Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: VoSSyMKKfIk4j+bD9JgACL9bZkCAT1wlt3piDKCwEEI=
Subject key identifier: B6:19:E5:BC:C3:7C:56:B2:D8:F9:42:0D:49:D5:5B:00:8F:72:2B:D2
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 01A08C7A6B1C9A53DC099D1EF33F866C200E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:28 +0000
Manifest this update: Thu 10 Sep 2026 18:00:28 +0000
Manifest next update: Fri 11 Sep 2026 18:00:28 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: mEiUtxBbTklZlCHR9/BU6bhIW7njcb1ChnUpB8ZhMp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:6b:1c:9a:53:dc:09:9d:1e:f3:3f:86:6c:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Sep 10 18:00:28 2026 GMT
Not After : Sep 11 18:00:28 2026 GMT
Subject: CN=b619e5bcc37c56b2d8f9420d49d55b008f722bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:c3:85:71:e8:a4:be:89:08:67:3d:f2:83:
f4:16:ce:2d:12:43:2e:b5:09:e1:18:e4:46:77:92:
7a:99:bf:da:51:56:4d:9c:f5:af:e4:03:b0:1d:7f:
28:a2:f5:b1:7c:20:e6:ff:7a:49:f2:25:d6:aa:65:
e6:98:92:51:1d:5a:85:71:bd:b4:52:58:19:1c:d4:
33:20:c7:e7:8c:40:98:cd:79:97:3f:d6:23:dc:14:
17:fd:11:72:71:9a:b9:46:cc:38:a1:27:14:23:ea:
28:fe:bb:2c:10:34:f7:e9:ac:e9:10:fc:33:48:9f:
63:15:2c:df:62:32:0b:48:f9:8d:f5:f6:97:11:46:
9a:b2:a1:cc:39:3a:8d:f0:db:5c:c8:6f:e4:d3:b6:
9b:2c:8b:71:7a:5e:2a:03:26:f2:68:f8:bf:57:c3:
b3:12:51:e5:71:86:1b:0e:12:0d:c6:2e:60:e0:39:
12:81:99:9a:da:d2:a8:a1:a7:0a:c0:f7:5e:46:cf:
45:88:ec:28:3a:b0:a2:11:49:95:54:fb:ed:03:5c:
4f:09:15:e5:a4:cb:be:f5:5d:47:aa:d5:82:d8:8c:
15:cd:67:e5:45:eb:4c:8c:de:21:c9:a2:7c:18:1d:
11:c3:ca:ec:5c:18:68:8e:35:73:95:f4:37:ca:c8:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:19:E5:BC:C3:7C:56:B2:D8:F9:42:0D:49:D5:5B:00:8F:72:2B:D2
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:32:93:54:15:f5:12:7d:39:1a:82:9c:62:4c:a6:8a:05:
5b:db:3c:8e:59:ea:1d:05:c3:ed:a8:22:00:4e:97:e0:ba:ac:
c9:93:b1:a9:90:95:35:01:7d:f4:2a:0f:32:70:e4:c9:a6:0b:
73:b8:3b:4e:68:d2:57:82:93:34:e3:55:8b:21:7a:e1:4b:9e:
b1:20:23:e3:0f:a9:60:83:17:cd:80:a5:a2:dc:fa:39:07:c8:
36:0d:3a:66:39:98:89:65:56:dd:d7:54:27:78:86:7c:fd:7d:
e3:b6:17:41:05:b2:16:01:1d:3e:d4:e0:cc:b6:fb:bc:91:0b:
6f:f9:c1:ca:84:47:ff:c9:b9:36:d7:7f:4b:8f:f0:0b:fe:06:
21:76:e4:a1:04:f1:f9:d6:cf:59:6a:35:de:9f:01:74:32:ec:
ac:48:62:6a:e6:59:a1:4c:38:95:90:78:fb:82:a0:98:d2:16:
b6:ec:68:b4:c6:42:f0:1e:ec:5e:0e:80:bb:8f:b9:52:d9:04:
13:ee:5b:f4:d5:21:59:a9:2f:34:be:83:60:14:0a:d0:79:da:
4e:26:de:a5:4e:3a:fa:26:4e:42:9e:49:ad:a3:80:56:d1:75:
5f:8b:5c:d4:c7:29:30:53:cf:f6:e3:66:a2:66:5c:18:46:35:
d7:d0:7f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMemscmlPcCZ0e8z+GbCAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWNhM2MxZGQ4YTU1MmUzNjdhNDlhMDIxOTkwNjk3MjI5
NGE2N2MwHhcNMjYwOTEwMTgwMDI4WhcNMjYwOTExMTgwMDI4WjAzMTEwLwYDVQQD
EyhiNjE5ZTViY2MzN2M1NmIyZDhmOTQyMGQ0OWQ1NWIwMDhmNzIyYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8DDhXHopL6JCGc98oP0Fs4tEkMu
tQnhGORGd5J6mb/aUVZNnPWv5AOwHX8oovWxfCDm/3pJ8iXWqmXmmJJRHVqFcb20
UlgZHNQzIMfnjECYzXmXP9Yj3BQX/RFycZq5Rsw4oScUI+oo/rssEDT36azpEPwz
SJ9jFSzfYjILSPmN9faXEUaasqHMOTqN8NtcyG/k07abLItxel4qAybyaPi/V8Oz
ElHlcYYbDhINxi5g4DkSgZma2tKooacKwPdeRs9FiOwoOrCiEUmVVPvtA1xPCRXl
pMu+9V1HqtWC2IwVzWflRetMjN4hyaJ8GB0Rw8rsXBhojjVzlfQ3ysheKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYZ5bzDfFay2PlCDUnVWwCPcivSMB8GA1UdIwQY
MBaAFMsco8HdilUuNnpJoCGZBpcilKZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt
ZmU0NDc3MmQ1YWUxLzEveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx
LzEveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh0yk1QV
9RJ9ORqCnGJMpooFW9s8jlnqHQXD7agiAE6X4LqsyZOxqZCVNQF99CoPMnDkyaYL
c7g7TmjSV4KTNONViyF64UuesSAj4w+pYIMXzYClotz6OQfINg06ZjmYiWVW3ddU
J3iGfP1947YXQQWyFgEdPtTgzLb7vJELb/nByoRH/8m5Ntd/S4/wC/4GIXbkoQTx
+dbPWWo13p8BdDLsrEhiauZZoUw4lZB4+4KgmNIWtuxotMZC8B7sXg6Au4+5UtkE
E+5b9NUhWakvNL6DYBQK0HnaTibepU46+iZOQp5JraOAVtF1X4tc1McpMFPP9uNm
omZcGEY119B/AA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:10 2026 by rpki-client