Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier: mDm1ervWhryGMO07Ynk+TpMeNwiEp9U3nLRwq+4Jfws=
Subject key identifier: 37:97:C9:EB:BD:D4:3D:7F:81:49:FF:51:9E:1F:61:49:81:8D:2F:4B
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial: 01A1AA8317B525DE191F640E945D98C81C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number: 0397
Signing time: Thu 05 Nov 2026 07:01:20 +0000
Manifest this update: Thu 05 Nov 2026 07:01:20 +0000
Manifest next update: Fri 06 Nov 2026 07:01:20 +0000
Files and hashes: 1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: lewHL0Omw4kwUOUVu3Ivrf9fVivgwzd1UJ8hFkU9yeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:17:b5:25:de:19:1f:64:0e:94:5d:98:c8:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
Validity
Not Before: Nov 5 07:01:20 2026 GMT
Not After : Nov 6 07:01:20 2026 GMT
Subject: CN=3797c9ebbdd43d7f8149ff519e1f6149818d2f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:26:ac:67:ab:b3:ff:d5:68:a1:32:b6:59:
59:fe:cb:ae:dd:46:15:93:bf:c0:ab:c7:f1:49:19:
d3:01:95:2f:19:f3:9e:61:eb:0e:76:05:d3:72:8e:
27:2c:bc:c8:3c:d6:d8:b6:f6:63:64:17:5d:f8:fc:
1f:c6:7f:00:95:bd:73:2b:84:40:6c:f4:83:41:35:
8a:bb:f5:25:d9:d0:00:b4:f0:43:27:aa:3b:f0:ff:
1f:c1:bf:be:39:a5:4a:12:f7:63:f2:90:93:01:ad:
03:cc:7a:a8:ce:8d:3d:d0:e1:7e:bf:63:ee:cd:1b:
f4:94:b6:1a:11:6e:74:8d:11:db:a0:f4:dd:7a:4b:
e9:57:f7:bb:a3:99:c4:bf:d6:2f:14:89:6f:c9:f4:
b6:4e:b3:b1:24:46:5f:87:0a:50:70:6f:2b:c1:21:
90:13:f8:d3:58:7b:51:20:38:84:4a:7a:ce:33:e2:
ca:e5:45:c3:dd:f4:ba:a5:e3:b2:71:02:f6:ab:20:
4b:b8:db:96:bc:4e:20:7e:a8:dc:11:87:81:32:8b:
af:d6:e2:fb:6d:54:2c:ae:68:a9:ad:af:57:7a:49:
21:fa:a9:62:b1:f9:ba:15:5e:00:49:9c:64:38:f5:
26:2c:c0:6d:ae:42:45:9f:45:2e:29:59:ca:cc:57:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:C9:EB:BD:D4:3D:7F:81:49:FF:51:9E:1F:61:49:81:8D:2F:4B
X509v3 Authority Key Identifier:
keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:43:f4:ea:fe:82:62:a3:60:9e:c8:17:34:23:3d:24:de:
10:35:b0:31:7a:a0:94:5a:45:26:13:6d:a6:4f:e7:b2:60:ac:
bd:1b:e3:a8:7e:65:d1:9f:e9:9d:f9:33:bc:54:96:24:db:23:
94:1a:2d:de:5d:8b:70:90:53:d3:38:27:63:a7:b3:c6:8a:06:
76:38:1e:0a:1b:e8:78:72:27:32:e3:e4:60:79:a7:ef:30:09:
20:83:87:5f:fe:1a:7e:c0:2e:e7:66:2b:c1:51:09:a3:24:a9:
3c:4d:40:a5:e1:53:a2:11:f5:b3:d0:0a:3f:26:58:4b:b9:40:
c7:df:6c:c5:26:85:9f:e5:ae:4a:5c:b2:c1:ef:c0:c7:e7:d8:
c8:f3:68:08:7e:00:6d:46:85:a7:50:da:d1:08:b0:ae:5c:dd:
1d:6a:d6:a3:e4:a7:43:2e:48:3c:fc:70:c8:22:c8:c4:60:ac:
2e:28:a3:ce:ed:5e:41:da:fa:60:db:50:bf:24:17:8f:5c:6b:
39:bb:f5:bf:e6:0e:19:b3:9a:05:1a:56:47:95:2b:4f:6b:af:
34:0a:c4:59:7f:50:0b:7b:67:39:d0:b5:06:81:1e:5f:74:9b:
40:b6:98:e3:ca:cb:a5:32:64:7e:e7:b4:1d:e3:a4:0c:aa:7d:
24:4f:47:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqgxe1Jd4ZH2QOlF2YyByfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh
MzIyYTkwHhcNMjYxMTA1MDcwMTIwWhcNMjYxMTA2MDcwMTIwWjAzMTEwLwYDVQQD
EygzNzk3YzllYmJkZDQzZDdmODE0OWZmNTE5ZTFmNjE0OTgxOGQyZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp4mrGers//VaKEytllZ/suu3UYV
k7/Aq8fxSRnTAZUvGfOeYesOdgXTco4nLLzIPNbYtvZjZBdd+Pwfxn8Alb1zK4RA
bPSDQTWKu/Ul2dAAtPBDJ6o78P8fwb++OaVKEvdj8pCTAa0DzHqozo090OF+v2Pu
zRv0lLYaEW50jRHboPTdekvpV/e7o5nEv9YvFIlvyfS2TrOxJEZfhwpQcG8rwSGQ
E/jTWHtRIDiESnrOM+LK5UXD3fS6peOycQL2qyBLuNuWvE4gfqjcEYeBMouv1uL7
bVQsrmipra9Xekkh+qlisfm6FV4ASZxkOPUmLMBtrkJFn0UuKVnKzFcS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeXyeu91D1/gUn/UZ4fYUmBjS9LMB8GA1UdIwQY
MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt
MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw
LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazxD9Or+
gmKjYJ7IFzQjPSTeEDWwMXqglFpFJhNtpk/nsmCsvRvjqH5l0Z/pnfkzvFSWJNsj
lBot3l2LcJBT0zgnY6ezxooGdjgeChvoeHInMuPkYHmn7zAJIIOHX/4afsAu52Yr
wVEJoySpPE1ApeFTohH1s9AKPyZYS7lAx99sxSaFn+WuSlyywe/Ax+fYyPNoCH4A
bUaFp1Da0QiwrlzdHWrWo+SnQy5IPPxwyCLIxGCsLiijzu1eQdr6YNtQvyQXj1xr
Obv1v+YOGbOaBRpWR5UrT2uvNArEWX9QC3tnOdC1BoEeX3SbQLaY48rLpTJkfue0
HeOkDKp9JE9Hbg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:54:18 2026 by rpki-client