Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: OmLe3UE9KYnY4HSvj8nmZ53ZSw1VNpS/j/MnH74M00M=
Subject key identifier: 14:5F:0B:4F:2B:27:EF:9B:D0:E6:E9:BE:96:01:A0:64:D1:41:90:7F
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01A01A53361AE1C72439B5951FB46E63FFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 14AB
Signing time: Wed 19 Aug 2026 14:00:55 +0000
Manifest this update: Wed 19 Aug 2026 14:00:55 +0000
Manifest next update: Thu 20 Aug 2026 14:00:55 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 65sv/USdlravgGrIQ73MSwKoA7+VxU4PCu5nm3MWbZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:53:36:1a:e1:c7:24:39:b5:95:1f:b4:6e:63:ff:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Aug 19 14:00:55 2026 GMT
Not After : Aug 20 14:00:55 2026 GMT
Subject: CN=145f0b4f2b27ef9bd0e6e9be9601a064d141907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:c2:86:8b:d6:94:fa:78:86:d4:38:c9:55:
d0:0f:23:61:ad:e7:1b:92:08:f3:8d:08:b9:d3:79:
b2:b3:28:96:8f:0d:ff:59:5d:bc:6d:12:3e:ee:aa:
1e:4e:51:c0:1f:5e:fe:48:39:f6:2f:97:89:80:46:
ec:7c:32:a9:f1:4d:02:53:84:33:6d:29:40:f3:75:
67:48:35:39:da:d7:78:af:a7:01:51:db:ba:77:01:
c5:23:c5:43:7e:8f:73:32:40:c3:12:71:96:11:93:
c8:50:15:13:83:94:5f:e4:0b:90:f7:cc:21:1b:2b:
10:81:4d:61:68:56:83:9e:62:e2:2b:86:a6:7d:01:
06:8e:71:dd:3b:ff:9e:8c:bd:15:f3:76:e1:01:8d:
d7:8c:10:22:bd:25:6b:2e:be:55:02:9b:67:e2:c9:
08:47:2b:6c:a0:61:a5:a5:d0:c2:8b:65:cc:4f:08:
fd:aa:68:35:d3:af:d4:8a:9b:71:4f:a3:7a:d6:0b:
e2:92:fd:6f:75:ec:bf:b7:d2:c7:3e:d1:cd:d9:b3:
2e:af:6d:66:db:80:ba:94:ad:2d:55:38:f5:33:8b:
68:05:17:ba:90:b6:39:e8:c4:7e:01:71:cc:38:74:
82:75:b6:99:d8:e8:15:3a:53:3e:1b:55:2b:2a:a0:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:0B:4F:2B:27:EF:9B:D0:E6:E9:BE:96:01:A0:64:D1:41:90:7F
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:b1:c4:67:c1:35:3b:96:c6:1e:8d:01:1c:ec:b2:a7:8d:
37:af:e6:1e:5a:5e:76:e0:8b:79:ab:67:98:a0:61:b7:f7:5a:
c6:31:e1:59:eb:e8:e9:87:be:70:28:d2:9e:29:e2:6f:f7:b5:
7e:b2:f2:b3:dc:68:04:44:21:a4:58:a9:fb:f8:d5:96:c3:35:
01:8a:de:98:34:c6:2e:c4:3a:27:58:15:d1:d7:33:b4:f2:ff:
9c:c2:97:66:10:44:37:53:84:d2:d7:2e:69:cf:2d:9e:5a:0b:
ab:e1:68:a8:f9:3c:65:06:63:4f:4e:bc:ef:29:60:3d:25:02:
b5:51:a2:3e:1e:28:9f:77:59:3c:77:83:ef:b5:34:49:56:85:
06:7b:74:a9:b0:9f:5a:85:ce:a2:cf:05:6e:f4:00:30:c0:54:
eb:25:46:0d:c4:ae:bd:e1:c2:dc:14:1f:97:30:23:0f:20:9a:
e1:e5:03:a4:79:fb:8f:19:08:b2:c3:1e:50:85:ad:fc:30:5d:
bb:81:e0:93:82:ea:78:be:02:2a:9a:0b:ff:63:1a:19:54:74:
28:4e:24:f4:4c:65:78:aa:f4:c2:7e:7d:b2:20:49:42:e8:85:
7b:2e:a3:90:ff:24:3c:dc:24:6c:1a:11:a1:22:fd:16:67:21:
8c:ff:1d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAaUzYa4cckObWVH7RuY//EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjYwODE5MTQwMDU1WhcNMjYwODIwMTQwMDU1WjAzMTEwLwYDVQQD
EygxNDVmMGI0ZjJiMjdlZjliZDBlNmU5YmU5NjAxYTA2NGQxNDE5MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyLChovWlPp4htQ4yVXQDyNhrecb
kgjzjQi503mysyiWjw3/WV28bRI+7qoeTlHAH17+SDn2L5eJgEbsfDKp8U0CU4Qz
bSlA83VnSDU52td4r6cBUdu6dwHFI8VDfo9zMkDDEnGWEZPIUBUTg5Rf5AuQ98wh
GysQgU1haFaDnmLiK4amfQEGjnHdO/+ejL0V83bhAY3XjBAivSVrLr5VAptn4skI
RytsoGGlpdDCi2XMTwj9qmg106/UiptxT6N61gvikv1vdey/t9LHPtHN2bMur21m
24C6lK0tVTj1M4toBRe6kLY56MR+AXHMOHSCdbaZ2OgVOlM+G1UrKqCNqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRfC08rJ++b0ObpvpYBoGTRQZB/MB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNqxxGfB
NTuWxh6NARzssqeNN6/mHlpeduCLeatnmKBht/daxjHhWevo6Ye+cCjSninib/e1
frLys9xoBEQhpFip+/jVlsM1AYremDTGLsQ6J1gV0dcztPL/nMKXZhBEN1OE0tcu
ac8tnloLq+FoqPk8ZQZjT0687ylgPSUCtVGiPh4on3dZPHeD77U0SVaFBnt0qbCf
WoXOos8FbvQAMMBU6yVGDcSuveHC3BQflzAjDyCa4eUDpHn7jxkIssMeUIWt/DBd
u4Hgk4LqeL4CKpoL/2MaGVR0KE4k9ExleKr0wn59siBJQuiFey6jkP8kPNwkbBoR
oSL9FmchjP8dMQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:04:24 2026 by rpki-client