Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: H7uvfZlsgZS6oWRA/gygoDaPYv0iMK/QVFXtTy2k6vw=
Subject key identifier: 99:3C:F9:D4:6C:22:14:7E:6C:37:AF:CE:9F:72:64:D8:20:AB:91:98
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 01A1765EA18C3E5B3CC6E62AE5028559651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0A15
Signing time: Mon 26 Oct 2026 04:01:15 +0000
Manifest this update: Mon 26 Oct 2026 04:01:15 +0000
Manifest next update: Tue 27 Oct 2026 04:01:15 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: 9MwW2hmhm7Il+PONI6/U1TDo+i5qBH/HmvXr8Tbtt2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:a1:8c:3e:5b:3c:c6:e6:2a:e5:02:85:59:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Oct 26 04:01:15 2026 GMT
Not After : Oct 27 04:01:15 2026 GMT
Subject: CN=993cf9d46c22147e6c37afce9f7264d820ab9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:94:2b:f0:3e:cc:71:4a:a2:65:3b:01:61:
44:54:96:23:27:c0:a7:18:48:49:b6:ae:41:eb:be:
7d:63:0f:ca:2d:d4:61:a8:ee:de:52:4e:c7:f8:12:
ac:fd:a8:7d:40:fb:88:ce:90:0a:d7:8a:0a:b3:0d:
3c:be:c7:9f:75:70:81:f4:64:c6:62:85:3e:48:34:
13:e4:7f:52:52:52:21:02:93:d9:ed:03:64:17:b7:
c0:c2:eb:eb:a0:7c:e8:ab:76:8d:a6:02:02:a7:fd:
62:fb:e4:c4:94:0e:8c:49:8a:2b:ff:26:5d:2b:b4:
8a:8f:86:f0:eb:c1:17:43:64:b2:b7:08:91:18:18:
99:0a:4f:2a:cc:fb:0c:c0:b1:24:26:7f:77:2a:b9:
49:60:c7:b3:3c:c1:b1:0d:38:ef:2a:72:02:a1:30:
08:70:88:1c:6f:ff:46:d7:a0:ef:2e:bc:ca:2c:61:
64:0e:af:69:b0:7f:9b:50:cf:00:94:26:32:0f:e5:
3c:2d:bf:ca:5f:7d:cf:42:6d:f0:d9:a2:43:d9:86:
79:34:cd:7a:52:56:49:cb:b3:33:95:ac:94:d0:47:
c5:f8:e5:1d:74:0a:d7:1c:e7:f6:09:9c:22:d8:1e:
4f:4a:ea:46:52:d1:7d:12:84:e4:33:0e:9c:41:63:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:F9:D4:6C:22:14:7E:6C:37:AF:CE:9F:72:64:D8:20:AB:91:98
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:a5:1c:97:4e:a9:9a:34:05:88:d5:f7:7a:de:7e:64:ed:
9e:7a:2b:70:33:5b:c7:07:53:86:82:85:a7:1a:9d:1f:c6:34:
8c:4f:93:32:76:2c:98:22:47:c9:37:6d:7c:47:15:d2:dc:85:
a7:7a:f9:a2:86:50:85:61:37:45:8c:b0:f7:9d:e0:f0:22:55:
69:5e:08:da:85:85:51:d0:9d:26:65:af:80:1f:fe:60:7c:e8:
72:cf:73:67:51:a3:c4:d3:39:03:99:c9:c0:d4:58:43:cb:9f:
25:59:4e:28:f4:5a:e5:1f:c4:f9:d4:9f:3a:03:ba:43:24:f2:
7c:98:71:e9:05:3a:be:42:af:d1:22:35:7d:98:7e:be:e9:5d:
14:2c:0a:fc:a6:37:8e:23:73:6c:52:4d:76:fe:4b:1b:49:67:
95:15:c8:0a:3b:23:0d:c6:12:bd:29:e3:4e:a4:e3:2c:74:d8:
bb:d8:60:6b:39:0e:1e:dd:6d:2a:8f:0d:76:20:3e:5d:21:d7:
1b:28:74:fc:6d:1d:8e:20:0e:12:8e:fc:07:f8:15:57:81:03:
5a:eb:34:02:cf:c3:0a:79:d3:8a:82:90:ad:59:16:43:96:9f:
85:74:61:91:63:f0:90:bd:21:4e:af:b4:9e:c0:45:81:52:79:
ea:9e:c3:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2XqGMPls8xuYq5QKFWWUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4
ZGQ5ZGQwHhcNMjYxMDI2MDQwMTE1WhcNMjYxMDI3MDQwMTE1WjAzMTEwLwYDVQQD
Eyg5OTNjZjlkNDZjMjIxNDdlNmMzN2FmY2U5ZjcyNjRkODIwYWI5MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiGUK/A+zHFKomU7AWFEVJYjJ8Cn
GEhJtq5B6759Yw/KLdRhqO7eUk7H+BKs/ah9QPuIzpAK14oKsw08vsefdXCB9GTG
YoU+SDQT5H9SUlIhApPZ7QNkF7fAwuvroHzoq3aNpgICp/1i++TElA6MSYor/yZd
K7SKj4bw68EXQ2SytwiRGBiZCk8qzPsMwLEkJn93KrlJYMezPMGxDTjvKnICoTAI
cIgcb/9G16DvLrzKLGFkDq9psH+bUM8AlCYyD+U8Lb/KX33PQm3w2aJD2YZ5NM16
UlZJy7MzlayU0EfF+OUddArXHOf2CZwi2B5PSupGUtF9EoTkMw6cQWNfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk8+dRsIhR+bDevzp9yZNggq5GYMB8GA1UdIwQY
MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt
M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5
LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwilHJdO
qZo0BYjV93refmTtnnorcDNbxwdThoKFpxqdH8Y0jE+TMnYsmCJHyTdtfEcV0tyF
p3r5ooZQhWE3RYyw953g8CJVaV4I2oWFUdCdJmWvgB/+YHzocs9zZ1GjxNM5A5nJ
wNRYQ8ufJVlOKPRa5R/E+dSfOgO6QyTyfJhx6QU6vkKv0SI1fZh+vuldFCwK/KY3
jiNzbFJNdv5LG0lnlRXICjsjDcYSvSnjTqTjLHTYu9hgazkOHt1tKo8NdiA+XSHX
Gyh0/G0djiAOEo78B/gVV4EDWus0As/DCnnTioKQrVkWQ5afhXRhkWPwkL0hTq+0
nsBFgVJ56p7Dnw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:47 2026 by rpki-client