Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: HTdg9HXwW6nE2HNCj0SJ3h7da7uLKY0mr77yJCkRPfg=
Subject key identifier: 99:37:85:82:92:F0:7C:81:55:84:2E:A0:FD:97:69:FA:04:31:90:56
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 01A08B68A297487630C045AE0C0D5994CEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 16A0
Signing time: Thu 10 Sep 2026 13:01:25 +0000
Manifest this update: Thu 10 Sep 2026 13:01:25 +0000
Manifest next update: Fri 11 Sep 2026 13:01:25 +0000
Files and hashes: 1: fX_U5i8_505QcoxrQlZ0CvkYmQI.asa (hash: aVCE2GeGq3K644sCZQdXHhaAtDF/U4Oz4kWE7lxH4VQ=)
2: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: NX3Hubnijm2KBvMgShVD4CUEiup/2SeAZdjyyyOo9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:a2:97:48:76:30:c0:45:ae:0c:0d:59:94:ce:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Sep 10 13:01:25 2026 GMT
Not After : Sep 11 13:01:25 2026 GMT
Subject: CN=9937858292f07c8155842ea0fd9769fa04319056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:50:01:9a:f0:48:ca:1c:cd:b8:ce:3a:a8:
49:86:69:6f:65:9f:b9:ff:ab:c5:bc:e2:b8:e2:d8:
8e:2a:fc:37:c3:90:73:23:8d:70:86:c2:3b:bb:f0:
4f:16:ac:d7:61:f0:50:a1:8d:c8:90:43:c1:3b:b8:
7b:cd:af:9f:4d:37:ea:c2:4c:48:0d:90:51:c8:40:
fc:5f:49:76:57:00:4a:2e:a2:c1:90:35:31:31:b9:
8b:0c:c2:75:ef:5d:a0:a3:77:9e:23:51:23:1c:cb:
97:7c:0e:35:99:ae:0b:de:02:e7:9d:fa:8b:6d:c3:
b0:d2:fb:bf:25:72:3b:6e:ea:d3:23:4b:e3:aa:0a:
73:f4:70:21:7a:d9:3a:4a:14:22:17:4b:da:01:a8:
d0:f2:9f:57:0e:73:8e:2e:e0:f8:0c:60:c8:7e:46:
b5:b6:e8:89:2c:03:93:55:00:ca:b6:79:34:aa:54:
e4:a6:05:54:bb:94:3f:66:eb:8d:7f:dd:b2:c3:ca:
2e:0a:09:96:49:51:c0:50:27:a2:1a:aa:53:21:69:
65:68:89:51:ba:1f:0d:32:45:ad:04:88:83:c8:c9:
59:9b:c5:54:fd:3e:76:48:47:66:45:e8:5c:c7:90:
7d:0c:30:d3:2b:d4:fa:a3:7c:d8:8c:65:99:52:10:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:85:82:92:F0:7C:81:55:84:2E:A0:FD:97:69:FA:04:31:90:56
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:03:84:8a:b1:0d:36:24:60:59:b8:99:8b:d1:a0:7c:79:40:
c6:99:d0:03:60:8a:18:91:33:de:40:e7:18:14:38:25:4a:07:
12:2d:d0:22:ab:c1:aa:f5:6a:c6:9a:51:8d:b4:6c:47:00:6b:
9b:cc:86:83:b7:26:2a:6d:dc:21:da:a2:f4:1d:d6:28:89:12:
17:ac:a1:95:7f:2a:28:44:cd:d6:98:53:d0:78:36:5d:28:43:
81:ad:45:26:fb:e2:59:ab:32:e9:1b:d3:ae:bb:f9:b5:2a:d6:
45:79:0a:f5:6a:cf:00:c5:b7:be:ce:12:22:80:d6:ef:61:b8:
65:eb:50:61:4d:9c:99:6f:fa:64:c2:b7:60:9a:a8:d5:7c:71:
0b:c5:4d:b7:cb:b1:aa:d1:1a:f2:7d:2a:3b:1f:17:52:6c:78:
7c:04:58:11:a0:75:b6:9a:76:6b:d6:fc:e1:8d:ec:09:b7:8b:
8b:ff:68:e1:2f:1d:5b:ff:50:a1:05:c7:ac:0e:d2:5a:3f:0d:
d0:83:d0:f7:6d:e3:d7:c5:20:a5:ee:c5:3d:89:46:ce:6d:a6:
05:ea:93:ca:bf:39:d3:b2:26:23:ba:e8:b9:aa:64:ae:db:d1:
2d:d5:51:8b:87:ef:65:bf:1a:8f:1b:df:a6:5f:00:22:f5:a5:
b5:b8:01:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaKKXSHYwwEWuDA1ZlM60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjYwOTEwMTMwMTI1WhcNMjYwOTExMTMwMTI1WjAzMTEwLwYDVQQD
Eyg5OTM3ODU4MjkyZjA3YzgxNTU4NDJlYTBmZDk3NjlmYTA0MzE5MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXtQAZrwSMoczbjOOqhJhmlvZZ+5
/6vFvOK44tiOKvw3w5BzI41whsI7u/BPFqzXYfBQoY3IkEPBO7h7za+fTTfqwkxI
DZBRyED8X0l2VwBKLqLBkDUxMbmLDMJ1712go3eeI1EjHMuXfA41ma4L3gLnnfqL
bcOw0vu/JXI7burTI0vjqgpz9HAhetk6ShQiF0vaAajQ8p9XDnOOLuD4DGDIfka1
tuiJLAOTVQDKtnk0qlTkpgVUu5Q/ZuuNf92yw8ouCgmWSVHAUCeiGqpTIWllaIlR
uh8NMkWtBIiDyMlZm8VU/T52SEdmRehcx5B9DDDTK9T6o3zYjGWZUhCLiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk3hYKS8HyBVYQuoP2XafoEMZBWMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwOEirEN
NiRgWbiZi9GgfHlAxpnQA2CKGJEz3kDnGBQ4JUoHEi3QIqvBqvVqxppRjbRsRwBr
m8yGg7cmKm3cIdqi9B3WKIkSF6yhlX8qKETN1phT0Hg2XShDga1FJvviWasy6RvT
rrv5tSrWRXkK9WrPAMW3vs4SIoDW72G4ZetQYU2cmW/6ZMK3YJqo1XxxC8VNt8ux
qtEa8n0qOx8XUmx4fARYEaB1tpp2a9b84Y3sCbeLi/9o4S8dW/9QoQXHrA7SWj8N
0IPQ923j18Ugpe7FPYlGzm2mBeqTyr8507ImI7rouapkrtvRLdVRi4fvZb8ajxvf
pl8AIvWltbgBcQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:36:27 2026 by rpki-client