Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: HNo9WOxwKvZeK4j7gpnM0Jm5Dv0Sacnkh4ltT4Zof9E=
Subject key identifier: 72:DC:8A:EA:44:F9:D0:B8:7D:47:4C:C6:E9:90:13:CB:5F:06:EE:59
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 01A1833E4FCA1CEAC5984D8BE67AA1B70977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 17B0
Signing time: Wed 28 Oct 2026 16:01:01 +0000
Manifest this update: Wed 28 Oct 2026 16:01:01 +0000
Manifest next update: Thu 29 Oct 2026 16:01:01 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: u0YTdSaFOlBy4BkDpZv59PTnBh47hNfdil2XFEWB9bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:4f:ca:1c:ea:c5:98:4d:8b:e6:7a:a1:b7:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Oct 28 16:01:01 2026 GMT
Not After : Oct 29 16:01:01 2026 GMT
Subject: CN=72dc8aea44f9d0b87d474cc6e99013cb5f06ee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:08:e5:b0:b8:83:a0:06:7b:28:a3:24:53:
0a:2d:f0:24:05:6d:b1:14:ee:05:0d:67:60:fb:dd:
c0:86:ec:53:dc:5c:29:df:a6:34:19:ee:5b:92:df:
cf:1b:d4:f7:9f:0f:4a:4c:e4:55:e5:c3:a8:b8:8b:
48:fa:e4:05:d8:7d:59:5f:00:8d:c8:dd:f3:78:f4:
f3:bc:8f:2c:a2:e1:db:b3:6a:c2:1c:a5:f0:4a:3e:
de:39:8a:f6:a3:a8:ec:aa:22:cf:e3:b3:62:ae:e1:
69:2b:62:52:9c:2e:da:68:f1:fe:aa:42:72:1c:69:
8e:e6:b1:cf:8e:29:18:3c:83:99:a3:c7:a2:55:3c:
92:a0:e3:3f:f7:b8:4a:67:6d:41:5a:b7:b1:21:94:
c1:f7:d5:f3:2d:20:a9:ff:64:cf:85:60:06:01:ae:
7d:81:e6:37:87:8b:ba:c2:84:36:4d:d3:66:c9:23:
62:bb:67:c8:05:0f:5e:63:fe:e2:3c:48:b5:c2:cf:
92:32:cf:85:45:f2:27:0a:de:03:6f:de:67:12:81:
c7:ac:57:a7:47:6b:71:ce:dd:55:c4:8b:18:d1:37:
bc:f7:0a:b8:da:a1:5b:6b:48:29:ec:4d:25:2b:78:
2a:fc:3e:fe:a7:2a:f3:ce:e3:bd:45:ca:35:32:f2:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:8A:EA:44:F9:D0:B8:7D:47:4C:C6:E9:90:13:CB:5F:06:EE:59
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:fa:9c:85:64:3a:04:9c:e8:87:e1:93:a5:a4:bd:c3:c5:
0e:87:b5:d2:41:21:e4:f0:c7:c9:6c:59:d5:c7:50:71:88:b9:
18:f7:36:bf:f4:53:a2:47:3e:20:fb:c5:a9:ba:f2:19:eb:b8:
2e:35:77:f0:6d:fb:1a:94:f5:50:9e:61:16:9a:c9:e4:81:e5:
96:b6:04:45:62:16:f4:1e:07:9e:66:cd:2e:4d:39:4d:6e:38:
9f:61:6e:d1:95:9b:08:8d:50:78:6d:10:db:e3:eb:88:bb:32:
a6:c3:05:53:7d:cf:6c:3f:c6:be:8f:ca:ef:62:0b:1d:61:c1:
f2:f5:4c:6d:54:94:9c:e2:d8:6e:86:86:db:4b:70:48:ad:44:
81:62:fc:9a:4c:76:f0:e2:05:97:30:f3:43:bd:9b:8e:79:ff:
dc:a9:c7:77:fe:ea:d6:91:cf:2c:b5:66:3e:00:82:a2:44:04:
6c:18:b2:ed:1f:c0:88:53:22:4c:50:23:67:1b:83:b6:e8:b1:
18:bc:cf:3c:2c:f6:fb:c5:9c:6b:af:49:ac:d7:bd:9c:24:28:
61:65:f8:28:bb:83:fa:d3:a5:5d:f4:24:a6:6a:e2:df:50:ea:
32:b5:d4:c6:90:c9:79:18:2d:6e:32:19:6d:bc:76:d9:d0:ef:
a4:53:35:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPk/KHOrFmE2L5nqhtwl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk
NTE5ZGEwHhcNMjYxMDI4MTYwMTAxWhcNMjYxMDI5MTYwMTAxWjAzMTEwLwYDVQQD
Eyg3MmRjOGFlYTQ0ZjlkMGI4N2Q0NzRjYzZlOTkwMTNjYjVmMDZlZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJEI5bC4g6AGeyijJFMKLfAkBW2x
FO4FDWdg+93AhuxT3Fwp36Y0Ge5bkt/PG9T3nw9KTORV5cOouItI+uQF2H1ZXwCN
yN3zePTzvI8souHbs2rCHKXwSj7eOYr2o6jsqiLP47NiruFpK2JSnC7aaPH+qkJy
HGmO5rHPjikYPIOZo8eiVTySoOM/97hKZ21BWrexIZTB99XzLSCp/2TPhWAGAa59
geY3h4u6woQ2TdNmySNiu2fIBQ9eY/7iPEi1ws+SMs+FRfInCt4Db95nEoHHrFen
R2txzt1VxIsY0Te89wq42qFba0gp7E0lK3gq/D7+pyrzzuO9Rco1MvL+0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLciupE+dC4fUdMxumQE8tfBu5ZMB8GA1UdIwQY
MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt
Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw
LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeL6nIVk
OgSc6Ifhk6WkvcPFDoe10kEh5PDHyWxZ1cdQcYi5GPc2v/RTokc+IPvFqbryGeu4
LjV38G37GpT1UJ5hFprJ5IHllrYERWIW9B4HnmbNLk05TW44n2Fu0ZWbCI1QeG0Q
2+PriLsypsMFU33PbD/Gvo/K72ILHWHB8vVMbVSUnOLYboaG20twSK1EgWL8mkx2
8OIFlzDzQ72bjnn/3KnHd/7q1pHPLLVmPgCCokQEbBiy7R/AiFMiTFAjZxuDtuix
GLzPPCz2+8Wca69JrNe9nCQoYWX4KLuD+tOlXfQkpmri31DqMrXUxpDJeRgtbjIZ
bbx22dDvpFM1tQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:20 2026 by rpki-client