Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: 9a6GgNm3+GRqqH6ayT2F1OFmTBYPPKcb/qjxj9IBmrs=
Subject key identifier: 36:B1:55:D0:3D:96:86:4C:83:45:06:BD:BD:BA:B3:5E:13:FF:65:97
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 01A08340B003765E0BBA2A9D5AF514A11BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 08F4
Signing time: Tue 08 Sep 2026 23:00:49 +0000
Manifest this update: Tue 08 Sep 2026 23:00:49 +0000
Manifest next update: Wed 09 Sep 2026 23:00:49 +0000
Files and hashes: 1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: X9y/jwy7ysYxmHtIqwEVlK0+M9t0O7tDyk9TA6DnqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:40:b0:03:76:5e:0b:ba:2a:9d:5a:f5:14:a1:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Sep 8 23:00:49 2026 GMT
Not After : Sep 9 23:00:49 2026 GMT
Subject: CN=36b155d03d96864c834506bdbdbab35e13ff6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:a7:a0:ae:9a:43:53:18:40:ab:b8:6a:97:
54:10:e8:50:e5:eb:57:94:47:9f:b2:e4:8f:04:93:
04:7b:cd:8f:e4:d9:e1:cc:da:00:da:94:b5:43:88:
45:81:96:fa:3b:63:0d:53:76:75:7e:4d:dd:5f:04:
14:95:47:0f:ee:27:0e:fa:77:b4:d2:34:3a:fe:7a:
bb:1a:66:a7:ed:8f:86:c5:19:1f:83:06:36:8c:15:
ed:db:2a:b3:7e:b3:89:27:33:e3:91:42:3f:1b:86:
eb:af:dc:fd:b3:d7:c1:ee:a3:ab:da:c6:be:64:53:
05:9a:be:7b:ca:dd:b8:6e:c4:cc:16:44:67:79:32:
07:5b:ea:5b:e1:99:e1:a5:02:2a:c1:ab:dc:17:64:
05:f3:19:eb:9f:35:a3:ff:19:b4:74:a1:85:71:27:
12:d1:ac:34:0e:c8:94:35:09:3f:8c:7d:09:a5:ed:
5f:6f:0e:67:54:94:26:47:c8:28:83:d7:71:c0:a0:
d2:f0:39:2f:c2:12:60:10:3d:fb:37:00:1a:a1:1b:
7c:a3:a2:b8:45:12:ce:ef:7b:0c:4d:e0:58:76:3b:
5c:22:98:95:d4:26:a0:da:58:b9:70:d2:dc:d7:81:
86:ef:d7:d2:c9:08:dd:f9:b5:87:75:97:cb:08:8c:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:55:D0:3D:96:86:4C:83:45:06:BD:BD:BA:B3:5E:13:FF:65:97
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:6d:46:e7:75:20:4b:80:b7:c0:54:e5:81:cc:79:f6:a7:
2d:de:44:5e:6e:4a:8c:04:aa:2a:50:96:42:2a:b3:19:88:ac:
9f:ec:35:07:2b:0b:65:91:29:87:3b:d1:63:33:f9:a6:15:ef:
ce:5e:04:bd:a6:b8:2d:d1:17:73:0a:79:8c:55:ae:5b:e5:91:
1e:89:60:12:2a:77:6e:c6:4e:4a:9d:f9:02:8c:ae:e0:a0:72:
0c:42:36:0d:ab:43:9d:16:80:5c:4a:fc:27:f6:2d:3c:dd:14:
af:3e:be:69:ec:62:2c:8b:b1:a3:c5:fd:8a:0f:45:bb:ff:1b:
c6:ac:b3:b6:70:d4:a5:13:f5:f4:51:38:59:81:4a:f2:d7:04:
13:b6:8e:59:e0:bc:20:46:22:3a:0d:a1:81:82:9e:00:f6:80:
4e:2d:cd:bf:96:c7:b2:03:83:ca:b5:12:15:67:d3:5a:09:86:
27:3e:da:c5:de:55:af:51:5a:7c:60:eb:6c:35:b5:1c:5c:51:
30:e0:48:98:ef:a4:f0:0c:bf:a6:a6:7f:49:ec:90:c7:4c:90:
00:18:b4:c3:29:83:ed:13:2f:c5:e7:ac:e3:65:76:aa:80:93:
fe:f4:bb:eb:8f:71:62:d3:3b:99:c0:15:5a:bc:c1:03:4d:a8:
a8:6f:f6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCDQLADdl4LuiqdWvUUoRvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjYwOTA4MjMwMDQ5WhcNMjYwOTA5MjMwMDQ5WjAzMTEwLwYDVQQD
EygzNmIxNTVkMDNkOTY4NjRjODM0NTA2YmRiZGJhYjM1ZTEzZmY2NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznCnoK6aQ1MYQKu4apdUEOhQ5etX
lEefsuSPBJMEe82P5NnhzNoA2pS1Q4hFgZb6O2MNU3Z1fk3dXwQUlUcP7icO+ne0
0jQ6/nq7Gman7Y+GxRkfgwY2jBXt2yqzfrOJJzPjkUI/G4brr9z9s9fB7qOr2sa+
ZFMFmr57yt24bsTMFkRneTIHW+pb4ZnhpQIqwavcF2QF8xnrnzWj/xm0dKGFcScS
0aw0DsiUNQk/jH0Jpe1fbw5nVJQmR8gog9dxwKDS8DkvwhJgED37NwAaoRt8o6K4
RRLO73sMTeBYdjtcIpiV1Cag2li5cNLc14GG79fSyQjd+bWHdZfLCIyfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaxVdA9loZMg0UGvb26s14T/2WXMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohNtRud1
IEuAt8BU5YHMefanLd5EXm5KjASqKlCWQiqzGYisn+w1BysLZZEphzvRYzP5phXv
zl4Evaa4LdEXcwp5jFWuW+WRHolgEip3bsZOSp35Aoyu4KByDEI2DatDnRaAXEr8
J/YtPN0Urz6+aexiLIuxo8X9ig9Fu/8bxqyztnDUpRP19FE4WYFK8tcEE7aOWeC8
IEYiOg2hgYKeAPaATi3Nv5bHsgODyrUSFWfTWgmGJz7axd5Vr1FafGDrbDW1HFxR
MOBImO+k8Ay/pqZ/SeyQx0yQABi0wymD7RMvxees42V2qoCT/vS7649xYtM7mcAV
WrzBA02oqG/2Vg==
-----END CERTIFICATE-----
Generated at Wed Sep 9 08:38:48 2026 by rpki-client