Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: GAm8XH89xjg7tdhtynXdfn2nDmCbkkmhecvOxqdyLUc=
Subject key identifier: 6C:FF:0D:44:03:AE:E5:85:44:9D:45:D9:C2:B8:71:F0:00:16:7C:D7
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 01A08CB1C37EF5648A57C2011F1BBEDBAF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 1082
Signing time: Thu 10 Sep 2026 19:00:55 +0000
Manifest this update: Thu 10 Sep 2026 19:00:55 +0000
Manifest next update: Fri 11 Sep 2026 19:00:55 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: HhqjBeleBa1KmRzeVyI2MzMiQtCD1qUm+3Q5bfj955s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:c3:7e:f5:64:8a:57:c2:01:1f:1b:be:db:af:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Sep 10 19:00:55 2026 GMT
Not After : Sep 11 19:00:55 2026 GMT
Subject: CN=6cff0d4403aee585449d45d9c2b871f000167cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:fc:43:67:3e:72:c6:5c:87:63:5d:76:44:
bf:d2:a4:46:df:5d:e5:69:72:f5:46:d7:12:f2:7f:
d0:e6:4a:af:63:e8:c5:54:3c:61:7b:be:66:4e:87:
16:fd:50:c9:b9:bd:68:d1:d8:22:0e:69:de:b7:12:
b4:86:de:b0:d7:79:18:63:4a:4d:b7:d4:17:7d:0a:
8f:2b:78:76:09:0e:40:3b:a1:a9:ef:b4:ab:e2:c2:
01:ab:5d:fd:89:e6:be:85:90:f5:b2:ed:87:a7:83:
a6:76:0b:89:89:55:7d:5e:0a:e9:98:f7:ae:27:e9:
83:4f:1c:42:43:49:8f:c5:84:14:d6:53:eb:46:e1:
fb:51:d9:eb:96:82:97:2e:8c:6d:41:13:90:a0:10:
92:c7:5d:75:aa:b2:89:3e:f3:4c:ae:de:86:32:aa:
28:63:fa:30:75:0b:20:19:df:e4:aa:d1:b4:f2:9f:
bb:b6:e5:f2:20:e7:a3:40:e8:b2:28:b8:bd:db:46:
84:f3:f0:a9:e6:56:05:5f:05:ad:31:6b:b6:8a:d4:
aa:69:4e:47:8d:0d:a3:39:8d:58:6c:02:ce:ee:9c:
95:33:11:8d:ca:71:6c:2b:1f:55:4a:74:c9:a0:49:
be:dd:15:f0:46:3a:b5:8c:5a:39:2a:48:0f:5b:44:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:0D:44:03:AE:E5:85:44:9D:45:D9:C2:B8:71:F0:00:16:7C:D7
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:42:94:3b:4b:52:37:e1:da:84:cc:33:f0:0c:39:5e:49:
6e:a6:8d:04:0e:07:a6:ef:1a:fd:21:90:83:89:bc:ec:4f:bc:
21:06:18:be:dd:08:07:fa:d1:14:c5:56:d6:74:e5:b5:39:d6:
e6:9e:f0:aa:36:fc:f5:0c:0c:62:f4:b4:90:5c:0c:f7:de:c9:
6b:d3:85:2c:fb:2c:af:4e:ce:73:02:12:5a:e5:9c:c8:90:81:
71:3a:02:85:ed:07:41:08:73:c8:96:2c:9b:ab:47:36:3f:47:
8e:af:44:3f:43:6a:34:2f:b7:85:e9:91:57:b8:e9:9a:28:50:
3b:a3:d9:5c:c1:5f:72:51:a7:02:f4:7d:90:5a:bd:56:54:f8:
2b:03:7a:9a:67:f1:ae:bb:b2:6f:6d:35:bd:07:95:1a:b4:35:
cc:5e:a9:5e:8a:29:d1:32:b8:dc:2a:52:b8:7b:16:eb:68:df:
fc:ed:5d:16:1d:80:13:0d:89:b1:3d:f4:c9:a2:dd:b2:4b:b0:
d5:b9:ce:72:d4:d3:ae:1d:5f:ff:b4:bc:29:ba:f9:ec:6f:e4:
3b:85:4c:6c:ae:4c:f8:ac:e4:4c:28:df:fd:aa:36:13:63:2e:
24:98:ac:46:c8:3f:01:e8:73:b6:e3:81:19:44:00:f5:d9:92:
d5:f0:d0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMscN+9WSKV8IBHxu+26+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0
NGY4ZmMwHhcNMjYwOTEwMTkwMDU1WhcNMjYwOTExMTkwMDU1WjAzMTEwLwYDVQQD
Eyg2Y2ZmMGQ0NDAzYWVlNTg1NDQ5ZDQ1ZDljMmI4NzFmMDAwMTY3Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRL8Q2c+csZch2NddkS/0qRG313l
aXL1RtcS8n/Q5kqvY+jFVDxhe75mTocW/VDJub1o0dgiDmnetxK0ht6w13kYY0pN
t9QXfQqPK3h2CQ5AO6Gp77Sr4sIBq139iea+hZD1su2Hp4OmdguJiVV9XgrpmPeu
J+mDTxxCQ0mPxYQU1lPrRuH7UdnrloKXLoxtQROQoBCSx111qrKJPvNMrt6GMqoo
Y/owdQsgGd/kqtG08p+7tuXyIOejQOiyKLi920aE8/Cp5lYFXwWtMWu2itSqaU5H
jQ2jOY1YbALO7pyVMxGNynFsKx9VSnTJoEm+3RXwRjq1jFo5KkgPW0Ts0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz/DUQDruWFRJ1F2cK4cfAAFnzXMB8GA1UdIwQY
MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt
MzY5MjYzNDQzMDI1LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1
LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEahClDtL
Ujfh2oTMM/AMOV5JbqaNBA4Hpu8a/SGQg4m87E+8IQYYvt0IB/rRFMVW1nTltTnW
5p7wqjb89QwMYvS0kFwM997Ja9OFLPssr07OcwISWuWcyJCBcToChe0HQQhzyJYs
m6tHNj9Hjq9EP0NqNC+3hemRV7jpmihQO6PZXMFfclGnAvR9kFq9VlT4KwN6mmfx
rruyb201vQeVGrQ1zF6pXoop0TK43CpSuHsW62jf/O1dFh2AEw2JsT30yaLdskuw
1bnOctTTrh1f/7S8Kbr57G/kO4VMbK5M+KzkTCjf/ao2E2MuJJisRsg/AehztuOB
GUQA9dmS1fDQiw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:53 2026 by rpki-client