Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: 3qaocvXAxrZpQYjzWEbJ3aR5k2e7hfuEA/fJkpsIc8E=
Subject key identifier: 34:25:6D:A0:A2:8C:4C:2A:5F:7F:53:0D:6A:6E:4A:16:1C:72:F5:33
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01A08CE8E1093AC5B0BF49CDC66CB9816B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1A69
Signing time: Thu 10 Sep 2026 20:01:07 +0000
Manifest this update: Thu 10 Sep 2026 20:01:07 +0000
Manifest next update: Fri 11 Sep 2026 20:01:07 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: xMsLhc6Ivw1dUO2K7Q4ZuLjazySOET34bAxk8Z2q58c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:e1:09:3a:c5:b0:bf:49:cd:c6:6c:b9:81:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Sep 10 20:01:07 2026 GMT
Not After : Sep 11 20:01:07 2026 GMT
Subject: CN=34256da0a28c4c2a5f7f530d6a6e4a161c72f533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:04:97:14:27:b3:ad:e7:1a:19:f7:5c:bc:
07:46:bb:28:ce:df:03:52:73:30:07:cd:72:0c:6b:
5d:ff:79:5e:6e:75:34:b3:12:01:4e:ca:23:8d:8d:
7e:7a:3f:02:4b:bf:68:8d:8a:24:3f:f9:eb:ff:6a:
8e:d3:ea:c1:fa:22:76:68:91:7e:a6:f9:e7:9e:87:
1f:b3:bc:70:a2:62:78:a0:41:0c:3d:03:05:52:a8:
cf:6f:e0:58:a4:0e:88:85:23:4b:58:9f:fb:01:ac:
29:9f:7e:d0:21:a3:fc:0c:96:d7:23:e6:d6:7a:01:
db:6a:19:31:c6:38:38:ac:bb:1f:2b:fd:0c:27:ea:
d2:e1:a2:d5:f7:82:c8:17:95:ca:60:e0:90:04:62:
b4:1d:af:e6:39:e0:65:3b:23:22:96:d3:d5:06:15:
e9:aa:97:b7:3d:a5:09:4d:32:e0:c1:33:f1:32:46:
11:40:e3:6f:c7:8a:19:62:16:d3:59:d9:69:3c:0b:
a9:8e:fc:10:95:2e:b6:62:e4:da:92:0b:69:54:77:
17:b4:12:61:cc:74:45:6e:4f:e6:72:d1:09:9b:6d:
1b:89:b7:0b:76:97:bd:95:9e:c0:39:1a:22:86:21:
33:5d:f3:5c:2c:4e:52:8e:a3:dc:8a:5e:80:84:d8:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:6D:A0:A2:8C:4C:2A:5F:7F:53:0D:6A:6E:4A:16:1C:72:F5:33
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:2e:0b:c1:f7:c9:cf:4e:0e:9f:ce:6d:1d:eb:4d:2b:42:
04:de:72:a3:64:49:58:9a:cc:45:7f:7f:3b:55:a4:22:ce:c5:
01:59:52:ac:a6:33:87:21:11:68:0d:24:00:2f:c4:e0:ff:6d:
30:2f:ec:3b:dc:be:7b:d9:ff:50:af:9b:b2:05:cb:fb:22:af:
a0:9e:8f:f6:40:17:9c:55:e7:b3:ec:f9:a8:db:82:24:c0:67:
6a:31:1c:4c:36:fd:e8:44:a0:30:4e:e5:46:9e:48:48:27:d3:
b8:96:ac:a4:04:ef:a1:79:09:eb:5d:bf:ad:d9:94:d2:c0:7e:
d2:7e:ee:95:6b:5c:77:20:a0:d4:4a:fe:be:01:22:92:94:25:
73:db:33:93:6e:37:3a:37:3b:51:e5:2e:31:2c:89:a9:fb:64:
1e:07:02:cd:e8:d6:ea:fd:47:cc:8d:1d:9e:5d:7d:b7:f3:c9:
6a:df:d7:02:3b:3b:6f:21:12:2d:11:9d:80:2b:36:08:6c:ce:
45:7d:de:37:e6:15:96:18:d8:9c:d8:3e:97:5f:3a:29:f9:42:
dd:fe:2e:84:3f:c8:3f:42:40:6f:11:bc:64:4c:bc:cc:9f:9e:
98:27:67:6c:41:7e:a4:82:b4:07:b4:25:a8:9d:ef:ed:00:66:
37:b4:79:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6OEJOsWwv0nNxmy5gWs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjYwOTEwMjAwMTA3WhcNMjYwOTExMjAwMTA3WjAzMTEwLwYDVQQD
EygzNDI1NmRhMGEyOGM0YzJhNWY3ZjUzMGQ2YTZlNGExNjFjNzJmNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlsElxQns63nGhn3XLwHRrsozt8D
UnMwB81yDGtd/3lebnU0sxIBTsojjY1+ej8CS79ojYokP/nr/2qO0+rB+iJ2aJF+
pvnnnocfs7xwomJ4oEEMPQMFUqjPb+BYpA6IhSNLWJ/7Aawpn37QIaP8DJbXI+bW
egHbahkxxjg4rLsfK/0MJ+rS4aLV94LIF5XKYOCQBGK0Ha/mOeBlOyMiltPVBhXp
qpe3PaUJTTLgwTPxMkYRQONvx4oZYhbTWdlpPAupjvwQlS62YuTakgtpVHcXtBJh
zHRFbk/mctEJm20bibcLdpe9lZ7AORoihiEzXfNcLE5SjqPcil6AhNhB8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQlbaCijEwqX39TDWpuShYccvUzMB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8IuC8H3
yc9ODp/ObR3rTStCBN5yo2RJWJrMRX9/O1WkIs7FAVlSrKYzhyERaA0kAC/E4P9t
MC/sO9y+e9n/UK+bsgXL+yKvoJ6P9kAXnFXns+z5qNuCJMBnajEcTDb96ESgME7l
Rp5ISCfTuJaspATvoXkJ612/rdmU0sB+0n7ulWtcdyCg1Er+vgEikpQlc9szk243
Ojc7UeUuMSyJqftkHgcCzejW6v1HzI0dnl19t/PJat/XAjs7byESLRGdgCs2CGzO
RX3eN+YVlhjYnNg+l186KflC3f4uhD/IP0JAbxG8ZEy8zJ+emCdnbEF+pIK0B7Ql
qJ3v7QBmN7R5xA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:51 2026 by rpki-client