Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: F/+4i2pZX3nbgaVeL9iMb4UJM0io+Gtk3BMPAvNhfeg=
Subject key identifier: F9:9C:C2:DC:C0:EA:D8:96:44:87:E1:88:BA:C3:97:7B:CC:9B:C1:32
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 01A04016EBEA37F0F11EDA3EAEF030764E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 22:00:39 +0000
Manifest this update: Wed 26 Aug 2026 22:00:39 +0000
Manifest next update: Thu 27 Aug 2026 22:00:39 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: ZYaAG8shaPrNMw9K7FPEA+QnLEDrcb2F3LIPZ+3m0oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:16:eb:ea:37:f0:f1:1e:da:3e:ae:f0:30:76:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Aug 26 22:00:39 2026 GMT
Not After : Aug 27 22:00:39 2026 GMT
Subject: CN=f99cc2dcc0ead8964487e188bac3977bcc9bc132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:01:c3:58:17:fa:87:2a:8f:c6:fc:b3:61:
51:4b:31:f1:96:ad:04:8b:7b:c7:9a:60:6b:6d:7b:
10:c9:19:72:8e:1c:60:41:0c:36:90:8b:4d:51:01:
48:54:2e:89:e7:a9:f8:70:af:8c:63:d0:00:36:5c:
69:41:a4:9b:24:34:91:78:69:02:4b:e4:0e:93:30:
89:00:12:08:c5:21:bf:56:70:c5:fa:68:e9:83:9a:
44:7a:29:2d:68:90:61:f5:e1:1d:33:c9:ce:35:8b:
0e:d1:8c:74:ba:e2:6b:07:bc:28:5b:b2:42:6a:67:
11:a8:11:ff:c6:85:39:5a:b0:d1:18:b6:d1:ec:98:
d4:9c:2b:d4:5a:c4:e4:57:c9:49:04:85:4d:35:06:
66:6a:ec:a7:5e:00:38:a4:77:85:2b:8b:41:24:18:
54:64:4a:ce:3f:89:5c:c2:ac:c8:9b:6e:de:af:60:
d5:59:ff:ad:a7:22:51:2c:48:dc:59:8a:e1:36:75:
64:fb:e4:63:ea:e9:02:42:3c:ab:e8:cc:8c:c5:32:
c2:47:dc:9f:0c:f1:86:bf:ec:ca:5f:8f:d4:37:ca:
81:1a:02:67:86:c8:97:55:69:d9:47:02:0a:b8:ae:
72:e1:1c:ca:4f:ac:8e:e1:e8:29:63:ba:93:19:e6:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:C2:DC:C0:EA:D8:96:44:87:E1:88:BA:C3:97:7B:CC:9B:C1:32
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:17:16:5b:8c:fd:f3:69:5e:a4:62:d6:39:f8:09:a7:79:e1:
65:8f:9e:8d:ce:c5:97:0e:60:c0:06:7b:28:79:6b:0d:4d:ef:
82:ba:fa:76:76:87:18:34:50:b2:6d:a8:ec:62:a3:1a:9d:ca:
58:a5:23:de:be:89:99:1d:60:9d:38:b5:c9:06:09:9a:48:0d:
47:14:59:9b:98:04:eb:01:79:8c:3a:4a:59:14:7b:ad:3d:77:
12:5e:01:f8:af:d9:8c:2b:c4:5b:23:a3:41:60:23:7f:41:56:
64:ee:b8:e9:ce:c4:c5:72:1a:25:f6:c1:c0:e7:1d:14:7d:6f:
67:b6:09:6d:00:ec:fe:9c:4d:23:b0:58:05:dc:04:e4:71:93:
07:d5:f2:c1:11:f9:26:cf:f2:6e:40:f5:5e:ce:d8:e3:a6:2a:
a2:e2:58:f4:33:ce:c0:a4:ba:60:d0:7e:79:e1:9d:23:90:20:
d8:c3:c9:ad:64:10:da:c0:34:cd:68:65:32:bd:f9:c3:78:2b:
15:10:bc:ce:f8:e2:c1:9b:7b:28:1e:e1:f0:62:01:65:64:1c:
df:78:c9:44:d0:43:23:63:6e:81:8a:58:01:01:af:a6:18:3a:
7f:e2:e6:1b:76:07:2c:82:2e:24:32:b6:39:fb:97:a5:ac:a0:
5e:4a:87:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAFuvqN/DxHto+rvAwdk4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy
ZWQ3N2MwHhcNMjYwODI2MjIwMDM5WhcNMjYwODI3MjIwMDM5WjAzMTEwLwYDVQQD
EyhmOTljYzJkY2MwZWFkODk2NDQ4N2UxODhiYWMzOTc3YmNjOWJjMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjUBw1gX+ocqj8b8s2FRSzHxlq0E
i3vHmmBrbXsQyRlyjhxgQQw2kItNUQFIVC6J56n4cK+MY9AANlxpQaSbJDSReGkC
S+QOkzCJABIIxSG/VnDF+mjpg5pEeiktaJBh9eEdM8nONYsO0Yx0uuJrB7woW7JC
amcRqBH/xoU5WrDRGLbR7JjUnCvUWsTkV8lJBIVNNQZmauynXgA4pHeFK4tBJBhU
ZErOP4lcwqzIm27er2DVWf+tpyJRLEjcWYrhNnVk++Rj6ukCQjyr6MyMxTLCR9yf
DPGGv+zKX4/UN8qBGgJnhsiXVWnZRwIKuK5y4RzKT6yO4egpY7qTGeY3cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmcwtzA6tiWRIfhiLrDl3vMm8EyMB8GA1UdIwQY
MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt
YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw
LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxcWW4z9
82lepGLWOfgJp3nhZY+ejc7Flw5gwAZ7KHlrDU3vgrr6dnaHGDRQsm2o7GKjGp3K
WKUj3r6JmR1gnTi1yQYJmkgNRxRZm5gE6wF5jDpKWRR7rT13El4B+K/ZjCvEWyOj
QWAjf0FWZO646c7ExXIaJfbBwOcdFH1vZ7YJbQDs/pxNI7BYBdwE5HGTB9XywRH5
Js/ybkD1Xs7Y46YqouJY9DPOwKS6YNB+eeGdI5Ag2MPJrWQQ2sA0zWhlMr35w3gr
FRC8zvjiwZt7KB7h8GIBZWQc33jJRNBDI2NugYpYAQGvphg6f+LmG3YHLIIuJDK2
OfuXpaygXkqHzA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:53 2026 by rpki-client