Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: MmqcqLXtDwysOk6nLFNGDLOcvtGyXyPN1fCKVdruk+Q=
Subject key identifier: 58:A0:EC:39:C8:84:07:36:D7:50:8E:23:61:F9:00:D9:0D:44:18:63
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01A177A792E7A086ADE522F5691F5C23B3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 150A
Signing time: Mon 26 Oct 2026 10:00:33 +0000
Manifest this update: Mon 26 Oct 2026 10:00:33 +0000
Manifest next update: Tue 27 Oct 2026 10:00:33 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: w9QV16I6GpRhYGwcxwPjKGssnJnLKEDap7r4jI+TUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:92:e7:a0:86:ad:e5:22:f5:69:1f:5c:23:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Oct 26 10:00:33 2026 GMT
Not After : Oct 27 10:00:33 2026 GMT
Subject: CN=58a0ec39c8840736d7508e2361f900d90d441863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:cb:3d:d3:36:56:03:58:fe:2d:c8:44:71:
f9:b1:9c:89:cc:57:43:00:25:62:5b:3e:f4:4e:42:
be:91:03:01:bf:f7:ad:73:55:24:69:a6:a2:f5:9f:
55:2d:fa:5d:d2:f1:9d:5c:ca:1d:89:56:6b:3a:60:
86:02:d8:c5:ae:0e:bf:3f:86:17:ca:ff:f3:45:4f:
8a:a1:a0:12:e2:63:d5:79:6b:9d:18:56:5c:d0:01:
81:80:2f:98:9d:d1:b5:ea:ba:8d:44:b0:44:2c:95:
79:88:bb:d8:36:8f:af:33:35:0c:89:0c:c0:55:fb:
7f:9f:c0:e5:b9:ad:15:48:5f:d6:85:bc:de:9a:8e:
2e:00:c3:8c:1a:55:04:40:4c:1b:02:e2:54:86:d8:
be:fd:74:90:1c:ff:79:7c:4c:97:b0:a9:22:d5:6d:
88:c7:95:7e:d0:de:16:f7:86:fd:8c:86:53:14:08:
e2:87:c1:e9:cf:91:ed:de:45:66:de:4b:0e:7f:ae:
29:45:76:9e:94:0e:21:e9:35:67:cc:43:ff:bf:29:
96:b7:94:a5:29:c7:53:aa:40:68:e6:2b:36:ed:48:
a1:cb:10:53:ba:aa:00:4d:a8:5b:ea:79:de:9b:16:
ba:9a:f5:80:11:d7:91:59:31:17:4c:c5:4b:9f:7a:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:EC:39:C8:84:07:36:D7:50:8E:23:61:F9:00:D9:0D:44:18:63
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f4:3d:f9:2b:59:17:c2:86:df:cc:2d:32:fe:96:bf:15:08:
06:5b:5a:e6:b8:ec:72:f8:8d:7a:10:69:b4:1b:64:02:94:1a:
7c:21:a5:09:9c:38:f8:47:14:9c:8d:2e:9a:39:c1:22:a4:be:
3d:3e:79:b9:91:5c:c4:e7:55:ee:4e:7d:88:07:ad:a8:52:a6:
77:d8:76:e0:25:60:f5:27:80:08:74:4b:a9:6b:ac:27:6f:e9:
6c:a9:08:b1:b1:41:61:fb:44:29:10:05:cf:54:2d:01:5d:86:
dd:5a:61:34:e3:58:1b:a8:86:83:97:60:3a:70:bb:58:48:c5:
9b:fb:0f:7f:48:15:ea:d9:31:04:66:53:19:fb:61:3e:58:7c:
84:c3:11:53:cb:38:03:e1:81:02:5c:8c:70:96:2d:c1:a0:c4:
44:18:f6:b2:cc:40:9c:92:37:1f:4e:4f:31:da:27:ff:9c:f3:
71:8b:5f:1a:e9:32:74:a3:ce:a6:73:4a:01:d5:dd:ec:3f:86:
37:85:b3:58:83:c4:57:78:8b:25:79:93:af:5a:79:af:0c:64:
60:c2:ac:8c:a1:a9:06:ee:b5:19:fb:2e:c2:17:f5:f6:3c:e7:
5d:27:4b:c0:6a:cd:b4:90:19:bf:d9:68:88:eb:d7:36:e1:85:
e7:ff:b4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3p5LnoIat5SL1aR9cI7O/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi
NGZiMDIwHhcNMjYxMDI2MTAwMDMzWhcNMjYxMDI3MTAwMDMzWjAzMTEwLwYDVQQD
Eyg1OGEwZWMzOWM4ODQwNzM2ZDc1MDhlMjM2MWY5MDBkOTBkNDQxODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGLLPdM2VgNY/i3IRHH5sZyJzFdD
ACViWz70TkK+kQMBv/etc1Ukaaai9Z9VLfpd0vGdXModiVZrOmCGAtjFrg6/P4YX
yv/zRU+KoaAS4mPVeWudGFZc0AGBgC+YndG16rqNRLBELJV5iLvYNo+vMzUMiQzA
Vft/n8Dlua0VSF/Whbzemo4uAMOMGlUEQEwbAuJUhti+/XSQHP95fEyXsKki1W2I
x5V+0N4W94b9jIZTFAjih8Hpz5Ht3kVm3ksOf64pRXaelA4h6TVnzEP/vymWt5Sl
KcdTqkBo5is27UihyxBTuqoATahb6nnemxa6mvWAEdeRWTEXTMVLn3pk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFig7DnIhAc211COI2H5ANkNRBhjMB8GA1UdIwQY
MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt
OWRiYzM1NjcyMzI5LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5
LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPQ9+StZ
F8KG38wtMv6WvxUIBlta5rjscviNehBptBtkApQafCGlCZw4+EcUnI0umjnBIqS+
PT55uZFcxOdV7k59iAetqFKmd9h24CVg9SeACHRLqWusJ2/pbKkIsbFBYftEKRAF
z1QtAV2G3VphNONYG6iGg5dgOnC7WEjFm/sPf0gV6tkxBGZTGfthPlh8hMMRU8s4
A+GBAlyMcJYtwaDERBj2ssxAnJI3H05PMdon/5zzcYtfGukydKPOpnNKAdXd7D+G
N4WzWIPEV3iLJXmTr1p5rwxkYMKsjKGpBu61Gfsuwhf19jznXSdLwGrNtJAZv9lo
iOvXNuGF5/+0zQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:09:40 2026 by rpki-client