Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: 8ycN9hXJbzdG7y5/p45DdQK/w2j5a7ZgIWVz15Rnc9Y=
Subject key identifier: 90:26:0F:2F:FE:06:F3:A6:61:94:9B:09:7C:75:D5:1D:A5:8B:6B:DD
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 01A17D3CB531D06250D600DC53BAF8523AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 045A
Signing time: Tue 27 Oct 2026 12:01:32 +0000
Manifest this update: Tue 27 Oct 2026 12:01:32 +0000
Manifest next update: Wed 28 Oct 2026 12:01:32 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: sNIiy7oT5GdhNYkmXUh33bFY/QyFI2JTDqgS6JK2gFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:b5:31:d0:62:50:d6:00:dc:53:ba:f8:52:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Oct 27 12:01:32 2026 GMT
Not After : Oct 28 12:01:32 2026 GMT
Subject: CN=90260f2ffe06f3a661949b097c75d51da58b6bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:7f:19:5f:ab:15:bf:1a:60:7b:83:b1:95:
95:5e:6f:e6:b9:2a:67:6f:5b:f9:2b:97:bc:7d:2b:
d5:53:b9:87:3e:77:5d:99:32:21:c6:ba:a1:49:d0:
1c:27:72:3f:95:c0:29:e0:be:5b:0c:b2:32:a6:27:
96:8d:ad:aa:b9:b0:78:e2:71:e4:b1:fd:a6:80:f6:
d4:91:b7:91:f5:54:1f:6a:36:17:f8:ed:a3:08:8d:
cd:50:e5:3e:14:43:f4:54:1a:9e:ec:bb:a3:e4:08:
56:e0:d7:0e:0c:cf:97:93:b9:31:7e:8c:f8:9a:97:
a5:7d:85:96:37:0e:cd:2e:6f:49:9a:9a:04:fd:15:
da:6b:97:7c:2c:80:ae:46:74:32:1f:1e:9e:6c:c2:
18:cc:c1:3a:b9:72:bb:66:8d:b5:21:22:fe:04:a6:
93:43:96:01:ba:53:16:c7:98:59:3e:ee:c3:0c:61:
b3:7c:a1:30:e5:6b:a1:dc:a8:f7:cf:fb:d3:f6:f8:
92:78:c8:80:33:33:12:0c:f8:f4:9e:13:91:cb:f5:
48:17:2f:cc:e1:b9:33:1b:79:6e:96:73:76:5e:0c:
9d:5b:dc:9c:14:12:be:06:a2:47:a0:59:29:1a:59:
c4:c5:74:6f:fb:da:e3:1a:4b:9c:ff:8c:63:4c:38:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:0F:2F:FE:06:F3:A6:61:94:9B:09:7C:75:D5:1D:A5:8B:6B:DD
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:10:55:51:68:95:e9:e7:54:74:4d:1e:45:c0:8e:4c:44:79:
3e:4a:21:10:e5:09:37:5d:81:86:0c:13:8c:6c:d2:da:61:2f:
6c:dd:76:5e:a5:b2:a3:01:d3:97:05:cc:4b:9f:dd:1c:ed:91:
58:87:82:6b:d6:57:9b:79:f2:50:87:a7:cf:c6:7e:69:bb:b8:
9a:55:14:73:2d:e9:09:4e:d2:90:b4:53:03:25:e7:b1:0b:ba:
a8:3e:1f:c0:b4:ca:ca:78:7b:b9:21:2c:80:d5:53:0f:bf:a2:
7b:13:7d:f3:4b:aa:96:1e:eb:f7:5a:7a:d3:a2:81:24:f1:62:
5e:99:c9:ff:b7:5e:eb:ff:47:06:cf:49:a1:15:1b:9a:21:11:
4a:41:c2:cf:7a:69:1c:48:5d:ae:45:ce:d1:a5:e1:99:d7:33:
66:6b:61:8f:2f:87:01:a0:be:e2:a7:cc:ac:ad:95:58:4c:87:
92:96:d1:38:f7:78:43:3c:ac:fb:8a:2c:4e:90:20:8d:ba:15:
ff:c0:f2:1f:ba:bb:db:94:2c:11:aa:a4:36:f5:8e:c1:61:76:
71:d7:c6:3d:92:58:d5:30:5f:36:fe:44:a2:80:63:db:0f:75:
9d:e7:72:c5:2d:f0:1d:0d:2a:51:21:c4:50:4e:fe:cc:9f:58:
03:7b:18:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PLUx0GJQ1gDcU7r4UjrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3
ZjFjZDgwHhcNMjYxMDI3MTIwMTMyWhcNMjYxMDI4MTIwMTMyWjAzMTEwLwYDVQQD
Eyg5MDI2MGYyZmZlMDZmM2E2NjE5NDliMDk3Yzc1ZDUxZGE1OGI2YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4td/GV+rFb8aYHuDsZWVXm/muSpn
b1v5K5e8fSvVU7mHPnddmTIhxrqhSdAcJ3I/lcAp4L5bDLIypieWja2qubB44nHk
sf2mgPbUkbeR9VQfajYX+O2jCI3NUOU+FEP0VBqe7Luj5AhW4NcODM+Xk7kxfoz4
mpelfYWWNw7NLm9JmpoE/RXaa5d8LICuRnQyHx6ebMIYzME6uXK7Zo21ISL+BKaT
Q5YBulMWx5hZPu7DDGGzfKEw5Wuh3Kj3z/vT9viSeMiAMzMSDPj0nhORy/VIFy/M
4bkzG3lulnN2XgydW9ycFBK+BqJHoFkpGlnExXRv+9rjGkuc/4xjTDhp6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAmDy/+BvOmYZSbCXx11R2li2vdMB8GA1UdIwQY
MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt
MTBjNTQ2ZDc5YmE1LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1
LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRBVUWiV
6edUdE0eRcCOTER5PkohEOUJN12BhgwTjGzS2mEvbN12XqWyowHTlwXMS5/dHO2R
WIeCa9ZXm3nyUIenz8Z+abu4mlUUcy3pCU7SkLRTAyXnsQu6qD4fwLTKynh7uSEs
gNVTD7+iexN980uqlh7r91p606KBJPFiXpnJ/7de6/9HBs9JoRUbmiERSkHCz3pp
HEhdrkXO0aXhmdczZmthjy+HAaC+4qfMrK2VWEyHkpbROPd4Qzys+4osTpAgjboV
/8DyH7q725QsEaqkNvWOwWF2cdfGPZJY1TBfNv5EooBj2w91nedyxS3wHQ0qUSHE
UE7+zJ9YA3sY8A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:27:53 2026 by rpki-client