Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: ITKcJ939qB0vtY9nA7ZSYlYTJJSSVSV22TjL8S+Fw2o=
Subject key identifier: 02:72:60:C5:4E:07:CF:03:45:9A:07:5F:42:46:D2:63:DA:68:2E:73
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 01A1803D270EA8FD861E99B9C17A033993ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0F15
Signing time: Wed 28 Oct 2026 02:00:53 +0000
Manifest this update: Wed 28 Oct 2026 02:00:53 +0000
Manifest next update: Thu 29 Oct 2026 02:00:53 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: VUICAE2jN25W+q9X9I1TYj7iifsWQGEQfAeyfkRghlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:27:0e:a8:fd:86:1e:99:b9:c1:7a:03:39:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Oct 28 02:00:53 2026 GMT
Not After : Oct 29 02:00:53 2026 GMT
Subject: CN=027260c54e07cf03459a075f4246d263da682e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:c7:7f:38:82:ed:33:8b:19:b3:52:d3:01:
4a:ec:23:a9:04:74:6b:99:4b:8d:f4:31:dd:70:99:
64:e9:cf:d1:32:d2:54:4e:4e:f7:1a:c2:dc:9e:c2:
a9:0e:c0:18:84:7e:47:ea:cf:b7:33:76:6c:a5:ce:
e9:f9:62:b4:f5:62:ea:89:97:31:6f:d7:8d:b1:e7:
87:5a:b3:42:7f:90:77:63:2b:53:8f:81:4a:9e:3d:
c7:00:52:77:10:33:71:d0:92:50:c0:11:4a:03:25:
b6:b9:0e:d0:ef:72:e3:f1:95:9d:3f:d8:97:b6:80:
5c:d0:7d:0f:3a:1e:11:3f:a3:d7:88:36:df:44:fd:
aa:b7:02:6e:ce:49:c4:dc:e4:6d:7b:68:d9:fb:9f:
95:40:5a:33:67:59:ee:a5:5e:14:7a:09:5f:cb:cf:
1b:e4:96:75:1a:31:31:3c:a1:84:76:ed:94:23:3e:
2c:a2:47:56:ba:5d:87:2e:18:31:db:be:3a:f5:ae:
07:bb:3f:e1:7e:df:50:8d:9e:d1:2d:e1:f7:f8:55:
91:a0:27:d0:61:0e:df:67:54:8a:a6:ba:d5:70:31:
9f:b2:97:01:30:17:89:79:b3:f5:be:be:4b:bf:f3:
a2:9d:ea:b1:c6:a8:6f:14:01:88:6a:80:ec:a1:0b:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:60:C5:4E:07:CF:03:45:9A:07:5F:42:46:D2:63:DA:68:2E:73
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b3:ea:af:c0:34:9e:e0:88:de:9b:28:b7:10:52:87:27:45:
e7:cb:b2:6a:e6:47:e8:10:62:c1:2b:15:59:17:d5:18:ec:92:
72:49:42:50:e8:14:8c:8e:a6:d2:07:79:b6:bb:64:7e:b1:4e:
b7:7b:93:98:9a:f6:22:36:06:b0:f1:91:d2:99:32:d3:b1:be:
53:a9:d7:5b:bd:3c:9c:4c:83:14:ed:8f:6a:ba:34:c3:dd:a6:
c2:c3:2a:05:56:1e:8b:e8:47:48:4e:55:c8:30:03:ff:f0:4d:
c5:fd:12:0f:8e:50:70:8a:47:90:5a:90:0e:11:01:c1:c6:69:
50:b4:24:63:51:d2:e0:d3:10:ac:fa:7d:39:fc:e6:5d:84:51:
50:50:f1:c7:73:d7:d4:3c:78:32:cb:67:4f:39:73:f9:72:31:
5e:55:fd:a0:f4:4c:75:53:52:bf:34:33:b1:e6:d0:18:71:e1:
0e:74:7c:c3:d7:83:f6:b8:3c:7c:b3:5e:bf:5e:17:d5:35:ec:
6e:44:3b:0d:9b:25:14:56:48:5a:fb:1d:4f:f5:f5:67:e0:8a:
00:0b:24:58:b0:fb:61:8a:4f:1f:7b:51:49:36:64:48:05:35:
36:fb:49:3a:3b:45:0d:cf:8c:7c:17:07:8a:17:3a:4a:69:7c:
f3:74:49:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPScOqP2GHpm5wXoDOZPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy
MWRkNzgwHhcNMjYxMDI4MDIwMDUzWhcNMjYxMDI5MDIwMDUzWjAzMTEwLwYDVQQD
EygwMjcyNjBjNTRlMDdjZjAzNDU5YTA3NWY0MjQ2ZDI2M2RhNjgyZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AfHfziC7TOLGbNS0wFK7COpBHRr
mUuN9DHdcJlk6c/RMtJUTk73GsLcnsKpDsAYhH5H6s+3M3Zspc7p+WK09WLqiZcx
b9eNseeHWrNCf5B3YytTj4FKnj3HAFJ3EDNx0JJQwBFKAyW2uQ7Q73Lj8ZWdP9iX
toBc0H0POh4RP6PXiDbfRP2qtwJuzknE3ORte2jZ+5+VQFozZ1nupV4Ueglfy88b
5JZ1GjExPKGEdu2UIz4sokdWul2HLhgx27469a4Huz/hft9QjZ7RLeH3+FWRoCfQ
YQ7fZ1SKprrVcDGfspcBMBeJebP1vr5Lv/OineqxxqhvFAGIaoDsoQvD9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJyYMVOB88DRZoHX0JG0mPaaC5zMB8GA1UdIwQY
MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut
ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2
LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7Pqr8A0
nuCI3psotxBShydF58uyauZH6BBiwSsVWRfVGOyScklCUOgUjI6m0gd5trtkfrFO
t3uTmJr2IjYGsPGR0pky07G+U6nXW708nEyDFO2Paro0w92mwsMqBVYei+hHSE5V
yDAD//BNxf0SD45QcIpHkFqQDhEBwcZpULQkY1HS4NMQrPp9OfzmXYRRUFDxx3PX
1Dx4MstnTzlz+XIxXlX9oPRMdVNSvzQzsebQGHHhDnR8w9eD9rg8fLNev14X1TXs
bkQ7DZslFFZIWvsdT/X1Z+CKAAskWLD7YYpPH3tRSTZkSAU1NvtJOjtFDc+MfBcH
ihc6Sml883RJYg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:26 2026 by rpki-client