Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: 0YcT52KokeqgUxjvw88xWJk4+qysVMX/OKYrP1xjAgg=
Subject key identifier: 89:11:19:0A:A7:D1:9F:B3:8B:38:A8:4C:4B:70:E0:11:83:E6:AC:D6
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01A18BD335487BDAABA5C0050E14DEB0AFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1AED
Signing time: Fri 30 Oct 2026 08:00:36 +0000
Manifest this update: Fri 30 Oct 2026 08:00:36 +0000
Manifest next update: Sat 31 Oct 2026 08:00:36 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 7OrSClD9xonQMYVzrvenKwQpWHGGO6ERWGyUxTmv00M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:35:48:7b:da:ab:a5:c0:05:0e:14:de:b0:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Oct 30 08:00:36 2026 GMT
Not After : Oct 31 08:00:36 2026 GMT
Subject: CN=8911190aa7d19fb38b38a84c4b70e01183e6acd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:aa:00:db:60:38:e6:f5:91:ed:8a:0c:c1:
ed:f5:2a:6a:fa:3a:08:ec:0d:c6:8c:fc:a8:31:91:
32:3d:70:ab:78:4b:9d:15:28:79:a0:ca:b6:c3:ba:
ce:9e:57:15:00:da:d6:95:42:ea:91:e5:71:65:f9:
06:5d:53:46:f5:3f:e9:7f:83:04:55:e3:b1:39:5d:
9c:89:c6:88:a3:68:ef:50:1b:06:c6:26:2b:1d:5a:
8a:90:10:2d:2a:ef:80:e9:3e:68:f1:20:15:44:9a:
38:6c:67:51:63:44:26:5d:91:79:e8:17:cd:44:bc:
8c:7b:3a:c0:68:e9:cb:fc:95:48:c9:88:d9:34:9f:
49:d3:ed:63:30:22:ed:e8:00:63:7d:94:35:67:7f:
ff:3b:c7:8d:82:7e:8e:25:9c:f4:01:2e:1a:9d:25:
76:f0:06:33:e5:d8:2b:73:91:bc:06:7e:9e:e5:c3:
a8:bc:5e:79:c7:89:df:0a:f2:8b:bc:19:19:f7:62:
76:06:77:40:80:99:8c:e2:2f:d2:65:42:f1:de:a7:
a1:f0:10:68:0d:06:3e:dc:b9:b9:34:61:ee:2a:76:
39:ba:31:cd:7e:46:e0:ae:04:26:0e:58:6c:b7:c5:
51:e2:58:db:0e:78:7e:ab:9a:0b:66:48:23:fb:16:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:19:0A:A7:D1:9F:B3:8B:38:A8:4C:4B:70:E0:11:83:E6:AC:D6
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:60:dd:70:56:63:7c:38:06:d3:91:73:f3:b2:14:62:1c:ff:
52:31:81:a6:c7:0d:3b:e4:39:1f:31:59:b2:08:e5:63:c9:f4:
60:48:c4:06:8c:fd:91:1c:d0:af:5b:a9:ec:47:52:27:d4:e6:
ee:12:0a:32:17:3f:4d:88:e9:ee:36:9c:f7:3f:1a:60:7b:cc:
ea:34:6b:c4:04:5e:b0:1d:85:2a:f4:d7:a2:84:5b:ee:52:2a:
34:d0:04:87:65:dd:36:74:d3:2f:9e:5a:07:04:cc:f2:d8:89:
63:12:57:d3:60:84:ef:64:6e:51:a3:f1:df:c2:30:25:eb:49:
e2:4d:98:6f:30:39:74:5a:db:de:ef:22:77:ae:96:3e:74:40:
57:aa:39:12:b6:df:75:aa:84:d8:04:ff:a4:bf:b0:cc:da:8c:
15:e5:61:87:93:9f:9e:77:29:74:8a:d4:e3:5d:9b:56:ad:48:
68:94:d3:3f:02:44:65:6c:84:2a:a1:f1:85:83:db:85:3a:9a:
fd:46:7f:b3:a1:9a:1e:9a:1c:a2:89:3a:de:c5:ec:7b:fb:ac:
41:a7:03:67:2d:07:2d:06:38:b2:83:cc:b8:a7:a6:c5:94:d8:
13:ca:82:f6:52:e1:71:f6:7c:d0:f9:ff:4d:c8:f5:46:78:60:
50:02:90:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGL0zVIe9qrpcAFDhTesK+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjhjYTgyMTQ3ZWQyMjc3YjRiY2M2OWE1Mjg1YmFlNzM1
ZjJlNDQwHhcNMjYxMDMwMDgwMDM2WhcNMjYxMDMxMDgwMDM2WjAzMTEwLwYDVQQD
Eyg4OTExMTkwYWE3ZDE5ZmIzOGIzOGE4NGM0YjcwZTAxMTgzZTZhY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCCqANtgOOb1ke2KDMHt9Spq+joI
7A3GjPyoMZEyPXCreEudFSh5oMq2w7rOnlcVANrWlULqkeVxZfkGXVNG9T/pf4ME
VeOxOV2cicaIo2jvUBsGxiYrHVqKkBAtKu+A6T5o8SAVRJo4bGdRY0QmXZF56BfN
RLyMezrAaOnL/JVIyYjZNJ9J0+1jMCLt6ABjfZQ1Z3//O8eNgn6OJZz0AS4anSV2
8AYz5dgrc5G8Bn6e5cOovF55x4nfCvKLvBkZ92J2BndAgJmM4i/SZULx3qeh8BBo
DQY+3Lm5NGHuKnY5ujHNfkbgrgQmDlhst8VR4ljbDnh+q5oLZkgj+xa4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkRGQqn0Z+zizioTEtw4BGD5qzWMB8GA1UdIwQY
MBaAFMhoyoIUftIne0vMaaUoW65zXy5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTIt
NjY4NDkwMTk2MjdlLzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNDJjMzMtYWI2Yi00OGJlLWE0OTItNjY4NDkwMTk2Mjdl
LzEveUdqS2doUi0waWQ3Uzh4cHBTaGJybk5mTGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGDdcFZj
fDgG05Fz87IUYhz/UjGBpscNO+Q5HzFZsgjlY8n0YEjEBoz9kRzQr1up7EdSJ9Tm
7hIKMhc/TYjp7jac9z8aYHvM6jRrxAResB2FKvTXooRb7lIqNNAEh2XdNnTTL55a
BwTM8tiJYxJX02CE72RuUaPx38IwJetJ4k2YbzA5dFrb3u8id66WPnRAV6o5Erbf
daqE2AT/pL+wzNqMFeVhh5OfnncpdIrU412bVq1IaJTTPwJEZWyEKqHxhYPbhTqa
/UZ/s6GaHpocook63sXse/usQacDZy0HLQY4soPMuKemxZTYE8qC9lLhcfZ80Pn/
Tcj1RnhgUAKQxA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:27:41 2026 by rpki-client