Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
File: Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft (raw, json)
Hash identifier: TAE3Dw5igoeT6GRSKS1TTo/2iJ/6dblwB/l1vRMYieM=
Subject key identifier: E3:EF:1E:46:E4:78:85:E7:05:D0:34:BD:63:6B:67:BF:82:30:EF:07
Authority key identifier: 61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
Certificate issuer: /CN=61ccb555c200e20862f6fdb8326137cd4c65198b
Certificate serial: 01A19279F289D58791E8DF7CA8DFD321D2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
Manifest number: 5B
Signing time: Sat 31 Oct 2026 15:00:27 +0000
Manifest this update: Sat 31 Oct 2026 15:00:27 +0000
Manifest next update: Sun 01 Nov 2026 15:00:27 +0000
Files and hashes: 1: 1-jujSdDD2_MAgtrX_hFEt7IbELM.roa (hash: u7WpCsHhA0JUCiWeyt19ZqHHjdIbql3njSFkXX2GUJc=)
2: Ycy1VcIA4ghi9v24MmE3zUxlGYs.crl (hash: 47cfwtLzjbOQLyU8o/llh1EtOXe8T55q138uDsz3Fmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:79:f2:89:d5:87:91:e8:df:7c:a8:df:d3:21:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ccb555c200e20862f6fdb8326137cd4c65198b
Validity
Not Before: Oct 31 15:00:27 2026 GMT
Not After : Nov 1 15:00:27 2026 GMT
Subject: CN=e3ef1e46e47885e705d034bd636b67bf8230ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:1a:e3:c7:1f:02:b6:73:8f:8b:34:80:ce:
02:17:43:b0:83:b0:1b:56:22:f6:52:1e:a9:14:71:
a8:f5:39:64:ce:a5:33:d7:71:dc:53:f2:4d:b7:32:
30:25:76:0d:0d:78:9f:55:ca:02:c2:92:8f:1d:4f:
4f:98:73:c3:f5:1c:11:aa:b6:f7:54:0f:74:30:10:
e2:ea:3d:3d:c7:6a:c7:fc:ad:3a:29:b4:7a:21:b3:
a1:56:a4:c4:60:ec:06:7c:f1:e9:2c:3e:fc:b5:b9:
b8:a3:b6:a0:84:47:9b:06:92:06:bc:de:c1:68:71:
1f:b2:84:3e:45:fe:50:81:db:2e:d3:60:79:d2:28:
3e:4f:85:7d:e6:84:26:ac:6a:5e:d8:4b:72:80:bb:
e4:bf:eb:28:8a:ec:ca:21:35:59:ff:61:51:15:5d:
a4:71:f1:08:71:0e:2b:f2:99:54:11:54:fd:26:91:
d9:66:2a:0b:9b:bc:91:ef:43:d4:91:d8:1d:4d:13:
b4:cb:c9:2d:6b:22:5d:f1:54:71:2e:29:2c:e9:3b:
be:c3:f4:3a:e6:95:c3:13:59:c1:60:6e:a1:d5:4d:
1b:4e:c1:e5:4a:12:92:33:69:3d:db:63:33:08:0d:
e8:4c:11:0e:1c:84:bd:24:58:cb:8d:8c:9e:0c:89:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EF:1E:46:E4:78:85:E7:05:D0:34:BD:63:6B:67:BF:82:30:EF:07
X509v3 Authority Key Identifier:
keyid:61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:49:8c:45:bc:b1:cc:2c:fc:24:f3:4a:7d:a4:c7:ce:c7:
fb:dd:f1:7d:4d:90:b0:47:1f:56:f0:f1:58:be:2c:aa:60:fb:
d5:3f:85:ab:82:3a:75:37:a8:ff:41:7d:9f:5e:29:0c:0a:04:
d5:c9:ca:36:74:1e:ec:02:6b:e5:47:e9:0a:13:53:11:eb:5f:
5a:73:05:f0:4a:9e:c6:1d:3e:2f:7f:2a:14:5b:54:cd:4f:a5:
be:9f:e0:c6:d6:74:a8:5d:00:a3:c5:c9:ef:9b:32:de:2d:0c:
fc:77:90:03:08:06:a6:ea:00:ba:de:b8:35:18:7a:94:43:a6:
e8:a2:3b:60:fd:73:02:6b:ba:85:46:2b:f2:6b:be:4a:68:03:
4a:54:c1:ff:b4:56:d2:79:1e:64:a2:72:52:00:80:a2:b9:0e:
fa:12:ae:6f:29:dc:24:9d:20:9d:32:81:e2:01:b8:02:e6:e4:
72:d7:a9:d4:8a:07:19:d0:d1:8a:90:a1:61:cf:46:a1:50:93:
24:64:67:60:d8:71:07:1b:bb:e8:d1:2e:4a:81:95:f0:6a:2d:
ee:d2:02:ed:12:5c:65:f8:11:7d:21:ac:f0:35:86:b7:73:25:
ec:dc:1c:da:83:97:00:51:1c:47:ec:dd:e2:2c:a7:9c:d7:27:
83:e5:14:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGSefKJ1YeR6N98qN/TIdK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxY2NiNTU1YzIwMGUyMDg2MmY2ZmRiODMyNjEzN2NkNGM2
NTE5OGIwHhcNMjYxMDMxMTUwMDI3WhcNMjYxMTAxMTUwMDI3WjAzMTEwLwYDVQQD
EyhlM2VmMWU0NmU0Nzg4NWU3MDVkMDM0YmQ2MzZiNjdiZjgyMzBlZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzka48cfArZzj4s0gM4CF0Owg7Ab
ViL2Uh6pFHGo9TlkzqUz13HcU/JNtzIwJXYNDXifVcoCwpKPHU9PmHPD9RwRqrb3
VA90MBDi6j09x2rH/K06KbR6IbOhVqTEYOwGfPHpLD78tbm4o7aghEebBpIGvN7B
aHEfsoQ+Rf5Qgdsu02B50ig+T4V95oQmrGpe2EtygLvkv+soiuzKITVZ/2FRFV2k
cfEIcQ4r8plUEVT9JpHZZioLm7yR70PUkdgdTRO0y8ktayJd8VRxLiks6Tu+w/Q6
5pXDE1nBYG6h1U0bTsHlShKSM2k922MzCA3oTBEOHIS9JFjLjYyeDIn0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPvHkbkeIXnBdA0vWNrZ7+CMO8HMB8GA1UdIwQY
MBaAFGHMtVXCAOIIYvb9uDJhN81MZRmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWN5MVZjSUE0Z2hpOXYyNE1tRTN6VXhsR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wN2QwZTYtODU3My00YmY2LTg1Yzct
OGY0MWJmYzQxYjhhLzEvWWN5MVZjSUE0Z2hpOXYyNE1tRTN6VXhsR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wN2QwZTYtODU3My00YmY2LTg1YzctOGY0MWJmYzQxYjhh
LzEvWWN5MVZjSUE0Z2hpOXYyNE1tRTN6VXhsR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJBJjEW8
scws/CTzSn2kx87H+93xfU2QsEcfVvDxWL4sqmD71T+Fq4I6dTeo/0F9n14pDAoE
1cnKNnQe7AJr5UfpChNTEetfWnMF8Eqexh0+L38qFFtUzU+lvp/gxtZ0qF0Ao8XJ
75sy3i0M/HeQAwgGpuoAut64NRh6lEOm6KI7YP1zAmu6hUYr8mu+SmgDSlTB/7RW
0nkeZKJyUgCAorkO+hKubyncJJ0gnTKB4gG4Aubkctep1IoHGdDRipChYc9GoVCT
JGRnYNhxBxu76NEuSoGV8Got7tIC7RJcZfgRfSGs8DWGt3Ml7Nwc2oOXAFEcR+zd
4iynnNcng+UUkw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:54 2026 by rpki-client