Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft (raw, json)
Hash identifier: 5oXMJ7BcLbn0+vE4Yvh0xTHCswAwYmiFDagFg/cPBdo=
Subject key identifier: CE:C5:CC:DD:A9:2F:FC:2C:9E:D0:B2:55:EE:F1:45:4C:4C:4D:40:0B
Authority key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Certificate issuer: /CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Certificate serial: 01A12D69FC79844D142B962ABD6C99EFC450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
Manifest number: 0160
Signing time: Mon 12 Oct 2026 00:01:22 +0000
Manifest this update: Mon 12 Oct 2026 00:01:22 +0000
Manifest next update: Tue 13 Oct 2026 00:01:22 +0000
Files and hashes: 1: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl (hash: WMUV67myeGQ1tPsaWokgI7CBj+iEqE9a8SDUaKdtP8k=)
2: r4vw3CV_1lGW-7JvXgWzIRjbm3U.roa (hash: 0TvJ5qpmjC4SexSyQHzjCW5fHWTpVt06kKMKKnnsoV0=)
3: w-zL9cm1eAuLHEkbGACu_Uty4Ws.roa (hash: 4C8sJjkhX9FkHPcP/da4C31h5T/IA24CkXSEegBHM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:fc:79:84:4d:14:2b:96:2a:bd:6c:99:ef:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Validity
Not Before: Oct 12 00:01:22 2026 GMT
Not After : Oct 13 00:01:22 2026 GMT
Subject: CN=cec5ccdda92ffc2c9ed0b255eef1454c4c4d400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:b6:60:51:af:eb:0e:1e:b7:a2:74:6a:09:
d8:f7:ac:38:00:ab:5e:d1:a3:2f:9a:ce:61:6a:db:
62:32:35:a8:22:45:5c:20:23:6b:59:4d:16:f9:91:
60:dd:11:f9:d2:18:d2:1b:7e:5d:11:ae:74:77:f1:
d4:1f:af:27:35:8e:68:f5:18:77:19:e9:61:90:47:
3b:13:c5:5a:9f:23:a5:90:2f:58:e6:59:02:c4:31:
6a:e7:cc:7c:fb:3d:85:84:7f:65:77:1e:6a:e1:63:
f5:4e:df:4f:79:55:c7:37:2c:48:ab:00:2f:33:e4:
85:56:54:ee:9d:4f:18:72:d2:4e:ab:e7:d3:39:e4:
a4:2b:82:1d:df:b9:8c:c3:e3:43:ca:89:23:d8:dd:
56:89:3e:1d:28:a8:6f:c7:9c:39:40:00:0b:54:57:
6c:ef:83:f8:20:fd:c4:9d:ba:ce:96:47:03:54:6d:
8a:64:59:bd:d1:4f:be:80:59:ea:7b:0f:9d:16:2e:
06:92:bb:6f:a2:c3:05:d6:c7:b9:2d:15:d2:bb:cd:
38:2d:54:ee:b0:13:89:e4:e9:3a:04:eb:b8:e0:ca:
18:c9:fb:2a:c3:9a:fa:cd:26:6a:d4:c4:6e:24:96:
92:37:52:73:59:34:da:b0:d0:33:75:fa:3e:27:02:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:CC:DD:A9:2F:FC:2C:9E:D0:B2:55:EE:F1:45:4C:4C:4D:40:0B
X509v3 Authority Key Identifier:
keyid:61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:79:01:7a:24:38:13:a7:1c:59:35:aa:43:b0:3e:25:b0:fd:
f2:8c:80:10:2d:fe:cd:fb:b6:f0:d7:17:06:db:cd:8d:10:ed:
34:91:66:e9:1a:a3:7a:0f:0d:87:20:5d:e0:16:2e:26:a0:d4:
db:70:e5:7b:22:66:a0:41:95:1e:ab:de:94:18:34:9c:a8:44:
e6:31:72:55:3f:0d:22:ef:28:cf:a0:cf:e3:f2:0d:3d:f6:52:
eb:76:70:3a:fc:27:3c:02:4e:a7:02:72:ee:ee:bb:4b:6f:47:
a8:b7:0c:65:15:f2:c3:53:54:5b:0b:b1:10:50:69:92:a4:32:
a8:80:ae:da:81:6a:dc:a5:60:c3:a6:0a:3e:55:ce:86:ea:dc:
a7:8a:78:fa:be:57:83:02:75:a9:4b:6b:8e:bf:d8:fc:6b:dc:
b6:a9:d6:c6:da:5c:da:65:e2:1b:a5:2c:e9:cd:f5:c6:b2:26:
cc:17:4b:5b:6e:8e:8c:73:7d:b5:41:1f:81:99:4f:98:a2:ab:
b7:15:bd:9f:93:d8:76:ad:6b:8f:55:fc:59:c6:e0:7f:c4:f9:
c6:b8:ca:37:0c:e2:2b:6f:05:ef:3d:bf:2a:b8:67:12:a5:ed:
c4:72:bf:c5:3b:c8:d2:d4:2b:1c:11:e5:b9:40:e8:d5:9e:b2:
73:7a:94:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtafx5hE0UK5YqvWyZ78RQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZjVmYjgzZGE0NTU4NDZlYTY0MWFhNzIxMTFjNWZjMmM3
YzQ2ODMwHhcNMjYxMDEyMDAwMTIyWhcNMjYxMDEzMDAwMTIyWjAzMTEwLwYDVQQD
EyhjZWM1Y2NkZGE5MmZmYzJjOWVkMGIyNTVlZWYxNDU0YzRjNGQ0MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ru2YFGv6w4et6J0agnY96w4AKte
0aMvms5hattiMjWoIkVcICNrWU0W+ZFg3RH50hjSG35dEa50d/HUH68nNY5o9Rh3
GelhkEc7E8VanyOlkC9Y5lkCxDFq58x8+z2FhH9ldx5q4WP1Tt9PeVXHNyxIqwAv
M+SFVlTunU8YctJOq+fTOeSkK4Id37mMw+NDyokj2N1WiT4dKKhvx5w5QAALVFds
74P4IP3EnbrOlkcDVG2KZFm90U++gFnqew+dFi4GkrtvosMF1se5LRXSu804LVTu
sBOJ5Ok6BOu44MoYyfsqw5r6zSZq1MRuJJaSN1JzWTTasNAzdfo+JwKMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7FzN2pL/wsntCyVe7xRUxMTUALMB8GA1UdIwQY
MBaAFGH1+4PaRVhG6mQapyERxfwsfEaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84ZTU4ZGItMzk4OS00N2U3LWJlMDQt
N2FhNmFkZTFhZjA3LzEvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84ZTU4ZGItMzk4OS00N2U3LWJlMDQtN2FhNmFkZTFhZjA3
LzEvWWZYN2c5cEZXRWJxWkJxbklSSEZfQ3g4Um9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHkBeiQ4
E6ccWTWqQ7A+JbD98oyAEC3+zfu28NcXBtvNjRDtNJFm6Rqjeg8NhyBd4BYuJqDU
23DleyJmoEGVHqvelBg0nKhE5jFyVT8NIu8oz6DP4/INPfZS63ZwOvwnPAJOpwJy
7u67S29HqLcMZRXyw1NUWwuxEFBpkqQyqICu2oFq3KVgw6YKPlXOhurcp4p4+r5X
gwJ1qUtrjr/Y/GvctqnWxtpc2mXiG6Us6c31xrImzBdLW26OjHN9tUEfgZlPmKKr
txW9n5PYdq1rj1X8Wcbgf8T5xrjKNwziK28F7z2/KrhnEqXtxHK/xTvI0tQrHBHl
uUDo1Z6yc3qUaA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:28:57 2026 by rpki-client