Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: 4r09s1JLpd2+3K9/h28rnjocvYNJ27ruL6P54PGG3/0=
Subject key identifier: 15:69:81:84:A7:83:BF:00:CC:2C:2A:22:9A:32:C9:C0:CE:13:00:7E
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 01A06E70750CBD800C8772241FEF0FCBF748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 22:00:58 +0000
Manifest this update: Fri 04 Sep 2026 22:00:58 +0000
Manifest next update: Sat 05 Sep 2026 22:00:58 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: aVgo6oUJ44oifpzJIXy+EL//MI3aTbVbmuPlw5S+jx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:75:0c:bd:80:0c:87:72:24:1f:ef:0f:cb:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Sep 4 22:00:58 2026 GMT
Not After : Sep 5 22:00:58 2026 GMT
Subject: CN=15698184a783bf00cc2c2a229a32c9c0ce13007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:5b:12:78:4f:66:22:66:89:4f:dd:cf:b9:
77:85:9a:3a:b7:4f:c6:34:cc:4c:4c:f8:8c:66:46:
ad:e9:ca:61:a9:b5:04:08:cd:7e:5d:c5:65:f2:64:
34:d4:cf:fe:21:19:22:06:d0:e0:b7:27:a1:6d:c5:
64:94:94:ea:6d:2f:97:88:3b:4c:32:cb:ed:58:b0:
bb:81:29:87:73:1d:74:49:63:2f:34:f5:63:10:92:
7e:48:ba:c5:3e:32:1a:de:a8:52:d1:6f:d6:30:90:
e5:60:0a:fd:2d:f5:f1:c8:fb:3c:7e:ca:bc:b5:cc:
0f:db:07:30:ab:51:d0:a7:d5:21:b9:c5:6a:b3:c6:
69:81:5b:2f:aa:48:ff:92:94:7f:34:5e:a1:a6:e9:
b7:63:dd:8b:97:39:b8:8e:49:7a:6f:3b:d6:c4:c1:
98:ff:7d:18:5c:f8:75:a4:76:a0:09:86:84:7e:5f:
7c:dc:18:f8:68:fe:64:d2:d5:a5:88:90:d4:5e:ac:
62:96:1e:a7:37:6e:3c:af:41:d9:f2:4b:7c:db:e5:
31:f1:eb:bf:20:81:53:b6:20:1e:e7:1e:24:a3:cf:
39:8b:fc:7e:70:88:a1:e1:c2:c8:c6:86:b2:c9:df:
28:d6:20:e0:69:b9:f9:0b:05:db:1d:a6:7d:ce:4e:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:81:84:A7:83:BF:00:CC:2C:2A:22:9A:32:C9:C0:CE:13:00:7E
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:07:4e:bf:d0:4e:0c:d7:52:2b:32:0d:fa:ef:07:dc:ed:
4f:d5:e9:12:ca:73:17:f9:25:58:71:83:eb:fa:1f:bc:2e:1f:
34:d9:f6:82:5b:19:8b:71:61:35:a6:06:2c:07:aa:16:14:0f:
0e:e8:e7:98:3d:fd:d6:ca:f0:8c:27:0c:36:2c:5e:48:db:62:
4d:f6:e7:08:c5:80:64:21:db:b2:6f:04:2a:75:5a:46:39:79:
d4:88:b2:93:76:81:22:0f:2d:65:8c:a5:9c:33:ae:55:5d:79:
aa:7c:21:60:66:75:36:c2:b2:bc:6c:b5:0c:4d:de:74:34:6b:
c1:f6:dd:b3:ee:47:3e:52:cd:71:4a:60:4c:66:50:b4:0c:19:
cf:d4:b4:78:f5:13:5c:ef:13:1a:ae:40:bc:59:ce:8c:66:78:
16:b4:e6:32:5a:0b:f2:5f:c5:c8:e2:f2:d2:c9:c1:4a:b7:14:
49:76:fc:8a:64:b8:6e:b9:c6:12:29:2b:7a:21:0a:25:e8:4f:
a9:75:f8:fe:d8:74:9d:3b:0e:7a:06:b6:f9:53:af:f9:52:fa:
ba:4b:08:dc:b7:b6:98:53:4e:a5:4f:66:c9:5e:70:fd:d4:68:
d1:a0:f8:68:7f:b6:d2:f3:e4:ef:d4:ff:9f:cf:d7:ae:f6:89:
04:55:72:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucHUMvYAMh3IkH+8Py/dIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTk0ODRjYTcwOGFiNzcxZWIxZGI5MGJhZmM4YTExNGMy
YzNkNzkwHhcNMjYwOTA0MjIwMDU4WhcNMjYwOTA1MjIwMDU4WjAzMTEwLwYDVQQD
EygxNTY5ODE4NGE3ODNiZjAwY2MyYzJhMjI5YTMyYzljMGNlMTMwMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9bEnhPZiJmiU/dz7l3hZo6t0/G
NMxMTPiMZkat6cphqbUECM1+XcVl8mQ01M/+IRkiBtDgtyehbcVklJTqbS+XiDtM
MsvtWLC7gSmHcx10SWMvNPVjEJJ+SLrFPjIa3qhS0W/WMJDlYAr9LfXxyPs8fsq8
tcwP2wcwq1HQp9UhucVqs8ZpgVsvqkj/kpR/NF6hpum3Y92Llzm4jkl6bzvWxMGY
/30YXPh1pHagCYaEfl983Bj4aP5k0tWliJDUXqxilh6nN248r0HZ8kt82+Ux8eu/
IIFTtiAe5x4ko885i/x+cIih4cLIxoayyd8o1iDgabn5CwXbHaZ9zk4HqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVpgYSng78AzCwqIpoyycDOEwB+MB8GA1UdIwQY
MBaAFMmpSEynCKt3HrHbkLr8ihFMLD15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAt
ZDA1MTdkYjI2ZGFkLzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAtZDA1MTdkYjI2ZGFk
LzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRMHTr/Q
TgzXUisyDfrvB9ztT9XpEspzF/klWHGD6/ofvC4fNNn2glsZi3FhNaYGLAeqFhQP
DujnmD391srwjCcMNixeSNtiTfbnCMWAZCHbsm8EKnVaRjl51Iiyk3aBIg8tZYyl
nDOuVV15qnwhYGZ1NsKyvGy1DE3edDRrwfbds+5HPlLNcUpgTGZQtAwZz9S0ePUT
XO8TGq5AvFnOjGZ4FrTmMloL8l/FyOLy0snBSrcUSXb8imS4brnGEikreiEKJehP
qXX4/th0nTsOega2+VOv+VL6uksI3Le2mFNOpU9myV5w/dRo0aD4aH+20vPk79T/
n8/XrvaJBFVyWA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:00 2026 by rpki-client