Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: VXxjGfeK9ntdPEqkoJBlcnQMg0lMuhnpwudOyLuuiL0=
Subject key identifier: 49:CA:49:E6:9F:7A:48:B2:4B:A0:80:EC:72:79:97:A7:BE:C2:FE:6A
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A15440D7177DB83C1ED6DF124DD0B7BEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0D8F
Signing time: Mon 19 Oct 2026 13:01:37 +0000
Manifest this update: Mon 19 Oct 2026 13:01:37 +0000
Manifest next update: Tue 20 Oct 2026 13:01:37 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: dpEc3xqYJBTfnLDq7cH+mgkth9Y+5wt8AHsZr9Hmcb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:d7:17:7d:b8:3c:1e:d6:df:12:4d:d0:b7:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Oct 19 13:01:37 2026 GMT
Not After : Oct 20 13:01:37 2026 GMT
Subject: CN=49ca49e69f7a48b24ba080ec727997a7bec2fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:e3:69:3f:84:7a:8a:5c:06:61:f2:bd:5b:
98:9e:13:01:1d:1f:24:cb:be:96:69:0e:64:74:e1:
ee:83:9e:ab:31:bb:92:02:6c:66:8a:b8:45:d8:13:
48:7c:4d:86:13:b9:b4:b2:f1:86:e1:25:3c:ba:6d:
89:e1:d1:b1:67:07:c9:a0:36:72:42:9e:0f:eb:fe:
aa:75:8d:df:1d:3b:0b:90:70:d9:3d:be:a3:25:bc:
59:f3:02:c3:5d:28:6b:43:73:fe:a1:0e:5a:61:6f:
fd:4c:77:ad:93:bd:5c:23:ff:ea:31:27:a1:16:e1:
c2:0c:dd:08:b9:08:f9:f2:99:21:aa:b8:d9:79:ef:
53:09:22:11:46:36:23:e7:d5:2a:b5:d0:90:3e:81:
5b:e1:18:c6:06:d5:31:06:a5:03:2c:22:af:84:80:
f1:31:94:37:61:4c:c5:f4:8e:c2:a8:3c:78:d8:cf:
c7:13:88:2b:f6:ce:4b:05:20:8a:06:16:01:f3:58:
aa:ee:0a:a8:46:63:ba:34:43:08:eb:ae:e6:bc:d8:
85:8f:41:f7:af:23:7f:d3:0f:4a:f6:e5:5c:bc:73:
00:c2:fc:03:35:99:1a:9a:df:bf:72:50:9a:4a:6b:
f2:e2:85:29:06:9a:f7:46:1d:63:c7:c6:c5:7e:ee:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:49:E6:9F:7A:48:B2:4B:A0:80:EC:72:79:97:A7:BE:C2:FE:6A
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4b:7c:9a:41:ba:c5:2d:cb:24:88:45:89:2e:86:0d:48:c5:
ab:69:a4:a4:3f:5e:a5:3a:56:35:32:c9:3f:4a:bb:62:e8:88:
23:70:75:6e:c4:e5:e1:77:71:e9:ac:2a:b1:c4:97:be:6f:2e:
e5:14:f5:c2:03:dd:dc:a2:fa:0b:69:52:49:aa:24:00:92:13:
d6:c1:b0:ea:e8:a1:75:98:53:33:8b:a6:4a:9f:d1:28:41:04:
10:25:85:0f:d3:90:c7:c4:3e:05:88:9b:76:37:70:36:c4:21:
3e:c4:a3:a2:c0:68:ff:07:29:f2:4c:f6:5f:2c:5a:a6:66:06:
67:82:0a:fb:24:aa:21:9e:43:2b:6a:56:ca:25:3f:9f:f9:82:
63:b7:0c:82:bd:7e:88:f0:be:62:0a:c1:0c:35:d7:00:b5:e8:
9b:8c:f9:a2:cf:fb:6f:8f:1d:fa:8a:78:64:8f:41:aa:da:1f:
08:71:e3:ec:70:ce:dc:a2:51:e6:8e:d5:92:92:e1:80:96:2e:
8e:9b:77:8e:33:87:36:a3:5b:51:76:3f:7b:a4:dc:76:65:6b:
e6:fd:0d:f0:d9:9b:f5:f4:9f:05:24:43:20:38:0c:58:b8:0d:
62:54:88:41:8f:74:67:15:b0:1c:3a:3a:14:9d:9d:d3:8d:54:
70:b9:b0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQNcXfbg8HtbfEk3Qt77CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk
ZDNlNTcwHhcNMjYxMDE5MTMwMTM3WhcNMjYxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
Eyg0OWNhNDllNjlmN2E0OGIyNGJhMDgwZWM3Mjc5OTdhN2JlYzJmZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyrjaT+EeopcBmHyvVuYnhMBHR8k
y76WaQ5kdOHug56rMbuSAmxmirhF2BNIfE2GE7m0svGG4SU8um2J4dGxZwfJoDZy
Qp4P6/6qdY3fHTsLkHDZPb6jJbxZ8wLDXShrQ3P+oQ5aYW/9THetk71cI//qMSeh
FuHCDN0IuQj58pkhqrjZee9TCSIRRjYj59UqtdCQPoFb4RjGBtUxBqUDLCKvhIDx
MZQ3YUzF9I7CqDx42M/HE4gr9s5LBSCKBhYB81iq7gqoRmO6NEMI667mvNiFj0H3
ryN/0w9K9uVcvHMAwvwDNZkamt+/clCaSmvy4oUpBpr3Rh1jx8bFfu5PJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnKSeafekiyS6CA7HJ5l6e+wv5qMB8GA1UdIwQY
MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt
N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3
LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkt8mkG6
xS3LJIhFiS6GDUjFq2mkpD9epTpWNTLJP0q7YuiII3B1bsTl4Xdx6awqscSXvm8u
5RT1wgPd3KL6C2lSSaokAJIT1sGw6uihdZhTM4umSp/RKEEEECWFD9OQx8Q+BYib
djdwNsQhPsSjosBo/wcp8kz2XyxapmYGZ4IK+ySqIZ5DK2pWyiU/n/mCY7cMgr1+
iPC+YgrBDDXXALXom4z5os/7b48d+op4ZI9BqtofCHHj7HDO3KJR5o7VkpLhgJYu
jpt3jjOHNqNbUXY/e6TcdmVr5v0N8Nmb9fSfBSRDIDgMWLgNYlSIQY90ZxWwHDo6
FJ2d041UcLmwag==
-----END CERTIFICATE-----
Generated at Mon Oct 19 17:17:36 2026 by rpki-client