Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: zP7e9k1ZzTWd4O2i+Pdlx18mvXRS5AkH1JTCdeatwU8=
Subject key identifier: 5B:C5:9C:C3:E2:5A:30:9F:D1:A5:4A:C2:9C:84:04:C0:10:78:C3:67
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01A1279E95FD5A852BB2D6DE0B22E792D9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0CAA
Signing time: Sat 10 Oct 2026 21:01:06 +0000
Manifest this update: Sat 10 Oct 2026 21:01:06 +0000
Manifest next update: Sun 11 Oct 2026 21:01:06 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: PXzGxa2FLWIUubPfojcWFQKrejEI11Qff6KUue9oo9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:95:fd:5a:85:2b:b2:d6:de:0b:22:e7:92:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Oct 10 21:01:06 2026 GMT
Not After : Oct 11 21:01:06 2026 GMT
Subject: CN=5bc59cc3e25a309fd1a54ac29c8404c01078c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:df:08:a4:5e:2c:57:2c:19:e4:57:27:c5:
14:fe:ed:70:61:18:02:5f:06:60:8d:75:f7:12:40:
cf:e6:9c:bd:3e:12:93:74:3e:09:93:b5:18:e7:fb:
2a:91:ca:41:fb:1d:82:02:c4:d2:39:06:9a:36:2e:
1a:b7:81:7b:51:0a:6a:d7:b5:86:18:aa:7f:83:ab:
06:89:6b:63:ee:8b:0c:35:1f:1a:ba:e7:66:d1:8c:
3a:eb:2b:a3:6d:6d:d0:70:6a:ca:d2:d5:a5:5b:05:
9c:4a:79:15:9b:8b:29:11:64:ea:64:9f:95:09:1b:
fe:2f:26:51:c1:99:23:d3:06:f7:28:c8:68:0b:f2:
f1:73:b0:8e:9c:a9:50:4a:1b:ac:4c:96:c9:6e:91:
a8:17:b0:d0:e2:94:19:b4:1a:7d:c6:d9:04:1f:74:
b6:fc:37:93:da:a4:9f:c2:98:08:e9:06:4e:7f:35:
8a:2b:51:5b:80:12:f8:fe:dd:f1:46:4d:55:54:0b:
c1:11:91:81:d7:26:aa:9c:c4:c9:4f:e2:3b:e9:a9:
ab:77:48:ae:7b:35:ef:2b:1d:4b:f9:bc:89:11:83:
75:65:5c:a1:82:b6:70:cc:b4:4a:d3:23:9d:ed:06:
7b:34:9c:f5:d2:f8:46:36:69:89:7e:11:ff:c6:78:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:9C:C3:E2:5A:30:9F:D1:A5:4A:C2:9C:84:04:C0:10:78:C3:67
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c3:28:dd:58:5e:b9:48:05:40:2e:b5:d9:3a:0a:65:9a:63:
58:5b:a7:c4:b5:49:4b:c3:6a:da:78:b1:f6:f2:5d:6c:d7:ff:
28:93:0a:3a:b2:cc:a1:e6:67:b9:a9:c5:e6:43:fd:c6:02:d8:
08:0a:b5:74:a7:61:1f:a3:49:0d:f3:07:73:bd:90:ac:3c:de:
b3:a7:9d:16:88:9d:40:78:90:8e:50:c6:30:90:11:c4:86:31:
a6:f7:4a:e6:f3:b4:a5:2b:ab:6f:8c:e2:93:92:12:11:d9:7a:
fe:7e:91:e1:50:d1:93:92:23:83:a1:6f:27:d5:e3:81:9a:ff:
c3:ca:4a:3b:af:43:dd:d3:6b:6c:66:b5:d9:b2:a5:c7:98:0a:
76:b6:e9:1c:33:da:4e:87:a6:60:c6:0f:7a:e5:04:67:fa:8f:
66:32:f2:a9:e3:79:32:48:3f:ee:8e:de:f7:6e:c0:21:18:94:
de:5c:89:a6:38:f7:39:89:be:49:d2:dd:ca:1a:14:90:8c:7d:
e5:ec:82:3e:aa:18:b8:5e:55:bf:0c:31:17:05:e4:a8:48:61:
0d:e2:c7:ea:e8:15:c7:26:f0:d3:d3:70:02:0b:c8:67:b4:df:
7c:e4:f0:92:9f:0c:09:ac:4a:a9:aa:b5:7a:7f:be:d0:cf:a5:
ef:b8:d9:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEnnpX9WoUrstbeCyLnktmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh
NTU2ZjQwHhcNMjYxMDEwMjEwMTA2WhcNMjYxMDExMjEwMTA2WjAzMTEwLwYDVQQD
Eyg1YmM1OWNjM2UyNWEzMDlmZDFhNTRhYzI5Yzg0MDRjMDEwNzhjMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiojfCKReLFcsGeRXJ8UU/u1wYRgC
XwZgjXX3EkDP5py9PhKTdD4Jk7UY5/sqkcpB+x2CAsTSOQaaNi4at4F7UQpq17WG
GKp/g6sGiWtj7osMNR8auudm0Yw66yujbW3QcGrK0tWlWwWcSnkVm4spEWTqZJ+V
CRv+LyZRwZkj0wb3KMhoC/Lxc7COnKlQShusTJbJbpGoF7DQ4pQZtBp9xtkEH3S2
/DeT2qSfwpgI6QZOfzWKK1FbgBL4/t3xRk1VVAvBEZGB1yaqnMTJT+I76amrd0iu
ezXvKx1L+byJEYN1ZVyhgrZwzLRK0yOd7QZ7NJz10vhGNmmJfhH/xngXEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvFnMPiWjCf0aVKwpyEBMAQeMNnMB8GA1UdIwQY
MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt
NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw
LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMMo3Vhe
uUgFQC612ToKZZpjWFunxLVJS8Nq2nix9vJdbNf/KJMKOrLMoeZnuanF5kP9xgLY
CAq1dKdhH6NJDfMHc72QrDzes6edFoidQHiQjlDGMJARxIYxpvdK5vO0pSurb4zi
k5ISEdl6/n6R4VDRk5Ijg6FvJ9XjgZr/w8pKO69D3dNrbGa12bKlx5gKdrbpHDPa
ToemYMYPeuUEZ/qPZjLyqeN5Mkg/7o7e927AIRiU3lyJpjj3OYm+SdLdyhoUkIx9
5eyCPqoYuF5VvwwxFwXkqEhhDeLH6ugVxybw09NwAgvIZ7TffOTwkp8MCaxKqaq1
en++0M+l77jZ4A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:40:14 2026 by rpki-client