Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: ZSE/moruIm6Vs4fA05GSjTSA2mxoltJeKfCh+jjdi+8=
Subject key identifier: 5A:4C:C5:E1:12:0D:0E:BD:E2:EC:AD:00:88:34:47:6C:D3:06:40:A9
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01A00213E5D53F1852A3218698EC057328FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:00:53 +0000
Manifest this update: Fri 14 Aug 2026 21:00:53 +0000
Manifest next update: Sat 15 Aug 2026 21:00:53 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: +vPFnPMvI+O7daHqD8v5tuhnd8dxSMGYN7unSkiKDWw=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:e5:d5:3f:18:52:a3:21:86:98:ec:05:73:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Aug 14 21:00:53 2026 GMT
Not After : Aug 15 21:00:53 2026 GMT
Subject: CN=5a4cc5e1120d0ebde2ecad008834476cd30640a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:a6:b3:fe:ad:e9:92:c0:74:b2:bc:f7:bd:
28:ba:05:c6:01:39:69:d9:b4:3f:99:63:03:db:46:
d4:a1:20:c7:10:96:68:45:f2:ca:0f:9c:1f:e1:40:
dd:8a:e1:6a:04:89:d7:c9:ba:83:f4:4a:a0:e7:4b:
48:ed:8b:c5:10:2c:a0:a9:fd:29:92:28:e2:a6:ef:
65:24:bc:2d:7a:d0:87:5f:fa:cd:ef:2b:1f:44:bd:
01:e0:9d:72:10:b0:df:3d:9d:33:5e:d1:71:13:6f:
51:b2:ce:48:d1:a2:f7:c2:b9:55:c4:52:5a:b3:b9:
c9:96:8f:f2:59:3d:ef:86:a5:cf:1e:4c:b7:a6:7d:
6a:3c:9a:30:49:83:58:8d:1a:53:19:4c:4d:b6:f0:
47:e8:5e:eb:da:e3:17:2d:56:2e:53:76:94:be:c4:
b0:a4:5f:dc:4d:7f:ec:7c:26:ea:87:20:de:9c:c7:
57:7e:9f:81:9e:a4:33:fe:ad:d9:34:64:48:77:aa:
43:84:02:f0:15:b5:4d:51:45:a0:0e:e4:b2:53:c2:
f8:b9:ab:60:ca:cc:66:d2:16:b5:99:61:d0:c6:fb:
7c:ed:2a:e2:70:ed:e1:0e:d3:ef:5a:8a:fb:22:1b:
c1:a3:4f:3b:a4:58:ee:3f:56:e7:d2:22:7e:bd:b1:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:C5:E1:12:0D:0E:BD:E2:EC:AD:00:88:34:47:6C:D3:06:40:A9
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a2:cc:5f:8b:bb:36:e4:a8:db:5a:34:e4:d5:ba:07:6e:d4:
d9:e8:c8:64:79:cb:e6:a1:d8:1d:bf:f9:05:62:bf:b1:83:a3:
ac:8d:95:16:b7:8a:5b:cc:51:4f:06:cb:3b:cb:74:bd:57:90:
6b:b8:95:8c:61:b4:56:de:fd:69:30:7f:1c:6c:39:8f:26:16:
66:30:1f:e8:4a:c5:e5:e0:f4:80:0b:b6:c6:e1:15:8c:4e:4d:
65:ac:b9:ce:aa:26:38:b8:2a:c6:2c:4b:ef:65:bd:24:8c:bf:
7b:35:d7:fb:ce:33:7f:77:21:45:58:d3:ff:92:74:98:6d:2b:
5e:64:61:18:65:69:25:6f:40:e4:46:e6:9a:9c:5b:47:b5:18:
4a:a8:dc:5e:87:60:3d:ef:81:35:7d:fa:80:9e:ba:29:72:7e:
5d:8a:b4:a5:00:ab:09:c1:40:62:23:dd:3f:76:3a:7b:65:15:
8b:b0:74:82:56:bf:28:a1:09:9d:dc:b9:f3:8e:61:1b:90:8b:
10:e0:ef:c1:68:27:86:1b:08:3e:e4:b2:ce:bf:07:46:9e:85:
91:f2:0a:f5:5a:11:8d:67:e0:6a:21:aa:3a:87:83:dc:8a:4e:
78:e0:ad:61:a5:80:fa:b5:24:46:43:04:6a:66:08:94:68:da:
3e:b8:bf:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+XVPxhSoyGGmOwFcyj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz
ZTA1Y2EwHhcNMjYwODE0MjEwMDUzWhcNMjYwODE1MjEwMDUzWjAzMTEwLwYDVQQD
Eyg1YTRjYzVlMTEyMGQwZWJkZTJlY2FkMDA4ODM0NDc2Y2QzMDY0MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa6ms/6t6ZLAdLK8970ougXGATlp
2bQ/mWMD20bUoSDHEJZoRfLKD5wf4UDdiuFqBInXybqD9Eqg50tI7YvFECygqf0p
kijipu9lJLwtetCHX/rN7ysfRL0B4J1yELDfPZ0zXtFxE29Rss5I0aL3wrlVxFJa
s7nJlo/yWT3vhqXPHky3pn1qPJowSYNYjRpTGUxNtvBH6F7r2uMXLVYuU3aUvsSw
pF/cTX/sfCbqhyDenMdXfp+BnqQz/q3ZNGRId6pDhALwFbVNUUWgDuSyU8L4uatg
ysxm0ha1mWHQxvt87SricO3hDtPvWor7IhvBo087pFjuP1bn0iJ+vbFyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpMxeESDQ694uytAIg0R2zTBkCpMB8GA1UdIwQY
MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt
NTAyOTY3ZGZjYzQ4LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4
LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqLMX4u7
NuSo21o05NW6B27U2ejIZHnL5qHYHb/5BWK/sYOjrI2VFreKW8xRTwbLO8t0vVeQ
a7iVjGG0Vt79aTB/HGw5jyYWZjAf6ErF5eD0gAu2xuEVjE5NZay5zqomOLgqxixL
72W9JIy/ezXX+84zf3chRVjT/5J0mG0rXmRhGGVpJW9A5EbmmpxbR7UYSqjcXodg
Pe+BNX36gJ66KXJ+XYq0pQCrCcFAYiPdP3Y6e2UVi7B0gla/KKEJndy5845hG5CL
EODvwWgnhhsIPuSyzr8HRp6FkfIK9VoRjWfgaiGqOoeD3IpOeOCtYaWA+rUkRkME
amYIlGjaPri/AA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:59 2026 by rpki-client