Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: EnK8cfIgMKmmR+5yn3rTXl3A+3WHx7BafyHtwNvYU/E=
Subject key identifier: 3E:D6:16:BF:05:91:8E:15:D0:5E:08:83:0A:54:C8:94:0A:63:16:E0
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 01A17A3A9E02F5A5F390E95680E5145F8DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 027F
Signing time: Mon 26 Oct 2026 22:00:24 +0000
Manifest this update: Mon 26 Oct 2026 22:00:24 +0000
Manifest next update: Tue 27 Oct 2026 22:00:24 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: HUz4kWcxx5ONv0mfBKeowNUIzai9plVHbvIIKrPqvt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:9e:02:f5:a5:f3:90:e9:56:80:e5:14:5f:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Oct 26 22:00:24 2026 GMT
Not After : Oct 27 22:00:24 2026 GMT
Subject: CN=3ed616bf05918e15d05e08830a54c8940a6316e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:7e:5f:96:9d:cd:17:e4:b5:b9:95:8a:7c:
02:fd:0c:cd:5c:ad:aa:e9:6e:0e:50:a0:05:33:ee:
cb:33:ea:11:8c:28:b0:68:30:aa:5d:30:5c:eb:f4:
43:70:a8:58:9e:2c:ea:71:2b:96:43:47:14:d8:1d:
4b:a1:7b:ec:f7:e7:ac:3c:01:49:8c:a3:fd:95:bf:
ad:56:4b:28:19:8f:d4:a1:52:c5:01:23:c7:e8:b7:
b9:17:67:32:f8:28:ee:2e:c1:c2:db:e4:21:57:a7:
af:8e:05:9b:e0:41:76:26:63:32:b1:53:49:ba:f3:
7c:5a:84:6e:08:a8:a9:cd:c9:03:da:bb:8a:0a:cb:
1b:3c:d4:bd:2c:5a:2d:2a:72:20:95:90:70:2d:52:
b2:89:65:41:92:50:92:e7:4a:e7:25:2d:4c:59:55:
ca:ed:ff:34:bd:f7:5d:62:5f:3c:ba:4d:be:39:d7:
eb:e9:f5:02:84:28:7a:75:2c:a6:88:41:d1:62:df:
21:ec:e9:da:a0:8d:21:15:79:c9:35:7b:23:3c:10:
47:2e:19:86:23:71:d6:6d:3f:d0:68:dd:73:eb:ab:
80:9c:67:3f:d2:c9:bd:3d:56:de:3d:0e:71:91:65:
f9:9c:5b:13:f6:39:5d:11:e1:71:ed:f7:a3:2b:fe:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:16:BF:05:91:8E:15:D0:5E:08:83:0A:54:C8:94:0A:63:16:E0
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:11:c8:d0:84:f3:76:f5:66:74:b0:8f:a6:07:7c:b2:df:
f0:93:56:81:1a:56:77:0b:6e:f2:69:19:c6:48:93:da:76:5f:
c6:e4:70:2e:52:76:b2:ab:f0:78:8a:76:30:19:72:41:3c:46:
d9:49:60:f3:35:a3:08:a6:23:19:80:f5:1d:74:99:05:d2:d4:
18:66:59:20:d1:20:80:ba:eb:b4:2c:f6:05:c3:e3:63:f2:2e:
fb:0b:8f:78:a0:8f:ea:07:b1:ca:77:60:65:fb:a7:f0:6e:27:
43:e4:d4:6c:4d:a9:80:33:e0:5f:02:11:02:18:54:8e:79:fc:
c6:5b:ce:0a:65:10:17:7c:6d:ea:e1:8f:9e:51:ab:aa:b3:76:
7e:38:6d:e1:52:db:0f:46:2f:7d:64:22:26:9f:fb:ac:45:8b:
8e:aa:0b:62:1e:0d:89:ba:15:9a:c5:65:35:22:15:1b:94:43:
24:62:c4:68:5c:1c:aa:fe:5a:64:61:b8:25:19:6b:70:fe:ca:
96:d4:e2:00:2a:24:fd:83:5f:8d:22:62:16:5d:91:c6:f2:e0:
9c:9c:bb:3f:d9:9e:cb:c2:f3:e0:b4:85:29:82:39:5b:d9:5c:
40:c7:c4:6b:0b:7a:8d:68:3f:5e:85:e3:e9:d4:92:f1:83:ed:
20:80:f1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6Op4C9aXzkOlWgOUUX43BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmUxNjcyNDYzYjdmMTVmMTJiMjJmOGI5NjcwNGIwNGE1
ZGJlOTUwHhcNMjYxMDI2MjIwMDI0WhcNMjYxMDI3MjIwMDI0WjAzMTEwLwYDVQQD
EygzZWQ2MTZiZjA1OTE4ZTE1ZDA1ZTA4ODMwYTU0Yzg5NDBhNjMxNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ol+X5adzRfktbmVinwC/QzNXK2q
6W4OUKAFM+7LM+oRjCiwaDCqXTBc6/RDcKhYnizqcSuWQ0cU2B1LoXvs9+esPAFJ
jKP9lb+tVksoGY/UoVLFASPH6Le5F2cy+CjuLsHC2+QhV6evjgWb4EF2JmMysVNJ
uvN8WoRuCKipzckD2ruKCssbPNS9LFotKnIglZBwLVKyiWVBklCS50rnJS1MWVXK
7f80vfddYl88uk2+Odfr6fUChCh6dSymiEHRYt8h7OnaoI0hFXnJNXsjPBBHLhmG
I3HWbT/QaN1z66uAnGc/0sm9PVbePQ5xkWX5nFsT9jldEeFx7fejK/4W0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7WFr8FkY4V0F4IgwpUyJQKYxbgMB8GA1UdIwQY
MBaAFP8uFnJGO38V8Ssi+LlnBLBKXb6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYt
ZTQ0NTZmNTdkNDgyLzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYtZTQ0NTZmNTdkNDgy
LzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ4RyNCE
83b1ZnSwj6YHfLLf8JNWgRpWdwtu8mkZxkiT2nZfxuRwLlJ2sqvweIp2MBlyQTxG
2Ulg8zWjCKYjGYD1HXSZBdLUGGZZINEggLrrtCz2BcPjY/Iu+wuPeKCP6gexyndg
Zfun8G4nQ+TUbE2pgDPgXwIRAhhUjnn8xlvOCmUQF3xt6uGPnlGrqrN2fjht4VLb
D0YvfWQiJp/7rEWLjqoLYh4NiboVmsVlNSIVG5RDJGLEaFwcqv5aZGG4JRlrcP7K
ltTiACok/YNfjSJiFl2RxvLgnJy7P9mey8Lz4LSFKYI5W9lcQMfEawt6jWg/XoXj
6dSS8YPtIIDx5g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:29 2026 by rpki-client