Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: 6Zs0R1QZkjH2lk5FisepY80SW/8qXzfWAHdOw+/B+KY=
Subject key identifier: A4:44:B0:AD:DE:3B:45:60:7D:12:14:DF:24:D2:CA:B1:E4:7E:40:C2
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 01A08CE8B53F7DFCFF2331470357809B5ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0487
Signing time: Thu 10 Sep 2026 20:00:56 +0000
Manifest this update: Thu 10 Sep 2026 20:00:56 +0000
Manifest next update: Fri 11 Sep 2026 20:00:56 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: sGwrzbBf6XfuzN0wR8RBVchB+QakIlkHWZ4zDMRthvE=)
2: YO6OstzVnVo9QhzrIx9loswdAJg.roa (hash: +INj2IveiQZp/sokzKmgLlYwMzOhLR6s+/Ir+302j9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:b5:3f:7d:fc:ff:23:31:47:03:57:80:9b:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Sep 10 20:00:56 2026 GMT
Not After : Sep 11 20:00:56 2026 GMT
Subject: CN=a444b0adde3b45607d1214df24d2cab1e47e40c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:98:0f:c9:d8:24:3f:2f:9e:bb:08:1e:00:
28:95:cf:37:5d:30:87:ae:55:b5:7b:7c:9b:44:9b:
5f:ab:e0:ec:89:aa:ec:18:ae:1c:14:8e:f9:7f:37:
39:8e:83:db:57:9e:44:fe:be:df:6e:b1:39:7a:0c:
3b:f3:5c:8c:3b:c2:1f:06:78:d0:e3:92:aa:b0:25:
97:3e:3b:0d:59:2e:08:45:ff:8f:84:51:59:f4:67:
13:08:0d:9c:de:ef:78:59:85:86:56:01:8a:43:c9:
9f:dd:a8:e5:75:a0:48:03:29:79:20:13:04:60:35:
24:19:4b:72:25:cc:fd:14:d2:9d:d7:2b:b9:b5:0d:
f2:ce:53:d1:6f:9a:93:e9:49:34:ec:76:91:df:8f:
aa:dd:3b:2d:7e:1a:64:3a:51:83:e8:1b:8c:54:c6:
3b:41:6b:23:84:ef:81:6a:eb:54:c3:e7:6e:1d:3e:
7e:93:5e:75:10:14:a8:36:33:f7:2f:10:9e:9c:84:
f0:2f:21:a7:78:dd:ac:09:7b:a0:9b:e3:02:24:ad:
14:9d:bf:71:27:38:50:e3:a0:fd:66:cd:fd:a8:7d:
a1:57:a7:ab:d4:95:a1:0f:83:a1:fd:c1:34:10:92:
6e:df:01:01:23:73:e6:79:3d:b4:4d:52:cd:0b:1d:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:B0:AD:DE:3B:45:60:7D:12:14:DF:24:D2:CA:B1:E4:7E:40:C2
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cd:bd:fa:17:92:71:de:ad:78:6b:bc:8e:b4:1a:98:d3:b0:
ef:fd:a3:c3:43:a1:7d:0f:cd:37:b5:0e:46:5f:38:16:cc:a4:
13:df:d7:75:52:5f:99:12:f1:e8:c0:3a:12:d8:84:2e:e5:12:
33:fa:09:d1:03:67:50:bd:76:30:1b:b8:d7:b9:59:2b:75:8d:
62:d7:62:9d:4b:5c:58:cf:c0:04:39:7c:88:61:eb:46:64:eb:
ed:da:d3:ae:04:43:3d:d0:12:45:32:a8:31:d4:29:34:b9:b1:
b1:53:f6:ae:d4:d0:a2:60:6d:91:82:12:f2:49:d0:42:6b:f4:
95:c8:f9:40:58:e0:b3:ba:a9:3c:9e:71:2f:ab:79:0d:7b:bf:
31:39:19:6f:00:46:33:77:9f:98:e3:ab:7c:83:2a:a3:81:6a:
76:f9:3a:06:7b:d8:3e:81:7b:7d:58:2e:a2:d3:77:c2:ef:09:
af:c7:59:3f:8b:87:b5:f7:46:18:b0:33:d8:88:88:14:f1:62:
31:57:53:db:70:f9:6a:6d:72:b6:74:75:e5:c8:de:46:c5:70:
b1:55:9f:b7:ab:ca:be:91:f3:c6:a1:6a:28:57:55:b0:ec:09:
00:55:c8:09:b8:76:8b:4f:60:d2:24:02:9b:48:ff:dd:6a:82:
4a:9f:65:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6LU/ffz/IzFHA1eAm1q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3
NTgyNGIwHhcNMjYwOTEwMjAwMDU2WhcNMjYwOTExMjAwMDU2WjAzMTEwLwYDVQQD
EyhhNDQ0YjBhZGRlM2I0NTYwN2QxMjE0ZGYyNGQyY2FiMWU0N2U0MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNeYD8nYJD8vnrsIHgAolc83XTCH
rlW1e3ybRJtfq+DsiarsGK4cFI75fzc5joPbV55E/r7fbrE5egw781yMO8IfBnjQ
45KqsCWXPjsNWS4IRf+PhFFZ9GcTCA2c3u94WYWGVgGKQ8mf3ajldaBIAyl5IBME
YDUkGUtyJcz9FNKd1yu5tQ3yzlPRb5qT6Uk07HaR34+q3TstfhpkOlGD6BuMVMY7
QWsjhO+BautUw+duHT5+k151EBSoNjP3LxCenITwLyGneN2sCXugm+MCJK0Unb9x
JzhQ46D9Zs39qH2hV6er1JWhD4Oh/cE0EJJu3wEBI3PmeT20TVLNCx1xJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKREsK3eO0VgfRIU3yTSyrHkfkDCMB8GA1UdIwQY
MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It
NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw
LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm829+heS
cd6teGu8jrQamNOw7/2jw0OhfQ/NN7UORl84FsykE9/XdVJfmRLx6MA6EtiELuUS
M/oJ0QNnUL12MBu417lZK3WNYtdinUtcWM/ABDl8iGHrRmTr7drTrgRDPdASRTKo
MdQpNLmxsVP2rtTQomBtkYIS8knQQmv0lcj5QFjgs7qpPJ5xL6t5DXu/MTkZbwBG
M3efmOOrfIMqo4Fqdvk6BnvYPoF7fVguotN3wu8Jr8dZP4uHtfdGGLAz2IiIFPFi
MVdT23D5am1ytnR15cjeRsVwsVWft6vKvpHzxqFqKFdVsOwJAFXICbh2i09g0iQC
m0j/3WqCSp9lsA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:44 2026 by rpki-client