Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: lowntDwZUNTwp9UjMCufB2XZVPFy5XD5+Yxi/BxxjoQ=
Subject key identifier: 60:44:3C:08:BF:17:BC:3B:A1:B1:FD:DF:81:DD:77:10:1D:E7:A4:30
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 01A159D419BFD47F6D7CA97D6B1804A0DFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: 04AB
Signing time: Tue 20 Oct 2026 15:00:34 +0000
Manifest this update: Tue 20 Oct 2026 15:00:34 +0000
Manifest next update: Wed 21 Oct 2026 15:00:34 +0000
Files and hashes: 1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=)
2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: 8z1p570g+5stvz3wp+g3dOL+fQ6HvRQZv3ns5lxwKfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:19:bf:d4:7f:6d:7c:a9:7d:6b:18:04:a0:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Oct 20 15:00:34 2026 GMT
Not After : Oct 21 15:00:34 2026 GMT
Subject: CN=60443c08bf17bc3ba1b1fddf81dd77101de7a430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:98:6e:5a:c6:e8:a9:ac:9a:97:3f:d2:c4:
d8:1f:61:e9:65:73:6f:78:20:1c:2f:ce:48:b8:a1:
56:e2:3a:11:e5:08:a1:c0:a5:99:20:ef:34:1d:00:
3f:c4:b6:5b:86:52:40:b1:b6:e3:0c:f6:02:f6:c9:
2e:ee:28:ab:d2:92:1d:74:a8:c1:50:f7:82:1d:f0:
c6:1f:6d:73:4e:0f:7c:a6:54:8e:d1:8a:db:ba:f4:
7d:87:5c:53:b5:72:73:24:5a:d0:e2:47:00:7a:57:
a1:58:77:b0:3a:2a:7e:24:b3:82:16:33:fb:5b:53:
9a:68:d8:5b:c9:b4:c8:81:e9:96:6f:47:a5:e8:0e:
ad:e7:74:8b:6a:31:8a:41:70:3d:20:aa:4f:e6:84:
a0:50:f1:98:d6:bb:d4:5d:63:d6:ce:75:79:d2:cc:
47:39:ae:d0:c1:56:75:21:2d:45:f3:d6:d5:f4:2c:
d6:b5:b1:88:d3:06:04:8d:f7:d2:30:48:87:17:01:
b1:45:81:17:e9:fa:ae:fd:ed:ff:b3:1e:93:c0:6e:
ca:c3:00:88:e1:5d:dd:da:4d:77:d9:f9:40:cb:db:
31:04:1f:62:ea:e3:cd:81:31:06:32:34:c8:5d:4d:
24:87:52:c2:63:43:6d:7c:d6:13:f1:4b:d5:9b:ab:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:44:3C:08:BF:17:BC:3B:A1:B1:FD:DF:81:DD:77:10:1D:E7:A4:30
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:97:0f:3d:36:08:cb:9d:47:9b:ed:a2:01:21:0a:fd:4c:25:
6a:5e:b3:1c:8b:76:97:15:33:da:21:2b:65:2a:dd:47:89:61:
1e:20:b2:0e:a6:bc:ff:ce:69:db:2a:1f:8a:21:a5:e4:15:07:
0a:f5:40:bc:48:a6:f3:12:46:a8:94:b4:10:91:c1:75:7f:07:
71:72:2b:58:6a:28:32:53:27:80:3c:e4:2c:f1:29:1b:f6:f4:
4d:78:8b:c1:cb:85:3c:5e:35:e5:ab:c8:45:28:09:88:bb:11:
3a:53:ba:ff:b7:4c:fe:7b:e4:2f:a3:27:75:a2:30:82:3d:e2:
41:18:ef:07:a3:b2:00:d2:f1:70:ca:7a:8b:e6:1d:8d:56:5d:
4c:3f:67:cf:8b:16:d4:e2:8f:48:9b:75:22:b6:c6:c2:c9:18:
2e:ca:63:5a:2f:08:f6:da:5d:29:bd:b1:4f:b9:f9:6b:4d:c3:
11:c6:03:b1:43:34:0a:89:b4:cb:5e:bd:97:b5:71:2f:90:0a:
1e:f9:2a:77:d9:1b:f1:fc:3c:da:c5:63:12:77:f3:2a:d2:b3:
b7:a2:e8:98:51:aa:55:e0:65:c9:cb:f1:00:ab:19:c2:f8:c0:
fb:d6:c9:a5:67:09:3f:f2:2f:ff:88:18:9a:ee:a3:92:37:a2:
95:99:33:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFZ1Bm/1H9tfKl9axgEoN+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1
Zjc2MzUwHhcNMjYxMDIwMTUwMDM0WhcNMjYxMDIxMTUwMDM0WjAzMTEwLwYDVQQD
Eyg2MDQ0M2MwOGJmMTdiYzNiYTFiMWZkZGY4MWRkNzcxMDFkZTdhNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0eYblrG6Kmsmpc/0sTYH2HpZXNv
eCAcL85IuKFW4joR5QihwKWZIO80HQA/xLZbhlJAsbbjDPYC9sku7iir0pIddKjB
UPeCHfDGH21zTg98plSO0YrbuvR9h1xTtXJzJFrQ4kcAelehWHewOip+JLOCFjP7
W1OaaNhbybTIgemWb0el6A6t53SLajGKQXA9IKpP5oSgUPGY1rvUXWPWznV50sxH
Oa7QwVZ1IS1F89bV9CzWtbGI0wYEjffSMEiHFwGxRYEX6fqu/e3/sx6TwG7KwwCI
4V3d2k132flAy9sxBB9i6uPNgTEGMjTIXU0kh1LCY0NtfNYT8UvVm6vosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBEPAi/F7w7obH934HddxAd56QwMB8GA1UdIwQY
MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt
ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx
LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpcPPTYI
y51Hm+2iASEK/Uwlal6zHIt2lxUz2iErZSrdR4lhHiCyDqa8/85p2yofiiGl5BUH
CvVAvEim8xJGqJS0EJHBdX8HcXIrWGooMlMngDzkLPEpG/b0TXiLwcuFPF415avI
RSgJiLsROlO6/7dM/nvkL6MndaIwgj3iQRjvB6OyANLxcMp6i+YdjVZdTD9nz4sW
1OKPSJt1IrbGwskYLspjWi8I9tpdKb2xT7n5a03DEcYDsUM0Com0y169l7VxL5AK
Hvkqd9kb8fw82sVjEnfzKtKzt6LomFGqVeBlycvxAKsZwvjA+9bJpWcJP/Iv/4gY
mu6jkjeilZkz7g==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:58 2026 by rpki-client