Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: tBzb6/8khro2K6O16swzXXQKAntD6uXVQ+1VZyGvDQA=
Subject key identifier: 1B:2C:66:41:EB:57:F9:62:BC:71:28:6E:5F:F9:58:25:EC:4F:DF:D4
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 01A06E39DB47B37899D03720FC57EEAE9EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 10C9
Signing time: Fri 04 Sep 2026 21:01:20 +0000
Manifest this update: Fri 04 Sep 2026 21:01:20 +0000
Manifest next update: Sat 05 Sep 2026 21:01:20 +0000
Files and hashes: 1: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (hash: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: hJ3mq/WxO+a6cO7/avlY/aeuGgO7eL7FFrFaqlE28DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:db:47:b3:78:99:d0:37:20:fc:57:ee:ae:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Sep 4 21:01:20 2026 GMT
Not After : Sep 5 21:01:20 2026 GMT
Subject: CN=1b2c6641eb57f962bc71286e5ff95825ec4fdfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:9b:bd:b8:63:8e:b1:21:eb:2b:6f:4a:0a:
da:ca:75:35:8b:97:e2:47:4e:c8:07:fc:6e:50:0f:
61:e9:4c:68:a4:e7:ce:22:61:6d:0e:93:57:25:cd:
53:80:d1:bf:27:91:51:0d:91:9c:dd:60:14:3b:97:
e0:c6:b8:aa:43:f4:a9:ca:86:d2:c8:d7:06:d8:13:
0d:65:c5:cd:ef:ea:1f:47:13:0c:65:5a:87:44:05:
bb:ae:ba:b3:23:0b:5f:11:48:e0:fb:8e:c2:c5:99:
a3:c3:1b:90:b7:81:2a:c4:0a:5d:04:8b:2d:87:05:
ff:00:d1:ad:a4:d8:46:b4:6f:be:d4:45:43:3d:4c:
5f:10:d0:22:e2:ca:cd:db:ee:f2:89:44:06:90:5d:
85:d7:21:24:18:a5:42:c5:5a:36:e7:e4:f2:0c:d1:
db:9c:7c:32:85:4c:ea:50:52:04:a8:c0:c3:bc:8b:
34:a3:be:cc:62:09:ce:3d:a8:5c:cb:fc:30:07:00:
de:9f:d7:94:7b:a3:17:6f:af:7d:90:43:8b:91:bc:
f2:5e:d6:66:b3:30:44:7f:05:50:b9:cd:5d:98:95:
2b:8e:db:73:4b:c8:e2:06:53:29:29:f2:15:60:4d:
53:d8:d5:58:64:68:b4:6e:66:f2:fe:97:ad:3b:2e:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:66:41:EB:57:F9:62:BC:71:28:6E:5F:F9:58:25:EC:4F:DF:D4
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:16:6f:c3:e7:8d:45:d6:43:64:f7:b6:6e:90:16:94:59:
fc:05:36:13:25:23:fd:8a:78:46:04:85:1d:43:10:2e:00:4a:
dd:18:b9:fb:16:21:bd:48:df:f4:95:2d:a3:57:e5:2e:2a:67:
b6:6a:1a:9e:4e:da:a5:a1:49:26:b0:51:d5:b2:be:ad:2c:19:
73:7c:5b:5a:df:6e:50:2e:9d:7b:26:af:74:42:8f:de:04:0f:
0e:f1:b2:c5:84:8b:7c:25:ee:72:8f:69:c3:02:6b:bd:7f:d6:
f2:37:ee:29:05:df:9a:3d:25:d8:81:55:22:25:c3:05:67:a4:
29:2d:49:1c:ed:0e:97:c8:1c:f1:62:50:4f:82:51:8a:d9:ce:
1c:6a:6a:05:84:ea:88:4b:15:af:e6:f0:a5:00:d4:58:33:28:
82:16:b1:09:2b:d2:e8:7c:b8:47:a3:52:44:db:90:0f:a4:d4:
f5:b3:62:72:54:f9:fa:76:b1:d2:94:c4:2d:5f:08:f1:6c:74:
30:c5:ca:60:78:4d:9f:21:c9:f1:8b:dc:2b:f8:35:5c:f6:29:
82:60:86:d1:ff:04:ab:66:f5:c2:91:12:89:15:1c:54:f4:e7:
b5:9c:a6:8b:62:cb:68:9a:a3:80:2c:ef:27:45:97:1d:44:71:
b3:47:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuOdtHs3iZ0Dcg/Ffurp68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODliMzQ5Yzg0ZmM3YjM0MTJhNTJkNjVmZjI2MGQyY2My
ODlhYjkwHhcNMjYwOTA0MjEwMTIwWhcNMjYwOTA1MjEwMTIwWjAzMTEwLwYDVQQD
EygxYjJjNjY0MWViNTdmOTYyYmM3MTI4NmU1ZmY5NTgyNWVjNGZkZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkWbvbhjjrEh6ytvSgraynU1i5fi
R07IB/xuUA9h6UxopOfOImFtDpNXJc1TgNG/J5FRDZGc3WAUO5fgxriqQ/SpyobS
yNcG2BMNZcXN7+ofRxMMZVqHRAW7rrqzIwtfEUjg+47CxZmjwxuQt4EqxApdBIst
hwX/ANGtpNhGtG++1EVDPUxfENAi4srN2+7yiUQGkF2F1yEkGKVCxVo25+TyDNHb
nHwyhUzqUFIEqMDDvIs0o77MYgnOPahcy/wwBwDen9eUe6MXb699kEOLkbzyXtZm
szBEfwVQuc1dmJUrjttzS8jiBlMpKfIVYE1T2NVYZGi0bmby/petOy605wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBssZkHrV/livHEobl/5WCXsT9/UMB8GA1UdIwQY
MBaAFP2Js0nIT8ezQSpS1l/yYNLMKJq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUt
ZTgxNzYxMDJjNWZmLzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUtZTgxNzYxMDJjNWZm
LzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnIWb8Pn
jUXWQ2T3tm6QFpRZ/AU2EyUj/Yp4RgSFHUMQLgBK3Ri5+xYhvUjf9JUto1flLipn
tmoank7apaFJJrBR1bK+rSwZc3xbWt9uUC6deyavdEKP3gQPDvGyxYSLfCXuco9p
wwJrvX/W8jfuKQXfmj0l2IFVIiXDBWekKS1JHO0Ol8gc8WJQT4JRitnOHGpqBYTq
iEsVr+bwpQDUWDMoghaxCSvS6Hy4R6NSRNuQD6TU9bNiclT5+nax0pTELV8I8Wx0
MMXKYHhNnyHJ8YvcK/g1XPYpgmCG0f8Eq2b1wpESiRUcVPTntZymi2LLaJqjgCzv
J0WXHURxs0cTeA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:50:12 2026 by rpki-client