Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: mZkZawe2Z/mP8YUpbGC5hNIVP8v8IG5gvQsd5AGpS1w=
Subject key identifier: 51:B0:47:34:A2:A0:9E:F6:30:CC:AA:3D:39:D1:BA:E5:CA:AD:07:CE
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01A11A192AD3D0EDD05B7ED9B3555C708335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 04C1
Signing time: Thu 08 Oct 2026 06:00:19 +0000
Manifest this update: Thu 08 Oct 2026 06:00:19 +0000
Manifest next update: Fri 09 Oct 2026 06:00:19 +0000
Files and hashes: 1: _MwSvZpK_sGtiYLx6EKzmSrljis.roa (hash: dS+nDUo51n3VpHHiTVTBJXrfS+Wyxklsi3bHmd6A/ks=)
2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: +cqYIpLOD4dgBX0INteFVR5iLBdfLU/7s7CkJuzA1H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:2a:d3:d0:ed:d0:5b:7e:d9:b3:55:5c:70:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Oct 8 06:00:19 2026 GMT
Not After : Oct 9 06:00:19 2026 GMT
Subject: CN=51b04734a2a09ef630ccaa3d39d1bae5caad07ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:c0:67:4a:12:84:da:e8:f1:19:1e:02:4b:
a7:fb:a1:d6:ed:8a:8e:6a:8d:fd:db:c1:37:93:2c:
b5:d7:18:6a:85:8a:1b:72:34:c7:2b:0d:ab:89:98:
5b:d6:ed:4a:0b:9c:81:43:df:b8:47:7c:61:c4:73:
4a:43:b6:a9:66:f5:5d:fb:57:c5:7c:69:c9:0f:9f:
3e:41:63:2c:c5:65:e8:4d:f9:b3:0d:00:0a:c5:31:
b3:65:29:02:fb:cc:a4:10:47:f9:2c:34:d1:7f:a6:
9b:cf:b7:f0:30:fc:3f:5b:29:d3:47:17:ee:f8:18:
51:74:f0:f2:1e:4f:85:6f:ac:2f:1c:e3:50:67:86:
05:72:8b:83:6d:de:f6:9a:40:08:aa:02:7b:3f:ed:
a4:e1:80:6a:90:53:b8:30:eb:1f:18:6c:81:85:7a:
a9:77:80:50:5e:fb:c0:71:bd:d9:2c:c3:dd:0c:2b:
6f:69:47:e7:19:b8:e3:6a:56:93:a9:5a:92:75:03:
fa:66:42:d0:88:2f:86:a2:fe:be:27:75:ed:3f:b4:
90:a0:78:ac:65:17:21:ab:6d:c6:f3:ae:7b:73:a1:
8b:ec:0e:47:c2:0f:22:12:1f:74:ec:26:7b:0d:65:
3c:df:a3:2e:74:63:fa:1d:aa:a4:56:eb:ae:6a:e2:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:47:34:A2:A0:9E:F6:30:CC:AA:3D:39:D1:BA:E5:CA:AD:07:CE
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:99:d2:f3:72:01:94:3f:f7:2e:1a:36:b8:f6:97:3a:f6:85:
25:b1:15:c7:ec:79:1e:b3:ca:58:b6:cb:5a:8f:14:30:6e:ef:
f6:11:06:56:cf:95:bc:a2:34:21:21:71:cc:98:6b:32:65:ec:
65:87:46:76:16:1f:93:41:1e:ff:5a:fa:83:03:54:41:74:bf:
3a:80:41:fe:74:c3:30:c3:9a:5d:b6:6d:cd:d4:59:a6:ca:2c:
de:1a:ab:6c:55:f3:fa:fe:40:bc:29:ec:3c:43:b9:e4:1a:10:
38:19:62:d3:05:7f:78:71:d7:dd:00:58:8a:90:b8:ec:d3:e2:
6e:e1:4e:52:82:db:93:c2:d7:09:48:54:e3:78:b0:60:ea:98:
42:70:20:6f:c9:68:85:7a:96:9c:81:a2:cc:aa:1a:32:4d:4b:
c8:be:07:39:c0:7e:df:ec:5a:a2:ce:29:c1:9e:56:47:36:5f:
7c:7f:5d:2b:03:ae:f1:f3:18:53:72:7d:11:96:93:55:57:79:
44:d8:d0:6b:8b:f9:09:a7:a4:76:e1:a5:a9:92:11:24:da:d2:
28:68:e6:41:5e:c7:93:d7:b2:89:91:9e:f5:00:53:bd:4c:51:
b2:09:49:ce:8e:2f:72:22:c5:63:c4:01:69:f3:b8:02:8f:9f:
d3:9d:53:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaGSrT0O3QW37Zs1VccIM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYxMDA4MDYwMDE5WhcNMjYxMDA5MDYwMDE5WjAzMTEwLwYDVQQD
Eyg1MWIwNDczNGEyYTA5ZWY2MzBjY2FhM2QzOWQxYmFlNWNhYWQwN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzazAZ0oShNro8RkeAkun+6HW7YqO
ao3928E3kyy11xhqhYobcjTHKw2riZhb1u1KC5yBQ9+4R3xhxHNKQ7apZvVd+1fF
fGnJD58+QWMsxWXoTfmzDQAKxTGzZSkC+8ykEEf5LDTRf6abz7fwMPw/WynTRxfu
+BhRdPDyHk+Fb6wvHONQZ4YFcouDbd72mkAIqgJ7P+2k4YBqkFO4MOsfGGyBhXqp
d4BQXvvAcb3ZLMPdDCtvaUfnGbjjalaTqVqSdQP6ZkLQiC+Gov6+J3XtP7SQoHis
ZRchq23G8657c6GL7A5Hwg8iEh907CZ7DWU836MudGP6HaqkVuuuauKFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGwRzSioJ72MMyqPTnRuuXKrQfOMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJnS83IB
lD/3Lho2uPaXOvaFJbEVx+x5HrPKWLbLWo8UMG7v9hEGVs+VvKI0ISFxzJhrMmXs
ZYdGdhYfk0Ee/1r6gwNUQXS/OoBB/nTDMMOaXbZtzdRZpsos3hqrbFXz+v5AvCns
PEO55BoQOBli0wV/eHHX3QBYipC47NPibuFOUoLbk8LXCUhU43iwYOqYQnAgb8lo
hXqWnIGizKoaMk1LyL4HOcB+3+xaos4pwZ5WRzZffH9dKwOu8fMYU3J9EZaTVVd5
RNjQa4v5CaekduGlqZIRJNrSKGjmQV7Hk9eyiZGe9QBTvUxRsglJzo4vciLFY8QB
afO4Ao+f051ToA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:26 2026 by rpki-client