Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: RU9OoDF9SZ8pjtfidjz9sPRGtaK1TXsNGnNxEIvT7fg=
Subject key identifier: 97:CF:0D:DC:67:2A:56:98:32:58:42:79:09:89:45:38:A9:2D:65:C5
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 01A08CE912A9218BACD13492BB0545CF7A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 1042
Signing time: Thu 10 Sep 2026 20:01:19 +0000
Manifest this update: Thu 10 Sep 2026 20:01:19 +0000
Manifest next update: Fri 11 Sep 2026 20:01:19 +0000
Files and hashes: 1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: H0FwUsoAREEDaBN8jnYR61bC0SvSoEzNp3J7MlaEcfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:12:a9:21:8b:ac:d1:34:92:bb:05:45:cf:7a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Sep 10 20:01:19 2026 GMT
Not After : Sep 11 20:01:19 2026 GMT
Subject: CN=97cf0ddc672a56983258427909894538a92d65c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:df:f0:cc:34:45:1b:18:a6:78:9f:fe:6b:
44:d0:4e:66:c9:9e:4b:25:ac:a4:49:10:e7:1c:2d:
26:c3:aa:2d:ef:ad:b9:61:e2:34:5c:77:2e:4a:1c:
45:11:ce:8d:a9:a4:da:7f:39:b9:7a:23:e6:79:5b:
7f:a6:58:40:de:5a:85:fa:a8:b2:88:31:db:86:db:
a4:eb:8c:ce:21:bc:39:3c:50:54:17:2d:51:c2:be:
93:5f:a8:d4:5c:43:85:69:52:7a:a9:9b:de:06:a7:
05:35:24:d5:72:9c:70:cd:d4:39:22:af:4f:f6:7b:
d0:87:d3:03:b4:0d:d8:2f:46:03:4f:5d:36:a5:e9:
12:49:dc:90:8a:d7:5d:60:8f:a3:86:94:b2:e9:0e:
b5:f6:f0:8f:c1:4e:32:7c:62:7a:8f:1e:6c:0a:1f:
fc:2d:9b:64:3f:08:08:57:af:8b:fd:79:ab:dc:0e:
d9:a3:25:41:4d:e0:7f:38:d7:ea:b2:c5:ba:2e:64:
1e:0f:ca:2e:ab:71:e3:f0:96:94:9a:72:cf:31:e0:
fc:c0:30:b9:de:4a:dc:5d:f5:08:cc:03:1e:9c:85:
34:09:a6:cd:4c:4b:49:2d:cc:2b:8a:c6:b8:0d:c3:
63:6e:6a:21:f9:1d:20:e0:58:d1:77:1b:38:38:8c:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:0D:DC:67:2A:56:98:32:58:42:79:09:89:45:38:A9:2D:65:C5
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:a2:e1:6d:57:63:f6:9c:2a:29:dd:30:45:75:23:d4:f3:
1b:7c:cf:0b:45:cc:85:d4:12:de:cb:17:ab:99:3b:7c:3d:8b:
1c:83:3f:d5:ab:0a:91:b3:77:fd:54:f1:2d:72:02:a2:19:81:
c8:81:0f:78:81:3b:18:2a:89:5a:d0:59:ca:9b:84:7c:77:a0:
10:c4:65:24:66:3c:6c:62:74:91:9c:f0:fa:77:2b:6e:76:14:
e5:36:2c:ac:02:a1:f1:cb:ca:32:e7:ae:d4:bf:73:3f:fb:3f:
88:43:2d:88:45:f1:b7:b2:28:49:18:81:37:b4:be:31:dc:da:
64:36:65:c9:40:7c:a7:af:5a:9a:cc:6a:3e:59:2a:fb:bd:5a:
a4:9c:39:11:59:e0:96:8d:e9:82:7c:31:ab:af:72:88:35:5a:
a7:43:1b:59:bb:12:9b:86:b6:f2:ac:e2:40:04:a1:96:32:15:
d7:89:ba:c3:83:b6:dc:a2:34:d3:d5:06:2a:a3:c5:be:ac:33:
bb:8a:c5:a9:51:31:1f:29:db:0c:83:c2:8d:b4:1a:cf:b9:9d:
a4:84:0f:1d:b4:ef:ce:0f:4d:71:ba:c3:70:28:37:f8:fd:f3:
e4:1a:82:48:88:40:5d:d0:2d:13:be:1b:04:c8:64:24:f9:92:
f8:cb:69:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6RKpIYus0TSSuwVFz3qfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli
ZTdhMjUwHhcNMjYwOTEwMjAwMTE5WhcNMjYwOTExMjAwMTE5WjAzMTEwLwYDVQQD
Eyg5N2NmMGRkYzY3MmE1Njk4MzI1ODQyNzkwOTg5NDUzOGE5MmQ2NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Tf8Mw0RRsYpnif/mtE0E5myZ5L
JaykSRDnHC0mw6ot7625YeI0XHcuShxFEc6NqaTafzm5eiPmeVt/plhA3lqF+qiy
iDHbhtuk64zOIbw5PFBUFy1Rwr6TX6jUXEOFaVJ6qZveBqcFNSTVcpxwzdQ5Iq9P
9nvQh9MDtA3YL0YDT102pekSSdyQitddYI+jhpSy6Q619vCPwU4yfGJ6jx5sCh/8
LZtkPwgIV6+L/Xmr3A7ZoyVBTeB/ONfqssW6LmQeD8ouq3Hj8JaUmnLPMeD8wDC5
3krcXfUIzAMenIU0CabNTEtJLcwrisa4DcNjbmoh+R0g4FjRdxs4OIxx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfPDdxnKlaYMlhCeQmJRTipLWXFMB8GA1UdIwQY
MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et
ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3
LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2Wi4W1X
Y/acKindMEV1I9TzG3zPC0XMhdQS3ssXq5k7fD2LHIM/1asKkbN3/VTxLXICohmB
yIEPeIE7GCqJWtBZypuEfHegEMRlJGY8bGJ0kZzw+ncrbnYU5TYsrAKh8cvKMueu
1L9zP/s/iEMtiEXxt7IoSRiBN7S+MdzaZDZlyUB8p69amsxqPlkq+71apJw5EVng
lo3pgnwxq69yiDVap0MbWbsSm4a28qziQAShljIV14m6w4O23KI009UGKqPFvqwz
u4rFqVExHynbDIPCjbQaz7mdpIQPHbTvzg9NcbrDcCg3+P3z5BqCSIhAXdAtE74b
BMhkJPmS+Mtp5w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:01 2026 by rpki-client