Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: WtPYCHt11lL3aifEsHq/zTVFgvdNbw6+HcfZ5vidQxA=
Subject key identifier: FF:2F:7D:A9:39:0D:ED:30:C0:20:4E:22:98:85:84:AA:07:46:EC:EE
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 01A01BD3A1D639D7068B8526E791DE83AE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 0CDC
Signing time: Wed 19 Aug 2026 21:00:49 +0000
Manifest this update: Wed 19 Aug 2026 21:00:49 +0000
Manifest next update: Thu 20 Aug 2026 21:00:49 +0000
Files and hashes: 1: 4AjGjVkO2tVBx0Eie_ffAJbIoko.roa (hash: HDPfPT6f6mvgy7P34ZeKqbqyBJoxXjtENIEEg/9aLlo=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: dEBlXcyc/v5ANc8DYSz9yYvC1zM0/ts/hjed0YNHuco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:d3:a1:d6:39:d7:06:8b:85:26:e7:91:de:83:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Aug 19 21:00:49 2026 GMT
Not After : Aug 20 21:00:49 2026 GMT
Subject: CN=ff2f7da9390ded30c0204e22988584aa0746ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:17:e8:68:16:6b:5f:d7:b6:5f:ba:26:b1:
e0:1e:4a:3a:58:9c:e5:5a:1c:19:fd:dc:b3:3b:3e:
06:71:b9:f6:70:9a:b5:51:80:01:1f:df:a1:ac:ca:
6a:49:83:10:77:e1:74:c1:18:57:72:60:82:63:35:
ae:ff:e9:22:4d:70:f8:b6:48:4f:8d:a9:c5:6c:f3:
74:c2:d7:10:d7:02:12:02:39:00:70:b2:ff:60:55:
1b:37:97:17:85:e9:01:b1:67:28:c7:92:35:57:8b:
7d:46:83:8e:b5:86:82:82:43:8d:eb:7c:53:82:f7:
08:29:79:67:4c:a0:46:af:00:9a:7c:e0:83:1a:3c:
18:c9:7c:7b:f4:63:0a:57:76:dd:0a:fb:87:93:ad:
7f:a8:f4:b0:37:07:d5:ec:6e:15:bb:19:71:1a:a4:
c1:9a:0a:58:07:7f:3f:63:3d:ef:78:d4:ab:a5:33:
11:b9:89:16:b2:eb:50:00:b3:c9:76:f1:ad:ad:21:
52:4c:d4:48:13:1f:ce:06:2c:17:d3:e0:34:f8:35:
5e:ca:1f:31:c9:f5:f4:ab:9f:81:b8:e1:00:9d:38:
b3:a1:41:1d:e5:9d:c0:ac:d9:97:1d:c1:a2:62:ea:
44:b5:24:6a:e1:cb:c9:a9:aa:8d:b3:7a:1e:53:49:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:7D:A9:39:0D:ED:30:C0:20:4E:22:98:85:84:AA:07:46:EC:EE
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:76:b2:ee:61:30:32:21:51:46:95:4b:53:34:2f:e1:e3:
5d:c6:5e:b3:31:1e:67:cb:78:71:16:ed:15:bb:e1:a7:b3:17:
6b:d7:f3:71:da:32:63:9c:67:c1:38:6d:79:2f:30:d5:bb:a3:
04:e9:10:b6:5e:12:c2:67:c2:c5:7c:f2:05:bb:70:e4:9a:35:
ee:6a:d2:17:57:64:18:25:06:0e:6f:4b:5b:42:e0:6d:b5:ee:
9e:fe:42:07:5b:f8:d8:13:03:84:00:87:10:a6:6f:cd:11:ac:
73:0c:02:41:04:51:6d:f0:ad:74:59:17:9e:52:22:66:f9:32:
d6:04:68:68:94:23:ce:aa:77:db:6b:68:75:f0:ee:e7:c6:e0:
0f:c9:56:d1:f1:78:6c:89:80:1a:2f:5f:d6:53:17:42:d5:66:
a6:ff:fc:b2:36:de:9c:e6:e3:72:66:9c:ed:0e:97:46:95:fb:
57:be:26:b7:1f:2c:50:ce:0a:25:bb:cb:43:1a:cf:0b:8e:e4:
80:5a:a4:17:e1:5e:3b:6a:c3:99:4c:6d:03:ac:05:b5:71:34:
82:25:00:62:b1:2d:08:94:04:af:8a:14:1f:89:a5:6e:cf:d4:
0b:83:73:9f:1a:a6:89:79:77:83:2a:55:fe:ac:be:b4:3a:c9:
80:69:d1:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAb06HWOdcGi4Um55Heg64JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj
Yzc0MzUwHhcNMjYwODE5MjEwMDQ5WhcNMjYwODIwMjEwMDQ5WjAzMTEwLwYDVQQD
EyhmZjJmN2RhOTM5MGRlZDMwYzAyMDRlMjI5ODg1ODRhYTA3NDZlY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtykX6GgWa1/Xtl+6JrHgHko6WJzl
WhwZ/dyzOz4Gcbn2cJq1UYABH9+hrMpqSYMQd+F0wRhXcmCCYzWu/+kiTXD4tkhP
janFbPN0wtcQ1wISAjkAcLL/YFUbN5cXhekBsWcox5I1V4t9RoOOtYaCgkON63xT
gvcIKXlnTKBGrwCafOCDGjwYyXx79GMKV3bdCvuHk61/qPSwNwfV7G4VuxlxGqTB
mgpYB38/Yz3veNSrpTMRuYkWsutQALPJdvGtrSFSTNRIEx/OBiwX0+A0+DVeyh8x
yfX0q5+BuOEAnTizoUEd5Z3ArNmXHcGiYupEtSRq4cvJqaqNs3oeU0l9/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8vfak5De0wwCBOIpiFhKoHRuzuMB8GA1UdIwQY
MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt
Yjg0NTNlZWJiMjY3LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3
LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOp2su5h
MDIhUUaVS1M0L+HjXcZeszEeZ8t4cRbtFbvhp7MXa9fzcdoyY5xnwThteS8w1buj
BOkQtl4SwmfCxXzyBbtw5Jo17mrSF1dkGCUGDm9LW0LgbbXunv5CB1v42BMDhACH
EKZvzRGscwwCQQRRbfCtdFkXnlIiZvky1gRoaJQjzqp322todfDu58bgD8lW0fF4
bImAGi9f1lMXQtVmpv/8sjbenObjcmac7Q6XRpX7V74mtx8sUM4KJbvLQxrPC47k
gFqkF+FeO2rDmUxtA6wFtXE0giUAYrEtCJQEr4oUH4mlbs/UC4NznxqmiXl3gypV
/qy+tDrJgGnR6g==
-----END CERTIFICATE-----
Generated at Thu Aug 20 02:47:55 2026 by rpki-client