Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: CM/dPZuTgOTNbJpdswXKY3S8Pg71EGirvPj5RcWVg8s=
Subject key identifier: DE:B0:E4:5E:DB:3E:F6:B4:16:F5:87:3D:BC:9D:67:F1:6F:11:88:8E
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01A02A6B0CCEBE89AA3F830016F1AAA8168B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0A36
Signing time: Sat 22 Aug 2026 17:00:53 +0000
Manifest this update: Sat 22 Aug 2026 17:00:53 +0000
Manifest next update: Sun 23 Aug 2026 17:00:53 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (hash: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=)
4: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: zT02MAn11VNSLztignHZjBcI3sqwrBc7rx4nqQC3oG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:6b:0c:ce:be:89:aa:3f:83:00:16:f1:aa:a8:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Aug 22 17:00:53 2026 GMT
Not After : Aug 23 17:00:53 2026 GMT
Subject: CN=deb0e45edb3ef6b416f5873dbc9d67f16f11888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:7f:e7:d1:9c:48:47:94:38:e5:e6:48:81:
19:7d:a0:fe:b6:f1:5d:13:2c:a2:d4:5c:a2:65:37:
9f:80:cf:b5:30:c5:c4:29:36:64:bb:9c:6a:b3:60:
4a:61:85:1c:00:05:a3:28:b0:7c:b2:c8:1e:e7:a0:
73:2a:61:2d:a3:56:87:d1:ed:a0:99:00:c9:c0:62:
a5:ad:1e:fe:eb:32:ff:c8:67:b3:1e:b1:04:6d:63:
f4:bb:3e:a7:87:5b:3c:90:c1:f7:c6:e5:74:8d:cb:
fd:5d:ee:06:14:4b:18:26:e0:fc:27:ca:df:b0:9e:
e4:5e:17:e7:07:42:78:ff:2a:c7:d4:a2:fc:e8:0d:
84:b6:9e:f9:ba:42:cf:bd:3d:e2:e3:45:75:a7:3c:
7b:36:97:d8:7a:06:8b:52:fe:41:8c:eb:e7:eb:b2:
0b:bf:07:23:5b:db:ca:e2:3e:99:21:49:d9:69:a7:
59:3c:34:2c:2d:8d:f1:20:cb:d1:7b:fe:9f:d7:92:
d2:d6:49:d7:06:98:51:1d:df:42:a0:97:62:fa:a9:
a3:2b:94:3f:60:dd:4b:04:3b:19:f2:e0:4a:ce:06:
e9:0a:f8:84:30:2b:b8:1f:4f:12:c1:b1:df:69:f9:
e3:92:65:1b:fb:97:5b:d0:fa:5e:8c:c8:40:e5:dd:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:E4:5E:DB:3E:F6:B4:16:F5:87:3D:BC:9D:67:F1:6F:11:88:8E
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:50:d6:88:f8:39:05:aa:5a:a1:26:12:69:52:c6:16:51:df:
b5:fa:bd:98:04:79:15:60:bb:39:af:21:b9:44:d3:91:e6:e8:
55:b8:f5:38:33:ba:08:60:23:87:e9:ec:d5:3b:01:f0:16:dc:
e7:91:72:23:74:75:37:c9:af:80:ad:26:78:73:1f:93:db:1a:
80:77:56:10:cd:40:98:03:19:5b:ff:53:18:6d:94:8e:8a:9a:
d4:31:cd:86:ab:7e:dd:59:f0:d7:85:1a:ec:96:72:fa:00:ce:
5e:e8:e4:3d:cc:c4:22:01:3e:aa:1e:f4:36:5d:7a:33:bf:24:
ed:d5:e9:62:a9:8c:5f:33:bf:72:f6:79:ed:b8:23:f3:fa:d3:
0b:f2:b3:05:c5:03:02:34:12:4b:03:d6:06:86:80:9b:d7:f2:
1c:c8:38:7e:a1:a7:70:08:2a:cd:66:e7:79:1c:a8:09:58:a5:
01:97:26:0a:1c:d4:b2:38:bc:a9:62:ab:c7:69:64:20:cb:93:
da:af:61:42:13:6c:ac:ff:8b:c7:9d:18:46:e8:5c:8e:46:d5:
97:e5:7a:91:aa:72:42:c4:66:81:41:f0:c5:77:aa:47:67:60:
81:75:f2:27:71:5d:fa:38:12:45:b6:41:a7:6d:e4:e6:c4:b4:
c7:72:65:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAqawzOvomqP4MAFvGqqBaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2
Mzg1ZTcwHhcNMjYwODIyMTcwMDUzWhcNMjYwODIzMTcwMDUzWjAzMTEwLwYDVQQD
EyhkZWIwZTQ1ZWRiM2VmNmI0MTZmNTg3M2RiYzlkNjdmMTZmMTE4ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pp/59GcSEeUOOXmSIEZfaD+tvFd
Eyyi1FyiZTefgM+1MMXEKTZku5xqs2BKYYUcAAWjKLB8ssge56BzKmEto1aH0e2g
mQDJwGKlrR7+6zL/yGezHrEEbWP0uz6nh1s8kMH3xuV0jcv9Xe4GFEsYJuD8J8rf
sJ7kXhfnB0J4/yrH1KL86A2Etp75ukLPvT3i40V1pzx7NpfYegaLUv5BjOvn67IL
vwcjW9vK4j6ZIUnZaadZPDQsLY3xIMvRe/6f15LS1knXBphRHd9CoJdi+qmjK5Q/
YN1LBDsZ8uBKzgbpCviEMCu4H08SwbHfafnjkmUb+5db0PpejMhA5d2NEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6w5F7bPva0FvWHPbydZ/FvEYiOMB8GA1UdIwQY
MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt
M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh
LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVDWiPg5
BapaoSYSaVLGFlHftfq9mAR5FWC7Oa8huUTTkeboVbj1ODO6CGAjh+ns1TsB8Bbc
55FyI3R1N8mvgK0meHMfk9sagHdWEM1AmAMZW/9TGG2Ujoqa1DHNhqt+3Vnw14Ua
7JZy+gDOXujkPczEIgE+qh70Nl16M78k7dXpYqmMXzO/cvZ57bgj8/rTC/KzBcUD
AjQSSwPWBoaAm9fyHMg4fqGncAgqzWbneRyoCVilAZcmChzUsji8qWKrx2lkIMuT
2q9hQhNsrP+Lx50YRuhcjkbVl+V6kapyQsRmgUHwxXeqR2dggXXyJ3Fd+jgSRbZB
p23k5sS0x3JlcA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:13:54 2026 by rpki-client