Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier: YFUvr/MDpQUokSCbK5H12JFa3sUj7Io2rPdDC63bly8=
Subject key identifier: ED:13:D6:02:E7:00:DA:25:AF:AF:A0:17:BD:0C:FE:B3:F2:93:B5:56
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 01A1A939AFA029CDA052D8C5B511DF446172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number: 0964
Signing time: Thu 05 Nov 2026 01:01:32 +0000
Manifest this update: Thu 05 Nov 2026 01:01:32 +0000
Manifest next update: Fri 06 Nov 2026 01:01:32 +0000
Files and hashes: 1: 9JYN1wYmxe_AVEYEb-tvNJt4wXs.roa (hash: RDG6KFAF2TBM/tVB3Upl2HxfF3n9lpu5tr8kAIb8xhc=)
2: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=)
3: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: kYJ3o7D1tEm8SpCvNwXX9kp3HZPBvXr0qVFXP43m7Ow=)
4: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=)
5: avi7DMJKeOctm2dYd02bLrCit3I.roa (hash: nFZFKEEyrubZa1X0U5AMhYHfVMMCE2ecKi32d2MPqUU=)
6: g3Jt-M-LFCi6oADeqbYV8DqGqrE.roa (hash: ybEc7v/E67X9cLp6C4/oEdNWUvUdA62rKdiHaLldR5I=)
7: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (hash: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=)
8: wSPNPlOzROPvobbc59n5gvSJl2A.roa (hash: FmUU+LVsKXzl10dMZnHRPydiPVXhhfwVgPgjOD1f4+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:39:af:a0:29:cd:a0:52:d8:c5:b5:11:df:44:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Nov 5 01:01:32 2026 GMT
Not After : Nov 6 01:01:32 2026 GMT
Subject: CN=ed13d602e700da25afafa017bd0cfeb3f293b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:90:99:62:ab:c8:bc:9f:23:66:69:3d:ee:
74:d6:24:9f:57:16:74:78:6f:f8:7d:bd:51:3e:72:
9f:85:eb:4d:3e:da:ff:b3:53:e9:cc:a1:9e:2b:57:
75:a5:bc:86:0e:67:5d:4b:d5:7d:40:39:cf:ed:4b:
03:44:69:eb:f5:11:d7:4e:c1:d5:35:e6:8f:38:64:
b5:90:51:81:bb:f0:31:f2:33:03:1e:50:bb:dc:d5:
05:3f:4c:63:4e:4e:50:13:81:01:af:cc:6e:f2:37:
fc:7e:8a:6f:79:a5:17:07:91:6b:57:e2:21:3f:9e:
6c:b6:13:e4:bd:8a:e7:04:d1:51:65:c2:2b:86:63:
2e:e5:81:fa:85:a7:e9:53:09:cb:fc:fb:90:a2:a6:
22:d5:1a:3c:60:d6:e7:6e:a5:48:21:7c:b1:48:ae:
d4:5c:7f:1b:5b:3c:eb:42:ba:3a:5c:73:d9:08:c6:
55:47:07:ec:37:02:f6:bb:b2:81:b0:c7:e9:64:ad:
02:41:df:3d:24:b6:16:3c:44:8e:39:91:59:5f:39:
39:89:90:4c:12:e1:aa:88:43:1d:6d:0f:a0:df:27:
3a:aa:5e:cb:72:f7:dd:2a:60:b0:f2:e4:60:04:33:
8f:15:3b:29:ad:54:02:ec:e9:b6:cd:1f:e3:a6:50:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:D6:02:E7:00:DA:25:AF:AF:A0:17:BD:0C:FE:B3:F2:93:B5:56
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:fd:4d:f0:50:f7:6a:43:d7:28:92:be:23:6a:cb:1a:0a:
c5:85:57:df:b6:2e:b4:ac:d7:b3:3e:34:a3:e3:a2:88:3a:00:
f1:19:73:15:86:f0:36:dd:7f:9f:1c:03:b2:75:c0:ce:63:e3:
3d:35:7b:16:59:25:27:f5:dc:2c:44:45:98:98:6d:d7:d8:d4:
c3:12:18:9c:3e:98:95:31:50:f9:bd:1e:2f:7f:fb:04:7b:f1:
0d:c5:ff:a1:5f:4f:a5:c0:6e:04:af:43:40:28:98:d0:ce:f5:
1a:9e:26:22:fb:20:09:c8:3e:23:db:e3:ef:34:40:f1:e7:a7:
b9:a4:cb:0a:3e:25:9b:b4:d6:36:2e:b9:de:d6:29:57:43:88:
4e:0c:ca:04:1d:98:ce:32:42:5f:9d:d6:6b:e1:83:3a:8b:02:
7c:7a:7d:ae:7f:e7:6f:8e:98:3a:58:16:0d:af:02:70:9c:8b:
0d:e0:9c:4e:6d:a6:06:7a:a2:c9:97:e4:16:39:de:52:5d:7e:
3a:92:17:49:af:d8:90:a6:7f:86:f6:41:05:e0:1f:6d:a3:9f:
b5:ab:71:2f:6d:ec:af:36:1f:90:a1:28:a7:f2:b0:a9:58:05:
19:54:1d:29:7f:25:51:34:8e:51:1c:70:33:9f:a9:a5:82:69:
c6:b9:8d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpOa+gKc2gUtjFtRHfRGFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjYxMTA1MDEwMTMyWhcNMjYxMTA2MDEwMTMyWjAzMTEwLwYDVQQD
EyhlZDEzZDYwMmU3MDBkYTI1YWZhZmEwMTdiZDBjZmViM2YyOTNiNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36qQmWKryLyfI2ZpPe501iSfVxZ0
eG/4fb1RPnKfhetNPtr/s1PpzKGeK1d1pbyGDmddS9V9QDnP7UsDRGnr9RHXTsHV
NeaPOGS1kFGBu/Ax8jMDHlC73NUFP0xjTk5QE4EBr8xu8jf8fopveaUXB5FrV+Ih
P55sthPkvYrnBNFRZcIrhmMu5YH6hafpUwnL/PuQoqYi1Ro8YNbnbqVIIXyxSK7U
XH8bWzzrQro6XHPZCMZVRwfsNwL2u7KBsMfpZK0CQd89JLYWPESOOZFZXzk5iZBM
EuGqiEMdbQ+g3yc6ql7LcvfdKmCw8uRgBDOPFTsprVQC7Om2zR/jplDZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0T1gLnANolr6+gF70M/rPyk7VWMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD39TfBQ
92pD1yiSviNqyxoKxYVX37YutKzXsz40o+OiiDoA8RlzFYbwNt1/nxwDsnXAzmPj
PTV7FlklJ/XcLERFmJht19jUwxIYnD6YlTFQ+b0eL3/7BHvxDcX/oV9PpcBuBK9D
QCiY0M71Gp4mIvsgCcg+I9vj7zRA8eenuaTLCj4lm7TWNi653tYpV0OITgzKBB2Y
zjJCX53Wa+GDOosCfHp9rn/nb46YOlgWDa8CcJyLDeCcTm2mBnqiyZfkFjneUl1+
OpIXSa/YkKZ/hvZBBeAfbaOftatxL23srzYfkKEop/KwqVgFGVQdKX8lUTSOURxw
M5+ppYJpxrmNcg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:01:31 2026 by rpki-client