Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json)
Hash identifier: rpbsGTJnaIPNNERwPLt1w9ZDQt4pkBKNctvlYe24PiI=
Subject key identifier: BE:56:FB:9D:FC:3B:5B:28:79:6B:A9:9C:78:42:D3:46:D0:34:9B:0A
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A1998F3D5BA20841757C7AB824D13A8D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
Manifest number: 0791
Signing time: Mon 02 Nov 2026 00:01:03 +0000
Manifest this update: Mon 02 Nov 2026 00:01:03 +0000
Manifest next update: Tue 03 Nov 2026 00:01:03 +0000
Files and hashes: 1: FXGJPB5cV8SV55l2B2YVTcFdnlo.roa (hash: tVUcwXpqVpVN7Cet85WPpi0wi/fMBdIGr9P4IXIyce0=)
2: NkUUyvl7E5IFTmk2m4mmlVhtUxg.roa (hash: byU3ctlajeSCymgZWoC888C7lxqYgLVG00fXCn9LR7w=)
3: NnRgG3M3rXv_XQgf59QH0VyIcXU.roa (hash: 2xaRMkACrNyKiEj55shU5SHsa1yo7g7GQep768NzJv0=)
4: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: vLTEKTiCAKDflDgPdj4nKFxG6H7W5X+DlGJGkriGMcI=)
5: WtYlW8E3-Cpwggd8_lNnBtRvx3I.roa (hash: LODSZfRKT8SWMwcXcavi2c54WYMjniJJcDE39gX4M2U=)
6: pPpBqCzBnHPNT5yoII_XyWraCp0.roa (hash: Bco4qt1MMOqcSlE3VTwAyh8x4L3Es84ii+IIgs4gkTA=)
7: vo7JxYIuloJUCs71gyoUri407fE.roa (hash: 5h3sm9pEmBSWqYEnujmbvxhXNPjFplm9ATmCzzG16ZM=)
8: zUkRPCePTnjXP32W6ziaTjtNvVw.roa (hash: ei3wpp5GVP0W4BLMBMt/Lh1gWFCco1WGTGn+ev6xgYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:8f:3d:5b:a2:08:41:75:7c:7a:b8:24:d1:3a:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Nov 2 00:01:03 2026 GMT
Not After : Nov 3 00:01:03 2026 GMT
Subject: CN=be56fb9dfc3b5b28796ba99c7842d346d0349b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:39:d8:84:50:b3:38:79:cf:0d:ac:24:70:
e4:46:66:3f:3a:bc:75:b2:af:ca:1c:0d:92:f8:cc:
54:ab:03:fa:5b:fb:3f:ba:a2:83:3d:fd:ad:42:50:
a5:e2:6d:d4:25:4b:51:de:e4:3b:25:be:6a:96:3e:
27:1c:26:30:1f:73:1e:8c:b2:66:3a:c6:c8:34:3b:
7e:1e:45:c7:53:0d:dd:38:4b:45:a3:47:ff:d2:40:
c0:ad:db:21:59:dd:fe:c6:b6:48:d0:45:34:8f:89:
f7:ec:d6:e4:b1:08:78:f7:90:7d:78:2c:b0:9c:af:
22:8d:08:b2:24:98:da:2f:cd:aa:7e:4b:71:7e:8e:
f2:3f:a6:2b:6e:75:b3:14:1f:58:94:44:15:c0:f9:
a0:a9:9a:08:96:2c:ef:29:dc:b8:ca:7c:80:e4:c2:
ae:10:5c:4c:04:12:43:76:7f:0f:a3:e4:72:83:63:
93:51:95:63:05:49:af:f5:4c:ca:b7:28:3b:60:2b:
21:ae:18:3f:12:4c:f1:48:d2:2a:4e:4e:91:a8:7b:
47:b4:a8:65:fa:d5:8a:2f:91:ac:12:68:1d:ad:a8:
b0:93:38:dd:d0:74:89:38:37:91:a5:34:93:e0:d6:
97:6f:e9:c0:ea:70:1b:6d:25:bf:69:e1:6b:8e:6a:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:FB:9D:FC:3B:5B:28:79:6B:A9:9C:78:42:D3:46:D0:34:9B:0A
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:a2:25:07:97:0d:22:32:55:4f:74:f8:0d:e2:b7:01:94:
e9:29:77:72:4d:1f:04:dc:44:a3:a4:82:23:be:b4:b3:68:1e:
25:84:9a:02:13:8d:9d:47:54:22:92:aa:8b:e4:a8:c2:08:d7:
53:69:b3:5e:aa:b0:a6:34:76:32:c0:07:48:5b:de:16:40:03:
29:58:66:8d:73:8d:cb:38:49:0f:fb:5f:0f:68:a5:0e:ca:e7:
74:d1:48:5d:29:e7:f4:e7:44:22:6f:9c:51:93:f2:af:3e:ea:
2b:0d:63:3d:fc:06:db:bc:8a:d9:a4:93:9b:2e:84:9c:1c:16:
04:87:4d:4e:61:5d:02:47:4e:9c:ae:90:de:49:73:40:22:fc:
9b:e2:7e:d2:c4:20:8a:0e:b5:40:38:15:09:57:79:36:6d:45:
9e:e5:d6:93:af:b2:e0:ec:de:3a:41:32:cd:84:e0:78:98:3a:
29:6e:bc:73:6e:71:7e:7e:55:14:59:7c:90:3a:5e:03:9d:e5:
1d:46:cd:32:7b:4f:89:a0:f3:cd:45:a7:85:71:31:af:6a:87:
e8:49:7b:13:26:ea:96:46:93:2f:42:45:21:06:af:e2:4a:ab:
17:1f:af:00:bb:96:58:b0:ae:e8:ba:40:d2:64:9d:a1:c5:d8:
1c:22:f8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGZjz1boghBdXx6uCTROo0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODdhNjg4YTg5YTk4OTk0OTQxNmE4MTljYzRhODBkZWE0
NTRjOWQwHhcNMjYxMTAyMDAwMTAzWhcNMjYxMTAzMDAwMTAzWjAzMTEwLwYDVQQD
EyhiZTU2ZmI5ZGZjM2I1YjI4Nzk2YmE5OWM3ODQyZDM0NmQwMzQ5YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV852IRQszh5zw2sJHDkRmY/Orx1
sq/KHA2S+MxUqwP6W/s/uqKDPf2tQlCl4m3UJUtR3uQ7Jb5qlj4nHCYwH3MejLJm
OsbINDt+HkXHUw3dOEtFo0f/0kDArdshWd3+xrZI0EU0j4n37NbksQh495B9eCyw
nK8ijQiyJJjaL82qfktxfo7yP6YrbnWzFB9YlEQVwPmgqZoIlizvKdy4ynyA5MKu
EFxMBBJDdn8Po+Ryg2OTUZVjBUmv9UzKtyg7YCshrhg/EkzxSNIqTk6RqHtHtKhl
+tWKL5GsEmgdraiwkzjd0HSJODeRpTST4NaXb+nA6nAbbSW/aeFrjmojXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5W+538O1soeWupnHhC00bQNJsKMB8GA1UdIwQY
MBaAFEWHpoiompiZSUFqgZzEqA3qRUydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAt
MmY3MjU5NTYxNDhmLzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAtMmY3MjU5NTYxNDhm
LzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBiiJQeX
DSIyVU90+A3itwGU6Sl3ck0fBNxEo6SCI760s2geJYSaAhONnUdUIpKqi+SowgjX
U2mzXqqwpjR2MsAHSFveFkADKVhmjXONyzhJD/tfD2ilDsrndNFIXSnn9OdEIm+c
UZPyrz7qKw1jPfwG27yK2aSTmy6EnBwWBIdNTmFdAkdOnK6Q3klzQCL8m+J+0sQg
ig61QDgVCVd5Nm1FnuXWk6+y4OzeOkEyzYTgeJg6KW68c25xfn5VFFl8kDpeA53l
HUbNMntPiaDzzUWnhXExr2qH6El7EybqlkaTL0JFIQav4kqrFx+vALuWWLCu6LpA
0mSdocXYHCL4ZQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:29:38 2026 by rpki-client