Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: E3kDJelQpmt+gNhY4wwzL370V1JC95MmTEYVuuj5xpM=
Subject key identifier: BF:BE:39:40:3E:D0:63:B8:E9:29:58:3A:50:62:3E:68:6D:84:B6:99
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 01A17C291B3B52F0F354F0CB8C4925A5F467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1738
Signing time: Tue 27 Oct 2026 07:00:30 +0000
Manifest this update: Tue 27 Oct 2026 07:00:30 +0000
Manifest next update: Wed 28 Oct 2026 07:00:30 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: QDwr9THVYLo9WcPlAquzXeozMikQJpEPF16n7yDJKWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:1b:3b:52:f0:f3:54:f0:cb:8c:49:25:a5:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Oct 27 07:00:30 2026 GMT
Not After : Oct 28 07:00:30 2026 GMT
Subject: CN=bfbe39403ed063b8e929583a50623e686d84b699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:9a:04:60:cb:36:57:3c:0c:38:e3:1a:55:
74:66:f2:c4:fb:e8:a5:6d:bb:30:30:6b:50:2b:b4:
95:ce:81:18:68:66:2f:16:b7:04:bc:9e:3e:45:7e:
f2:da:91:94:4b:95:7d:60:a0:cc:b6:e2:6f:08:84:
39:86:ae:88:ce:e5:6e:87:08:0f:04:70:17:6a:02:
d2:33:d6:24:44:4a:77:2e:b6:c7:21:06:10:3d:d8:
4a:a2:37:e7:9d:db:fd:c1:a1:98:78:d1:ee:98:03:
1c:85:2a:f6:60:51:39:a1:7c:72:0e:cb:9a:f4:61:
9b:e7:86:97:c6:41:cf:1f:9f:36:ba:cb:2d:1c:a9:
40:06:22:61:3a:ce:18:f5:3d:e7:4e:4e:2d:0f:af:
0b:b1:4f:10:94:47:6c:9f:21:c2:50:eb:ef:39:5b:
20:17:47:42:09:bf:83:92:f6:4b:07:2d:d7:0d:03:
74:71:61:10:46:17:e2:69:74:14:da:aa:fa:96:45:
f6:d2:4d:a3:4d:92:ae:71:c0:05:62:a2:d4:03:0b:
9c:96:ea:9f:aa:e6:2e:c2:61:8b:79:ea:61:d9:bb:
d5:d1:25:5b:5e:03:71:39:71:c1:db:32:3c:9a:91:
7c:8e:d9:66:38:a9:42:d7:4e:df:2f:b8:96:b8:23:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:39:40:3E:D0:63:B8:E9:29:58:3A:50:62:3E:68:6D:84:B6:99
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:6e:cf:c0:ad:95:dc:1a:6b:58:84:78:9f:30:48:23:6f:
c6:fe:4d:24:00:2b:42:fd:13:cb:08:d6:60:0b:42:44:7f:e9:
b7:db:6b:e2:e7:d0:f9:a3:33:06:49:82:cf:25:b1:bc:2c:6d:
db:e9:90:cd:51:cd:b5:b0:9b:65:79:6f:fc:d0:c5:3e:ab:b4:
e4:36:f1:22:3b:e3:39:f8:0c:10:4f:f6:a8:24:75:94:b3:12:
a7:b4:fd:8b:b6:ae:20:05:39:b8:19:7d:c6:32:b0:35:35:1e:
53:46:34:4d:46:03:dc:eb:80:09:85:2b:94:eb:92:18:ac:3a:
7c:1c:93:6a:aa:48:bf:b7:ea:14:cd:b1:a7:f0:ab:af:df:d1:
09:2d:46:0d:eb:95:6e:98:22:17:52:88:0d:c4:4d:5f:56:1d:
d6:90:35:b0:76:9a:4a:e8:57:0f:36:54:85:75:f3:15:18:14:
59:4c:43:e3:b5:eb:47:65:8d:72:8d:90:78:df:5d:57:b3:23:
c0:24:f5:78:d5:82:e9:52:c0:da:5d:6b:4f:c9:d2:81:08:de:
d2:40:e4:d9:3b:81:40:d3:d3:ef:78:7a:8e:ef:1a:87:10:21:
05:32:fd:ca:f7:c9:ed:b7:b0:76:5b:ca:9d:ac:8b:2a:c0:a3:
5a:bd:06:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KRs7UvDzVPDLjEklpfRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjYxMDI3MDcwMDMwWhcNMjYxMDI4MDcwMDMwWjAzMTEwLwYDVQQD
EyhiZmJlMzk0MDNlZDA2M2I4ZTkyOTU4M2E1MDYyM2U2ODZkODRiNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTqaBGDLNlc8DDjjGlV0ZvLE++il
bbswMGtQK7SVzoEYaGYvFrcEvJ4+RX7y2pGUS5V9YKDMtuJvCIQ5hq6IzuVuhwgP
BHAXagLSM9YkREp3LrbHIQYQPdhKojfnndv9waGYeNHumAMchSr2YFE5oXxyDsua
9GGb54aXxkHPH582usstHKlABiJhOs4Y9T3nTk4tD68LsU8QlEdsnyHCUOvvOVsg
F0dCCb+DkvZLBy3XDQN0cWEQRhfiaXQU2qr6lkX20k2jTZKuccAFYqLUAwucluqf
quYuwmGLeeph2bvV0SVbXgNxOXHB2zI8mpF8jtlmOKlC107fL7iWuCOUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL++OUA+0GO46SlYOlBiPmhthLaZMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuFuz8Ct
ldwaa1iEeJ8wSCNvxv5NJAArQv0TywjWYAtCRH/pt9tr4ufQ+aMzBkmCzyWxvCxt
2+mQzVHNtbCbZXlv/NDFPqu05DbxIjvjOfgMEE/2qCR1lLMSp7T9i7auIAU5uBl9
xjKwNTUeU0Y0TUYD3OuACYUrlOuSGKw6fByTaqpIv7fqFM2xp/Crr9/RCS1GDeuV
bpgiF1KIDcRNX1Yd1pA1sHaaSuhXDzZUhXXzFRgUWUxD47XrR2WNco2QeN9dV7Mj
wCT1eNWC6VLA2l1rT8nSgQje0kDk2TuBQNPT73h6ju8ahxAhBTL9yvfJ7bewdlvK
nayLKsCjWr0GMQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 13:04:32 2026 by rpki-client