Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: I1GouFG7SKi49Uenol4vMMotHrV+iK2MrFrjVzVJGjU=
Subject key identifier: 00:FF:4B:27:0A:C4:95:5C:06:42:40:0F:16:15:89:86:F0:3C:AE:BB
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01A185D1A23FFC40E2F78CB57A0F6E6C6DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 12FE
Signing time: Thu 29 Oct 2026 04:01:10 +0000
Manifest this update: Thu 29 Oct 2026 04:01:10 +0000
Manifest next update: Fri 30 Oct 2026 04:01:10 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: jU8GoPKcvjfRNuRCd3FQXYgTe8GXCppYfukuCsV0mwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:a2:3f:fc:40:e2:f7:8c:b5:7a:0f:6e:6c:6d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Oct 29 04:01:10 2026 GMT
Not After : Oct 30 04:01:10 2026 GMT
Subject: CN=00ff4b270ac4955c0642400f16158986f03caebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:89:e5:fe:f0:14:d2:a6:bd:60:b1:7c:13:
ac:37:e6:f5:bc:e7:cb:ea:99:bf:6e:c6:02:1a:f1:
ed:49:1c:20:ab:84:90:3d:53:01:49:d9:c1:e6:4c:
95:33:6d:1a:6c:2f:35:77:3d:32:67:5d:fd:fc:82:
ae:57:f5:2d:c1:4f:bc:37:b1:a5:26:bf:d5:f6:55:
04:6f:b6:a3:35:4d:17:f2:54:23:10:6a:ce:1d:8e:
01:f1:a6:1d:51:0a:85:60:60:37:6f:4d:36:7a:40:
91:14:e5:ad:cc:ff:d7:2c:fe:e9:1b:8e:c5:db:72:
8d:6c:37:d5:98:43:12:2d:5c:b0:bd:ff:cd:d3:2d:
60:77:c5:49:11:4c:0e:4a:52:75:58:07:1e:b8:1a:
07:a7:d8:eb:2b:35:bf:b7:fe:29:dc:fe:fb:f1:2e:
1a:cf:13:ce:40:21:57:49:b7:49:7a:ff:6a:f3:9b:
b0:e9:e7:52:8c:88:05:a7:41:0c:81:bc:b3:59:5d:
0b:54:27:92:19:c3:4e:54:50:b3:d6:74:d0:94:10:
32:8a:4c:d5:6e:06:b9:4b:08:9b:86:02:6b:d0:f8:
63:0a:24:52:cc:f9:33:94:f8:e9:fc:b6:b1:21:9b:
24:df:f4:e1:29:a3:51:15:54:90:58:ab:8b:80:01:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:4B:27:0A:C4:95:5C:06:42:40:0F:16:15:89:86:F0:3C:AE:BB
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:4a:c3:80:5e:2a:68:1c:ec:99:65:e1:dd:40:4e:7a:97:
df:b6:09:34:01:7c:76:7b:0a:99:11:1f:bc:8d:e8:27:bb:0f:
51:51:06:eb:80:1f:dc:c0:67:f7:00:fe:5f:2c:9c:01:91:b6:
43:c4:61:f7:7f:01:03:4e:d4:69:7d:26:5c:67:1f:24:a0:78:
f7:ce:23:cc:b2:9c:06:5d:22:9e:17:0e:6b:a7:e0:73:dc:89:
be:20:6f:d8:43:37:98:f5:d5:dc:3b:c0:5a:4b:32:ec:fc:15:
ec:c1:5e:4a:51:c0:b1:30:59:26:d7:f2:ef:e5:3c:e9:c6:93:
91:0f:43:8d:ed:3b:28:a5:60:ef:f2:7f:d6:3e:1b:6e:8e:52:
46:ba:e4:68:7a:51:33:78:dd:ca:a6:fe:d7:38:fb:b2:a7:80:
c8:4e:55:37:1b:70:b9:70:af:ea:f4:13:03:32:b8:40:bd:bf:
e3:d2:1e:46:bb:6b:e9:e3:df:30:80:00:4e:0b:48:2a:86:be:
93:78:37:3f:fe:37:5a:77:03:12:ee:5c:b7:ae:86:44:27:4b:
07:b1:da:9a:ed:9f:c4:32:b3:fd:0c:85:a4:cb:47:da:2b:7e:
a7:3c:1c:54:68:27:50:d2:30:2c:bc:72:d3:0d:17:37:9f:ed:
97:f7:bd:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGF0aI//EDi94y1eg9ubG2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjYxMDI5MDQwMTEwWhcNMjYxMDMwMDQwMTEwWjAzMTEwLwYDVQQD
EygwMGZmNGIyNzBhYzQ5NTVjMDY0MjQwMGYxNjE1ODk4NmYwM2NhZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufeJ5f7wFNKmvWCxfBOsN+b1vOfL
6pm/bsYCGvHtSRwgq4SQPVMBSdnB5kyVM20abC81dz0yZ139/IKuV/UtwU+8N7Gl
Jr/V9lUEb7ajNU0X8lQjEGrOHY4B8aYdUQqFYGA3b002ekCRFOWtzP/XLP7pG47F
23KNbDfVmEMSLVywvf/N0y1gd8VJEUwOSlJ1WAceuBoHp9jrKzW/t/4p3P778S4a
zxPOQCFXSbdJev9q85uw6edSjIgFp0EMgbyzWV0LVCeSGcNOVFCz1nTQlBAyikzV
bga5SwibhgJr0PhjCiRSzPkzlPjp/LaxIZsk3/ThKaNRFVSQWKuLgAGnRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD/SycKxJVcBkJADxYViYbwPK67MB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsZKw4Be
Kmgc7Jll4d1ATnqX37YJNAF8dnsKmREfvI3oJ7sPUVEG64Af3MBn9wD+XyycAZG2
Q8Rh938BA07UaX0mXGcfJKB4984jzLKcBl0inhcOa6fgc9yJviBv2EM3mPXV3DvA
Wksy7PwV7MFeSlHAsTBZJtfy7+U86caTkQ9Dje07KKVg7/J/1j4bbo5SRrrkaHpR
M3jdyqb+1zj7sqeAyE5VNxtwuXCv6vQTAzK4QL2/49IeRrtr6ePfMIAATgtIKoa+
k3g3P/43WncDEu5ct66GRCdLB7Hamu2fxDKz/QyFpMtH2it+pzwcVGgnUNIwLLxy
0w0XN5/tl/e9PA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:33 2026 by rpki-client