Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: M5Maxezk93u+2qfdt/KnL1mRTD+qCqwaeMfZKLLprkk=
Subject key identifier: 91:99:78:01:0D:7E:9D:DB:F7:72:2F:29:33:C3:9B:80:EE:F2:40:A3
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01A12B7B6E829E47D612E66D0F18B1314E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0CAC
Signing time: Sun 11 Oct 2026 15:01:11 +0000
Manifest this update: Sun 11 Oct 2026 15:01:11 +0000
Manifest next update: Mon 12 Oct 2026 15:01:11 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: R/u88UuXXu+0xtMDWzM2IQhKSAwcWbTViTwQ4Pd1SdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:6e:82:9e:47:d6:12:e6:6d:0f:18:b1:31:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Oct 11 15:01:11 2026 GMT
Not After : Oct 12 15:01:11 2026 GMT
Subject: CN=919978010d7e9ddbf7722f2933c39b80eef240a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:ed:23:5a:b8:cf:97:32:f0:a3:94:fe:b3:
a9:50:7e:60:98:f2:9c:89:1a:5e:85:82:04:ec:e4:
6f:bc:0f:36:4e:4c:39:d6:eb:3c:a8:b4:63:3e:e0:
f2:8f:bf:ff:28:db:6a:c5:12:5e:de:b8:30:8f:26:
b9:69:0b:c7:31:87:ef:5f:06:98:21:85:14:4d:f5:
6b:62:1c:aa:78:15:cc:fc:c3:82:18:76:01:bd:bf:
c3:33:4b:9e:72:c5:89:0c:9f:1f:98:6d:a5:17:21:
95:6e:1b:8b:40:df:c9:80:50:83:a0:18:7e:b2:cf:
e7:d5:62:34:38:84:97:35:08:dc:c1:53:bb:2d:16:
9e:b1:31:5c:bf:87:21:ca:64:5c:09:c0:1d:31:c9:
b0:fc:ae:82:08:18:35:92:2c:02:44:64:6f:17:75:
66:ee:d9:54:e2:f5:12:a6:03:2c:3d:d3:c2:cb:b2:
6f:1a:11:a4:6b:67:43:ab:0f:d1:8f:fa:f5:90:ac:
48:ee:61:ae:2c:e2:6d:73:c8:dc:19:59:bb:1d:22:
9d:ea:ac:8c:78:e0:ca:c8:95:af:da:a9:76:39:09:
44:82:b4:fb:fd:fa:b0:a0:f4:e2:69:05:32:93:8e:
52:de:3f:d3:79:ac:59:c8:f8:d3:b4:b4:65:f4:6e:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:99:78:01:0D:7E:9D:DB:F7:72:2F:29:33:C3:9B:80:EE:F2:40:A3
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:0d:c7:94:0c:f3:56:c6:1b:fe:a2:fa:ec:14:46:1d:29:
81:2c:3a:8e:ac:f0:00:61:02:da:36:1d:0a:a5:a5:aa:0e:f6:
63:0a:7b:ba:92:83:80:2b:85:3e:c9:4d:2c:fe:ea:ed:18:6e:
c9:81:cd:46:bd:e2:8d:f5:a1:b3:21:0c:b2:28:7d:aa:cd:b1:
12:fa:92:02:a4:23:0f:97:b8:e5:9f:2e:29:0b:4a:2a:0e:b9:
19:48:a3:4c:9e:34:6a:2e:23:a7:31:d1:58:34:85:14:f0:39:
f0:33:e2:27:d1:de:d2:53:f5:93:26:97:5e:dd:ad:17:e3:8e:
b8:47:2e:07:c9:7d:0a:95:7c:c9:ea:d0:5c:29:07:a4:9f:ef:
35:eb:9b:65:cb:7c:0c:27:36:10:e8:b9:f8:aa:80:77:14:4f:
da:95:74:5e:7b:39:88:78:7a:17:a9:40:16:fe:00:55:83:03:
c2:b3:a1:dc:6c:33:0a:67:9c:ec:1b:27:c7:d8:82:1f:83:b0:
6b:50:b1:fe:2e:27:a4:25:76:37:de:30:e1:1a:c7:e7:4a:22:
41:f8:b1:0b:da:0a:a9:f3:1b:f2:81:1c:69:f3:29:be:a4:52:
10:c8:fc:8d:a3:e3:12:de:be:58:39:2f:fa:63:e3:6c:fe:6b:
9e:60:ea:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEre26CnkfWEuZtDxixMU6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh
NTU2ZjQwHhcNMjYxMDExMTUwMTExWhcNMjYxMDEyMTUwMTExWjAzMTEwLwYDVQQD
Eyg5MTk5NzgwMTBkN2U5ZGRiZjc3MjJmMjkzM2MzOWI4MGVlZjI0MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQjtI1q4z5cy8KOU/rOpUH5gmPKc
iRpehYIE7ORvvA82Tkw51us8qLRjPuDyj7//KNtqxRJe3rgwjya5aQvHMYfvXwaY
IYUUTfVrYhyqeBXM/MOCGHYBvb/DM0uecsWJDJ8fmG2lFyGVbhuLQN/JgFCDoBh+
ss/n1WI0OISXNQjcwVO7LRaesTFcv4chymRcCcAdMcmw/K6CCBg1kiwCRGRvF3Vm
7tlU4vUSpgMsPdPCy7JvGhGka2dDqw/Rj/r1kKxI7mGuLOJtc8jcGVm7HSKd6qyM
eODKyJWv2ql2OQlEgrT7/fqwoPTiaQUyk45S3j/TeaxZyPjTtLRl9G7dUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGZeAENfp3b93IvKTPDm4Du8kCjMB8GA1UdIwQY
MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt
NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw
LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANt0Nx5QM
81bGG/6i+uwURh0pgSw6jqzwAGEC2jYdCqWlqg72Ywp7upKDgCuFPslNLP7q7Rhu
yYHNRr3ijfWhsyEMsih9qs2xEvqSAqQjD5e45Z8uKQtKKg65GUijTJ40ai4jpzHR
WDSFFPA58DPiJ9He0lP1kyaXXt2tF+OOuEcuB8l9CpV8yerQXCkHpJ/vNeubZct8
DCc2EOi5+KqAdxRP2pV0Xns5iHh6F6lAFv4AVYMDwrOh3GwzCmec7Bsnx9iCH4Ow
a1Cx/i4npCV2N94w4RrH50oiQfixC9oKqfMb8oEcafMpvqRSEMj8jaPjEt6+WDkv
+mPjbP5rnmDqMA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:54:47 2026 by rpki-client