Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
File: YdrAqoYffXLG8l1lbwMdoWftqVU.mft (raw, json)
Hash identifier: x6/GISlb/GXDNXdThXBeZeiybgh/sv5IOq6Ct5G7000=
Subject key identifier: 0C:AE:25:23:4D:64:8E:28:C0:3D:8E:79:37:F9:E6:80:2C:D9:05:C7
Authority key identifier: 61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
Certificate issuer: /CN=61dac0aa861f7d72c6f25d656f031da167eda955
Certificate serial: 01A1027FF79FA279D0CD7FCD332EF1B8F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
Manifest number: 017A
Signing time: Sat 03 Oct 2026 16:01:43 +0000
Manifest this update: Sat 03 Oct 2026 16:01:43 +0000
Manifest next update: Sun 04 Oct 2026 16:01:43 +0000
Files and hashes: 1: FlOjCt4LJfQ8IqN1peCaBvqAB2Q.roa (hash: RDwp0/0oDMXql1jT9ebav+hZj67VDM98AjOHB7oE64Y=)
2: YdrAqoYffXLG8l1lbwMdoWftqVU.crl (hash: ArHO5oLqyEWU+Aa1pDEQiislaQiTpsUDHFxLQZPqx9g=)
3: dhtCDXQLsqqlrkZYhsNQj7BUfwE.asa (hash: EzJqcTfM145uC1wp3s4ktIqJ62O99szOvIfXe4xA3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:f7:9f:a2:79:d0:cd:7f:cd:33:2e:f1:b8:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dac0aa861f7d72c6f25d656f031da167eda955
Validity
Not Before: Oct 3 16:01:43 2026 GMT
Not After : Oct 4 16:01:43 2026 GMT
Subject: CN=0cae25234d648e28c03d8e7937f9e6802cd905c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:7f:8e:75:51:a1:bc:bb:91:33:20:4b:e9:
1b:63:a2:23:2d:ae:c7:82:c0:0b:e9:cf:94:81:0a:
f0:b2:f4:af:f4:48:32:09:0a:ca:5e:ce:e7:87:b0:
f2:5f:94:b0:f8:03:df:68:43:6a:74:1d:30:c2:b5:
94:61:5b:b1:0c:38:e7:72:1e:14:cc:83:8d:97:95:
bc:35:c6:b6:af:ad:ae:17:96:e6:ad:a3:cb:54:64:
24:7c:05:1c:68:89:76:6b:85:82:10:1f:07:2d:0e:
2f:f9:31:67:ae:23:63:e0:e8:b3:bf:97:0a:d6:13:
ca:74:d4:b5:51:54:6a:98:66:59:de:e6:89:fb:3f:
9d:c5:8e:f5:27:24:bc:c3:00:54:17:be:6b:b7:77:
26:75:4c:60:6c:d9:66:b7:05:82:74:0a:89:94:0f:
d0:7a:31:01:cb:e1:76:3a:f8:70:a6:ff:ef:e5:81:
3e:60:f7:ac:79:d9:50:8c:4e:28:d4:05:ac:94:48:
e8:c2:40:f9:4c:4f:2d:c2:f2:62:c6:bd:ac:c3:ef:
c7:7c:7a:b4:fb:13:c3:f7:ec:c6:49:e7:96:d4:6d:
c2:99:af:f4:d9:f4:48:00:03:ba:27:7f:a1:b7:33:
ca:35:3e:b0:87:25:69:52:fb:f2:87:19:3f:2d:bc:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AE:25:23:4D:64:8E:28:C0:3D:8E:79:37:F9:E6:80:2C:D9:05:C7
X509v3 Authority Key Identifier:
keyid:61:DA:C0:AA:86:1F:7D:72:C6:F2:5D:65:6F:03:1D:A1:67:ED:A9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdrAqoYffXLG8l1lbwMdoWftqVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/08bc90-c05e-4a37-a0b6-f531881cf2bc/1/YdrAqoYffXLG8l1lbwMdoWftqVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:29:6f:6a:30:c5:89:6a:6a:73:52:ff:33:f2:8a:f7:2d:
11:3c:13:77:35:83:f0:c7:56:34:c8:8d:2a:87:5e:e4:1c:2d:
89:29:6b:77:2f:c1:03:99:bb:c6:78:3c:1e:3c:e2:ba:89:34:
d8:4b:2e:51:08:e7:57:01:14:8e:bc:b1:8a:d3:52:3f:c6:af:
57:78:cf:53:c6:a7:54:59:54:ad:c9:49:51:f2:f9:88:6b:06:
15:05:82:ef:2c:12:f8:9c:c2:61:99:70:23:ed:58:7a:e1:97:
25:fd:72:d9:ce:4b:78:0f:05:8d:d2:09:57:95:cf:9c:f7:05:
7c:c4:72:8d:aa:f3:3f:f1:de:88:04:7a:d8:ca:4a:c1:07:df:
5e:f9:1d:6c:c1:e2:8e:36:cf:10:e6:37:12:d6:fc:72:7d:d4:
fe:9d:b8:30:14:44:fa:69:1b:b2:84:f6:17:7d:6b:f8:bc:e6:
75:fa:db:08:97:f2:b0:a2:1d:bd:37:2b:22:84:57:9c:6b:22:
c8:7d:fc:c6:57:5c:22:91:dd:6b:88:56:70:02:80:7d:64:e4:
3b:f5:e3:24:57:6f:3e:d1:69:ba:2e:e5:8c:51:b6:82:14:11:
93:94:71:6c:3a:82:4e:e3:73:67:54:6a:c3:10:89:46:32:f8:
bd:48:22:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECf/efonnQzX/NMy7xuPeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZGFjMGFhODYxZjdkNzJjNmYyNWQ2NTZmMDMxZGExNjdl
ZGE5NTUwHhcNMjYxMDAzMTYwMTQzWhcNMjYxMDA0MTYwMTQzWjAzMTEwLwYDVQQD
EygwY2FlMjUyMzRkNjQ4ZTI4YzAzZDhlNzkzN2Y5ZTY4MDJjZDkwNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lB/jnVRoby7kTMgS+kbY6IjLa7H
gsAL6c+UgQrwsvSv9EgyCQrKXs7nh7DyX5Sw+APfaENqdB0wwrWUYVuxDDjnch4U
zIONl5W8Nca2r62uF5bmraPLVGQkfAUcaIl2a4WCEB8HLQ4v+TFnriNj4Oizv5cK
1hPKdNS1UVRqmGZZ3uaJ+z+dxY71JyS8wwBUF75rt3cmdUxgbNlmtwWCdAqJlA/Q
ejEBy+F2Ovhwpv/v5YE+YPesedlQjE4o1AWslEjowkD5TE8twvJixr2sw+/HfHq0
+xPD9+zGSeeW1G3Cma/02fRIAAO6J3+htzPKNT6whyVpUvvyhxk/LbwHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyuJSNNZI4owD2OeTf55oAs2QXHMB8GA1UdIwQY
MBaAFGHawKqGH31yxvJdZW8DHaFn7alVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wOGJjOTAtYzA1ZS00YTM3LWEwYjYt
ZjUzMTg4MWNmMmJjLzEvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wOGJjOTAtYzA1ZS00YTM3LWEwYjYtZjUzMTg4MWNmMmJj
LzEvWWRyQXFvWWZmWExHOGwxbGJ3TWRvV2Z0cVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2kpb2ow
xYlqanNS/zPyivctETwTdzWD8MdWNMiNKode5BwtiSlrdy/BA5m7xng8Hjziuok0
2EsuUQjnVwEUjryxitNSP8avV3jPU8anVFlUrclJUfL5iGsGFQWC7ywS+JzCYZlw
I+1YeuGXJf1y2c5LeA8FjdIJV5XPnPcFfMRyjarzP/HeiAR62MpKwQffXvkdbMHi
jjbPEOY3Etb8cn3U/p24MBRE+mkbsoT2F31r+LzmdfrbCJfysKIdvTcrIoRXnGsi
yH38xldcIpHda4hWcAKAfWTkO/XjJFdvPtFpui7ljFG2ghQRk5RxbDqCTuNzZ1Rq
wxCJRjL4vUgifg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:47:28 2026 by rpki-client