Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: /lHm/JphyWss7be33EV6K+PBeYLa6I9Aq/CjxcXvdTk=
Subject key identifier: EB:25:B6:1C:CC:89:D6:A8:A5:DF:90:AD:1D:A2:F1:7C:56:10:3E:E8
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 01A17C978164555442B661C6F0168C65E6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1562
Signing time: Tue 27 Oct 2026 09:01:06 +0000
Manifest this update: Tue 27 Oct 2026 09:01:06 +0000
Manifest next update: Wed 28 Oct 2026 09:01:06 +0000
Files and hashes: 1: SInBdKPTOXk0wp91e_uLGwkZlPc.roa (hash: mCWjzW4jA5/GkCROqCsHaTMu9Y+gjKYJmIB2cmxywcA=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: PGc4E3sBIiv6jTPZqrnbQAiBm53Mc8+0MkMMRLRqicY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:81:64:55:54:42:b6:61:c6:f0:16:8c:65:e6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Oct 27 09:01:06 2026 GMT
Not After : Oct 28 09:01:06 2026 GMT
Subject: CN=eb25b61ccc89d6a8a5df90ad1da2f17c56103ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:78:72:80:bc:09:c7:65:57:8d:84:3f:fe:
25:42:de:c9:0c:a2:7a:b6:7c:49:71:95:74:3f:c0:
c4:b1:f4:fc:60:19:84:33:8a:77:fa:9a:20:47:3c:
59:27:13:75:6b:e4:92:82:c8:47:8d:3e:29:4d:37:
83:37:c2:7d:18:3a:86:42:be:9d:c8:38:96:55:d3:
db:bb:bc:6f:05:9a:52:e6:15:f6:71:c2:ac:da:18:
2a:39:f0:6c:a5:4f:d7:7f:1a:3f:3f:f9:89:af:94:
e4:13:41:b7:f0:2d:65:f4:0a:11:90:52:5a:1b:93:
42:83:ef:e9:75:e2:06:cc:cf:57:d6:17:b7:8d:cd:
0b:aa:3e:4f:e3:5e:c7:a6:f3:87:76:5e:ca:14:30:
82:0c:a7:5d:fa:13:58:7e:11:db:a8:65:a7:9f:4e:
e5:6d:34:0e:e1:1f:33:69:1e:66:4e:92:fc:f7:5e:
00:4e:91:dd:63:51:f9:ab:fe:29:a0:85:42:6d:3f:
54:86:c3:7c:1b:91:11:aa:a0:31:30:9b:8d:6c:bc:
c5:e7:4a:80:67:8a:57:85:29:8d:6a:3f:60:ea:f6:
8f:14:13:59:75:b7:ef:6e:e7:48:9e:7f:95:fc:46:
05:b4:32:a0:d4:7e:fa:5f:37:0c:df:1a:c4:1b:d4:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:B6:1C:CC:89:D6:A8:A5:DF:90:AD:1D:A2:F1:7C:56:10:3E:E8
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:75:c5:3a:96:44:96:47:b2:a0:9c:50:5c:d6:4b:c3:f5:ba:
a2:93:77:75:4c:cf:45:85:49:60:97:45:9d:a0:c3:55:10:4c:
6f:bc:bb:25:df:76:47:55:ab:b9:d0:8a:13:2e:1f:a7:d1:a2:
d6:13:e5:b0:08:1d:2b:29:f9:9a:3d:b7:ad:f4:42:22:15:b5:
e1:9a:04:3a:48:6f:ea:e5:e4:2e:6a:8d:95:07:5a:e2:90:9a:
3c:96:0a:12:dc:66:ff:14:fd:b1:fb:93:73:51:ba:9b:f1:64:
28:1c:d2:40:a1:4c:9d:84:2d:a1:e1:0b:b8:0b:93:0b:36:04:
1b:2d:71:c5:90:3b:6b:81:53:ea:76:5f:95:eb:64:7d:77:47:
c2:d3:c1:70:c9:3e:3d:a0:93:03:8c:fa:4c:14:e5:1b:f4:ed:
a1:4c:7c:7f:1f:40:f0:76:f4:4e:6a:b9:08:d4:fe:6f:24:af:
d1:e3:0e:cf:80:b9:05:69:7b:30:b3:2a:be:76:99:47:85:df:
39:07:a0:e9:60:26:e2:3c:b4:25:d5:fb:34:3e:6f:0d:da:2d:
14:06:4d:d0:b8:d9:9a:53:79:f4:5e:01:1b:c6:81:43:3b:48:
a6:9d:b3:c0:94:a9:0b:8b:17:2d:7b:06:0e:fe:82:2c:43:78:
ad:32:ab:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l4FkVVRCtmHG8BaMZea9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw
MDQ3ZmMwHhcNMjYxMDI3MDkwMTA2WhcNMjYxMDI4MDkwMTA2WjAzMTEwLwYDVQQD
EyhlYjI1YjYxY2NjODlkNmE4YTVkZjkwYWQxZGEyZjE3YzU2MTAzZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlR4coC8CcdlV42EP/4lQt7JDKJ6
tnxJcZV0P8DEsfT8YBmEM4p3+pogRzxZJxN1a+SSgshHjT4pTTeDN8J9GDqGQr6d
yDiWVdPbu7xvBZpS5hX2ccKs2hgqOfBspU/Xfxo/P/mJr5TkE0G38C1l9AoRkFJa
G5NCg+/pdeIGzM9X1he3jc0Lqj5P417HpvOHdl7KFDCCDKdd+hNYfhHbqGWnn07l
bTQO4R8zaR5mTpL8914ATpHdY1H5q/4poIVCbT9UhsN8G5ERqqAxMJuNbLzF50qA
Z4pXhSmNaj9g6vaPFBNZdbfvbudInn+V/EYFtDKg1H76XzcM3xrEG9R/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOslthzMidaopd+QrR2i8XxWED7oMB8GA1UdIwQY
MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt
YmQzYTYzMGVlNWNjLzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj
LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHXFOpZE
lkeyoJxQXNZLw/W6opN3dUzPRYVJYJdFnaDDVRBMb7y7Jd92R1WrudCKEy4fp9Gi
1hPlsAgdKyn5mj23rfRCIhW14ZoEOkhv6uXkLmqNlQda4pCaPJYKEtxm/xT9sfuT
c1G6m/FkKBzSQKFMnYQtoeELuAuTCzYEGy1xxZA7a4FT6nZfletkfXdHwtPBcMk+
PaCTA4z6TBTlG/TtoUx8fx9A8Hb0Tmq5CNT+bySv0eMOz4C5BWl7MLMqvnaZR4Xf
OQeg6WAm4jy0JdX7ND5vDdotFAZN0LjZmlN59F4BG8aBQztIpp2zwJSpC4sXLXsG
Dv6CLEN4rTKrCw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:28 2026 by rpki-client