAR
95fu+HckGElVrh3fNp+gM9xWQRSNZH2jOax24fPzMBQZ4P1gkybXySpA0WBvYmsM
GnCZCUJ4BGxz/SkEgkxCQkCqSjIqbZ2TO0UdoDbnreK8X50U5OJF2NzH8aNOHpj9
zOiIhaAe+P7htAAAv28/swcFPEU6z5eMv2nE1AUy57hvknDfkfnQBRIpgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiZ0A8zUmeXtKJVguDzTPSkOPc9MB8GA1UdIwQY
MBaAFGIhK9oD4pCJZZN4UK6EkaNzuofWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQt
Mjg5ZmRjNjM5OTZlLzEvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQtMjg5ZmRjNjM5OTZl
LzEvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjKG8cEk
GS3xUpBAbjDLZTAqd9VWMsJ353qigwXVJ7kU+g5VftjSftSTEeGmoAfG7iroHrqR
a9oGzFteyNQugAdpIJQ9cp8GPc4Rjf1R7YX8PCYl1k5uHrZ30mY4JoAFEm5FLWQ4
+NDDINPXGqWpJveyYlvAIA5dCrD1ciBYdmF4XmzALEHiEYEWdwgdp98wAXqvnPXj
46rnl5Mz1k4Ic0viASvOvqxuLqTvja2uDqN3k/pvB7lEKe+BoooPGctvzfjERfQO
BFi+2A+k5XKpCC3XYZB1jdkk6t/xbzOvXd4GBOEc7so9OpzC7YNR/LXk+Royi9/h
ptgkmnwBmQ3HsQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:44 2026 by rpki-client