Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: lTXOMUltO2nuGtWoLHA51Cx1ua1l5QFLOeDL3lse5nM=
Subject key identifier: 7F:18:EC:79:CB:C9:2A:1C:EA:F3:0B:BD:CC:06:0B:04:A5:DE:97:04
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 01A1DE70460845A487769C9580FE7B13E2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:02 +0000
Manifest this update: Sun 15 Nov 2026 09:01:02 +0000
Manifest next update: Mon 16 Nov 2026 09:01:02 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: rXXw2EsVHRq3pvVLTilr6LZutNvQVOh//XRMQTT4HXo=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:46:08:45:a4:87:76:9c:95:80:fe:7b:13:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Nov 15 09:01:02 2026 GMT
Not After : Nov 16 09:01:02 2026 GMT
Subject: CN=7f18ec79cbc92a1ceaf30bbdcc060b04a5de9704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:65:be:01:07:97:d3:bd:0f:b5:6a:99:7f:
81:d9:67:16:0b:9a:cd:ad:55:67:f5:4e:95:9e:64:
dd:ec:d1:4f:44:59:7e:6a:9b:bf:07:b1:a1:d5:7f:
5d:0c:17:70:37:63:85:5c:49:06:0c:34:a0:2a:34:
9e:84:84:ba:82:0b:e1:bf:08:2d:94:03:d6:00:47:
13:fb:4b:ab:e4:16:0f:9c:a1:df:a3:51:e2:ed:af:
d7:b6:e5:41:67:dc:35:89:1f:cc:03:71:d8:3a:0f:
1b:ce:ae:54:bf:50:8f:99:d4:d5:f0:f2:16:06:c5:
aa:a7:4f:6b:42:0c:e1:76:8c:c9:92:d4:9f:a4:53:
25:9a:54:fa:4c:04:02:4e:14:f9:ce:26:ea:4c:83:
25:a7:2c:fa:84:46:c7:d9:c0:94:57:eb:e7:d9:1e:
7d:35:7e:d6:1a:f6:ee:84:9e:da:70:df:be:80:87:
8f:21:23:1c:5f:2e:01:a9:81:70:ca:af:70:20:89:
f7:5a:3b:2b:a2:16:01:a5:2d:3b:38:f5:5c:a6:8c:
7f:fd:66:ef:e6:83:b1:3a:d1:92:73:57:c1:3a:ad:
ea:56:a4:be:92:33:ab:2b:b6:d2:de:aa:a3:58:76:
83:cf:77:c6:ab:ba:18:ee:04:c2:bc:6d:fd:3d:93:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:EC:79:CB:C9:2A:1C:EA:F3:0B:BD:CC:06:0B:04:A5:DE:97:04
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:3f:02:fe:9a:a5:67:90:2a:61:1c:01:29:50:59:2c:da:
12:9d:7c:74:9e:89:78:fa:8a:c9:36:21:68:08:6c:9c:31:03:
18:7e:9e:b2:52:5b:88:84:5b:7a:55:81:eb:f1:42:a2:40:6e:
f1:39:c8:f7:c3:20:b2:64:c5:50:84:08:21:03:c7:1f:57:aa:
db:56:2f:88:16:47:e8:98:56:cb:75:65:3a:66:04:28:ca:55:
32:ea:7f:fa:53:25:cd:b3:c4:0e:42:3f:e5:c8:68:75:14:ac:
58:0a:3c:ac:0b:97:40:d2:b5:1b:94:e8:0f:a1:16:83:62:8d:
14:17:70:80:95:52:d5:d0:84:02:98:5c:ae:b8:64:aa:95:1f:
bc:d0:de:b5:e2:ba:ff:4c:a8:55:a9:b5:15:1c:d6:ab:5a:13:
b7:35:01:7a:e7:7c:3a:ce:57:90:14:c0:6f:68:03:dd:3f:d6:
20:e0:87:6e:ad:ad:01:2f:52:80:2c:19:dd:f1:82:72:b7:49:
99:1c:f0:f2:c1:fb:d0:c2:41:9b:d5:a0:de:c1:1c:53:e1:c3:
76:68:da:83:9b:1c:4f:24:4c:bf:65:0b:0f:47:cc:2e:e2:d1:
8c:bd:4f:d9:66:8f:04:42:63:ae:5d:20:4f:53:c6:e2:50:41:
96:58:2b:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecEYIRaSHdpyVgP57E+L/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODhhNWVlNzcwNDg4OTIwOWRlNTg5YjBlNjU3OTYxZWQ1
OTBjMDEwHhcNMjYxMTE1MDkwMTAyWhcNMjYxMTE2MDkwMTAyWjAzMTEwLwYDVQQD
Eyg3ZjE4ZWM3OWNiYzkyYTFjZWFmMzBiYmRjYzA2MGIwNGE1ZGU5NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR1lvgEHl9O9D7VqmX+B2WcWC5rN
rVVn9U6VnmTd7NFPRFl+apu/B7Gh1X9dDBdwN2OFXEkGDDSgKjSehIS6ggvhvwgt
lAPWAEcT+0ur5BYPnKHfo1Hi7a/XtuVBZ9w1iR/MA3HYOg8bzq5Uv1CPmdTV8PIW
BsWqp09rQgzhdozJktSfpFMlmlT6TAQCThT5zibqTIMlpyz6hEbH2cCUV+vn2R59
NX7WGvbuhJ7acN++gIePISMcXy4BqYFwyq9wIIn3WjsrohYBpS07OPVcpox//Wbv
5oOxOtGSc1fBOq3qVqS+kjOrK7bS3qqjWHaDz3fGq7oY7gTCvG39PZMFoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8Y7HnLySoc6vMLvcwGCwSl3pcEMB8GA1UdIwQY
MBaAFMuIpe53BIiSCd5Ymw5leWHtWQwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt
OTllZTRhODk4NWMzLzEveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz
LzEveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiU/Av6a
pWeQKmEcASlQWSzaEp18dJ6JePqKyTYhaAhsnDEDGH6eslJbiIRbelWB6/FCokBu
8TnI98MgsmTFUIQIIQPHH1eq21YviBZH6JhWy3VlOmYEKMpVMup/+lMlzbPEDkI/
5chodRSsWAo8rAuXQNK1G5ToD6EWg2KNFBdwgJVS1dCEAphcrrhkqpUfvNDeteK6
/0yoVam1FRzWq1oTtzUBeud8Os5XkBTAb2gD3T/WIOCHbq2tAS9SgCwZ3fGCcrdJ
mRzw8sH70MJBm9Wg3sEcU+HDdmjag5scTyRMv2ULD0fMLuLRjL1P2WaPBEJjrl0g
T1PG4lBBllgr+g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:53:44 2026 by rpki-client