Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: fZVeeBUM2nKFOZlg6NmJce2OjAdNU/tyuDPvJtxRFYY=
Subject key identifier: 40:C2:73:86:56:54:5E:9F:DC:02:51:F3:63:36:0E:94:9B:B0:34:C8
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 01A0246970FB9D88F0B1286A74E8228D3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 046A
Signing time: Fri 21 Aug 2026 13:01:24 +0000
Manifest this update: Fri 21 Aug 2026 13:01:24 +0000
Manifest next update: Sat 22 Aug 2026 13:01:24 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: NHclyvwCw5PuCVuBGGGGpq2bwXdv9E8SlFNFUBubelA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:69:70:fb:9d:88:f0:b1:28:6a:74:e8:22:8d:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Aug 21 13:01:24 2026 GMT
Not After : Aug 22 13:01:24 2026 GMT
Subject: CN=40c2738656545e9fdc0251f363360e949bb034c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:fe:2f:52:1f:16:87:ff:6b:7f:d4:60:fe:
83:f0:80:ab:b0:7f:f1:7d:0f:18:e5:79:7d:5e:6d:
89:1f:c6:13:c9:c1:29:88:b9:e4:39:58:a2:da:b5:
12:f8:58:a0:28:3d:5a:00:79:15:f0:ae:9c:dd:37:
97:f7:e6:20:ea:56:73:5f:05:60:3e:7c:e5:9d:d2:
86:61:c5:a3:3f:70:82:f6:c8:55:88:cb:d4:a9:55:
cf:e0:f2:bf:28:97:31:e2:08:84:ad:05:57:e0:62:
61:b9:27:a4:ba:ec:4d:d4:3d:1c:6c:c8:7b:90:44:
83:7b:17:10:88:2d:e5:63:58:52:5a:a3:22:5e:14:
8a:ba:95:a7:f5:43:c1:82:78:00:1c:5d:93:26:bd:
74:ff:f2:ea:1a:79:04:57:9a:e6:ee:36:e0:a7:a1:
86:45:e6:37:e4:ad:9a:71:86:c6:a0:fd:3b:63:2f:
49:e0:2d:e9:76:b2:60:7b:05:f5:70:db:be:d3:9d:
8d:9c:42:cc:c8:5e:3f:ad:b9:eb:3d:d7:ae:96:3e:
67:0a:22:f9:5c:ce:63:9b:5b:4f:8f:b7:47:01:21:
f1:ab:71:c8:86:ee:d9:e4:cc:9c:55:a3:cc:51:6f:
cb:a1:19:c0:0f:87:e9:16:80:6f:52:80:2d:3a:26:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:73:86:56:54:5E:9F:DC:02:51:F3:63:36:0E:94:9B:B0:34:C8
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fd:83:8a:21:ff:c7:d6:fc:64:c5:d3:31:a8:bc:10:e4:9b:
e3:d0:bc:ee:96:94:86:63:9d:92:fd:8a:00:7a:ab:e5:74:44:
ee:5f:e1:c0:01:7f:ba:8b:55:c7:a2:40:c9:fd:ee:f1:50:7d:
95:8b:67:09:0b:da:bf:bd:1c:06:79:8a:3f:3b:4b:6c:50:86:
ae:a0:39:66:b2:6d:b1:52:49:70:c6:ff:6b:7e:2e:31:58:f8:
42:b8:71:13:f2:36:6a:8d:05:db:87:ed:4b:23:9e:c7:b3:e3:
66:28:80:95:d0:13:64:a3:b1:6c:cb:8e:a9:68:ee:4a:3a:bc:
18:5b:08:a3:9f:d2:ad:85:2b:63:ff:19:d9:a5:c3:4b:a6:3e:
ef:71:b4:e5:94:35:b2:29:3b:2b:f0:f5:05:20:a9:a5:0c:d0:
1c:83:b9:92:b1:7d:75:0d:e3:c9:90:22:e4:41:5a:d8:75:26:
84:9c:5e:48:db:af:fe:12:51:ce:6a:03:a0:1c:3b:e3:95:c2:
9f:21:04:81:e2:2e:09:f8:42:22:3d:c0:78:72:54:50:d8:28:
a9:e1:ce:a9:3e:46:1f:4c:31:9a:dc:b2:c9:bd:b6:97:e9:2a:
d7:48:96:47:11:3f:1b:c6:dc:5c:92:c8:da:36:71:59:60:27:
f7:f5:36:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAkaXD7nYjwsShqdOgijTq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjYwODIxMTMwMTI0WhcNMjYwODIyMTMwMTI0WjAzMTEwLwYDVQQD
Eyg0MGMyNzM4NjU2NTQ1ZTlmZGMwMjUxZjM2MzM2MGU5NDliYjAzNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwL+L1IfFof/a3/UYP6D8ICrsH/x
fQ8Y5Xl9Xm2JH8YTycEpiLnkOVii2rUS+FigKD1aAHkV8K6c3TeX9+Yg6lZzXwVg
PnzlndKGYcWjP3CC9shViMvUqVXP4PK/KJcx4giErQVX4GJhuSekuuxN1D0cbMh7
kESDexcQiC3lY1hSWqMiXhSKupWn9UPBgngAHF2TJr10//LqGnkEV5rm7jbgp6GG
ReY35K2acYbGoP07Yy9J4C3pdrJgewX1cNu+052NnELMyF4/rbnrPdeulj5nCiL5
XM5jm1tPj7dHASHxq3HIhu7Z5MycVaPMUW/LoRnAD4fpFoBvUoAtOiaRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDCc4ZWVF6f3AJR82M2DpSbsDTIMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf2DiiH/
x9b8ZMXTMai8EOSb49C87paUhmOdkv2KAHqr5XRE7l/hwAF/uotVx6JAyf3u8VB9
lYtnCQvav70cBnmKPztLbFCGrqA5ZrJtsVJJcMb/a34uMVj4QrhxE/I2ao0F24ft
SyOex7PjZiiAldATZKOxbMuOqWjuSjq8GFsIo5/SrYUrY/8Z2aXDS6Y+73G05ZQ1
sik7K/D1BSCppQzQHIO5krF9dQ3jyZAi5EFa2HUmhJxeSNuv/hJRzmoDoBw745XC
nyEEgeIuCfhCIj3AeHJUUNgoqeHOqT5GH0wxmtyyyb22l+kq10iWRxE/G8bcXJLI
2jZxWWAn9/U2Dw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 18:34:04 2026 by rpki-client