Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: W7SJxTtH3aaFXyks0YvI3VlkRO9SHRNnc7mL43nHf1Q=
Subject key identifier: FD:8A:A5:58:7A:C9:3A:A5:41:44:BE:83:0D:43:9A:8A:93:76:85:2B
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 01A08E9FED84532F0BED6DF9BC0BC7AC2F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 0778
Signing time: Fri 11 Sep 2026 04:00:40 +0000
Manifest this update: Fri 11 Sep 2026 04:00:40 +0000
Manifest next update: Sat 12 Sep 2026 04:00:40 +0000
Files and hashes: 1: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: 6hWAiOdDP/EAfJgrywYdq9pJ1Gz7HnWFmZczAP1elIo=)
2: vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa (hash: ASiU/VZxh3GZFZYmlNltFl5dj/W+E1FulQvZXR6ONjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:9f:ed:84:53:2f:0b:ed:6d:f9:bc:0b:c7:ac:2f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Sep 11 04:00:40 2026 GMT
Not After : Sep 12 04:00:40 2026 GMT
Subject: CN=fd8aa5587ac93aa54144be830d439a8a9376852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:ba:b5:9d:b3:0d:cd:41:f2:af:d5:20:fb:
c7:57:e5:b5:8e:6c:76:0c:d5:56:d3:3b:4f:a7:42:
ef:a5:66:36:e8:f8:05:6d:10:b1:1b:7e:3c:de:f7:
60:71:e8:51:61:f8:25:6e:a9:76:ad:07:1c:6d:4b:
39:c1:23:11:cb:81:4d:52:ef:5c:82:5f:ab:f1:5c:
81:62:73:58:c4:07:7b:77:0e:5f:31:d2:c7:ed:c0:
c1:fb:c8:e1:43:b0:36:ac:a3:e3:ae:77:d0:e4:8e:
3c:a5:4e:5e:ae:09:2e:58:29:c2:16:c0:6c:0f:13:
d2:66:cc:9e:12:7f:96:fd:a0:81:d4:fd:61:7a:8d:
47:db:a6:2c:68:d2:76:b7:ee:26:b1:7e:0b:57:3d:
2c:c4:e6:f6:80:2a:b6:58:fd:35:b3:fd:0c:e0:e5:
5d:76:c2:71:21:45:c3:c6:86:80:3e:cb:ce:71:b3:
84:aa:3b:9f:21:a0:6a:60:e6:6a:fc:ec:63:01:65:
17:89:f6:7e:b8:65:d5:48:8b:8d:57:81:68:35:f8:
b4:a6:47:8c:29:0e:5d:1b:7e:e5:64:f6:01:a8:a2:
3d:28:21:59:e1:57:46:8e:85:5e:73:03:eb:d7:e3:
df:c2:b2:9b:7f:ce:e8:4b:43:76:09:8c:08:a0:32:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:A5:58:7A:C9:3A:A5:41:44:BE:83:0D:43:9A:8A:93:76:85:2B
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:ba:b8:25:0b:6a:72:cb:19:5d:1d:fd:99:d1:f5:a5:f6:
85:31:6f:31:d2:80:0b:0b:f4:cd:e0:64:5e:3a:88:42:c0:8a:
d7:43:63:e2:45:ab:6c:d7:75:db:b0:58:ff:1d:f6:14:9b:b6:
8b:1e:89:8e:5a:f5:b2:9c:06:25:41:47:58:b5:c7:a2:e8:68:
24:c1:f6:a0:b8:d2:16:92:f2:e9:d6:17:e6:10:6a:4e:32:ce:
7d:db:92:4b:07:46:11:ef:ec:dd:11:19:24:f9:7e:35:1c:ea:
95:97:a5:76:fc:79:3d:bb:86:61:c4:0d:07:3a:37:f0:2f:46:
ef:a5:c2:09:c2:ab:31:db:2e:56:e4:91:af:de:20:3c:46:4d:
8d:f8:98:62:fd:2a:00:58:ba:b2:f3:b3:bb:8d:68:c6:14:27:
fa:4a:1a:d4:9a:b9:3d:ed:7b:d7:e0:1c:0b:b0:c6:00:31:74:
11:97:71:85:66:fb:d9:2c:93:11:d4:38:2b:ec:48:d9:fd:a5:
91:17:ac:0f:0d:bc:62:d7:ae:b0:b0:b8:c1:56:18:0c:df:51:
e9:37:25:df:cd:7a:ec:e9:f2:e9:76:0d:4f:74:f4:f0:74:39:
8e:0f:94:79:39:b6:7f:33:d3:0e:7c:21:a9:a8:01:fc:00:7a:
f1:e2:d4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOn+2EUy8L7W35vAvHrC8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODdjY2VjNDlhYTVmNjZhYTAyNjQ4ZDkxYjRhMmVlOGZm
N2JkZTYwHhcNMjYwOTExMDQwMDQwWhcNMjYwOTEyMDQwMDQwWjAzMTEwLwYDVQQD
EyhmZDhhYTU1ODdhYzkzYWE1NDE0NGJlODMwZDQzOWE4YTkzNzY4NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmW6tZ2zDc1B8q/VIPvHV+W1jmx2
DNVW0ztPp0LvpWY26PgFbRCxG3483vdgcehRYfglbql2rQccbUs5wSMRy4FNUu9c
gl+r8VyBYnNYxAd7dw5fMdLH7cDB+8jhQ7A2rKPjrnfQ5I48pU5ergkuWCnCFsBs
DxPSZsyeEn+W/aCB1P1heo1H26YsaNJ2t+4msX4LVz0sxOb2gCq2WP01s/0M4OVd
dsJxIUXDxoaAPsvOcbOEqjufIaBqYOZq/OxjAWUXifZ+uGXVSIuNV4FoNfi0pkeM
KQ5dG37lZPYBqKI9KCFZ4VdGjoVecwPr1+PfwrKbf87oS0N2CYwIoDJYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2KpVh6yTqlQUS+gw1DmoqTdoUrMB8GA1UdIwQY
MBaAFLGHzOxJql9mqgJkjZG0ou6P973mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYt
MTdmNGUwZjZjZGViLzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYtMTdmNGUwZjZjZGVi
LzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGS6uCUL
anLLGV0d/ZnR9aX2hTFvMdKACwv0zeBkXjqIQsCK10Nj4kWrbNd127BY/x32FJu2
ix6Jjlr1spwGJUFHWLXHouhoJMH2oLjSFpLy6dYX5hBqTjLOfduSSwdGEe/s3REZ
JPl+NRzqlZeldvx5PbuGYcQNBzo38C9G76XCCcKrMdsuVuSRr94gPEZNjfiYYv0q
AFi6svOzu41oxhQn+koa1Jq5Pe171+AcC7DGADF0EZdxhWb72SyTEdQ4K+xI2f2l
kResDw28YteusLC4wVYYDN9R6Tcl38167Ony6XYNT3T08HQ5jg+UeTm2fzPTDnwh
qagB/AB68eLUQQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:27 2026 by rpki-client