Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: kpf+9d8m0G0u6I5tvPyz0392U9rtu8C7mzyQYt38id4=
Subject key identifier: 5D:C1:BA:2B:00:BE:6D:40:90:FA:CB:5B:11:10:73:8B:06:ED:87:0E
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01A0C3325D9EE91CBB5DAE61FFD748062D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0B3D
Signing time: Mon 21 Sep 2026 09:00:52 +0000
Manifest this update: Mon 21 Sep 2026 09:00:52 +0000
Manifest next update: Tue 22 Sep 2026 09:00:52 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: m7qqHv6FPE4i21qfg2g4O2mqQvhleVb/91Bhr14U/lw=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:5d:9e:e9:1c:bb:5d:ae:61:ff:d7:48:06:2d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Sep 21 09:00:52 2026 GMT
Not After : Sep 22 09:00:52 2026 GMT
Subject: CN=5dc1ba2b00be6d4090facb5b1110738b06ed870e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:cc:22:eb:40:42:ee:ae:31:73:40:e4:2f:
a1:a5:9a:a9:99:c1:bf:d9:9f:f2:fb:e5:32:22:f1:
dc:3b:fd:60:86:e1:f2:5b:34:93:ca:a7:9c:2f:b0:
34:84:2c:6e:9d:f6:bf:6f:f9:31:9c:e3:c7:82:0d:
17:ed:45:20:4e:6e:a1:f6:99:74:20:6a:a9:f6:6c:
d4:1c:09:7e:58:c6:84:86:e8:d0:62:fe:de:8b:9e:
a8:02:c4:8b:ff:04:2c:3c:4f:f9:0a:f9:f1:72:3e:
7f:0a:f2:6c:e6:c9:92:9c:8c:f5:c5:9b:5d:f0:78:
ac:0a:48:9a:9e:e4:91:0b:ae:e2:96:8e:a3:b5:14:
dd:d8:49:b6:e2:b4:a5:cc:34:d0:60:1f:3d:d6:4f:
c1:fb:d4:d9:47:5e:3d:85:4f:01:b9:14:f5:c5:c0:
b7:9b:54:c4:80:49:f2:69:f8:b2:45:1e:ef:23:5b:
73:75:a1:16:e6:e6:15:df:07:7b:46:4c:d7:bc:28:
ab:93:f3:73:99:83:c9:dc:fd:36:ec:1e:45:4d:39:
ff:97:83:e1:67:40:31:84:4b:02:36:c1:69:3f:cf:
a0:11:f1:5e:f0:6b:ce:50:77:1b:1e:83:73:99:fa:
02:b2:02:1a:50:37:e1:26:97:6d:25:44:d5:c4:6f:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:BA:2B:00:BE:6D:40:90:FA:CB:5B:11:10:73:8B:06:ED:87:0E
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:63:21:96:3e:07:72:e0:90:41:8c:3d:1f:a6:74:3c:dd:
c9:9a:ad:0d:b1:fe:91:54:ac:01:68:8a:05:da:53:05:04:41:
21:75:be:dd:51:c6:99:27:3c:04:f3:29:d6:4f:1a:02:e8:29:
17:90:96:37:fa:92:20:05:1e:e4:42:43:36:08:0f:c8:cc:d1:
5f:6d:65:89:8e:f8:ad:f6:18:d6:af:0c:9b:5e:b3:78:9f:80:
27:7b:3d:d1:e8:c8:0a:8a:f5:ff:98:ad:4f:2e:1e:4d:78:ad:
d6:33:36:aa:bd:6f:39:e0:a8:4d:66:3a:df:95:03:ac:b0:ef:
d6:78:9e:20:0d:4d:f0:70:9b:31:e4:6a:35:23:b8:7f:d8:02:
5c:80:ea:f1:ef:ec:c7:e7:10:2d:8b:2c:98:08:a5:bd:f9:a9:
93:78:cf:a1:56:ef:cf:ce:e4:25:57:16:9b:56:85:51:f2:68:
f2:c9:44:7f:19:17:91:a1:c7:ab:25:c9:0b:4b:57:ff:b0:62:
7b:78:2d:d3:76:f2:38:4f:da:78:fb:2e:e7:ed:36:eb:a0:6a:
52:e3:a7:ec:48:6e:34:9c:fc:51:39:b5:68:cb:8b:d8:5b:bf:
b3:ae:e5:e0:f2:a1:34:c6:1c:20:37:45:aa:4b:01:c9:78:e2:
ec:e5:7e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMl2e6Ry7Xa5h/9dIBi1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh
NTAxZTAwHhcNMjYwOTIxMDkwMDUyWhcNMjYwOTIyMDkwMDUyWjAzMTEwLwYDVQQD
Eyg1ZGMxYmEyYjAwYmU2ZDQwOTBmYWNiNWIxMTEwNzM4YjA2ZWQ4NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10PMIutAQu6uMXNA5C+hpZqpmcG/
2Z/y++UyIvHcO/1ghuHyWzSTyqecL7A0hCxunfa/b/kxnOPHgg0X7UUgTm6h9pl0
IGqp9mzUHAl+WMaEhujQYv7ei56oAsSL/wQsPE/5Cvnxcj5/CvJs5smSnIz1xZtd
8HisCkianuSRC67ilo6jtRTd2Em24rSlzDTQYB891k/B+9TZR149hU8BuRT1xcC3
m1TEgEnyafiyRR7vI1tzdaEW5uYV3wd7RkzXvCirk/NzmYPJ3P027B5FTTn/l4Ph
Z0AxhEsCNsFpP8+gEfFe8GvOUHcbHoNzmfoCsgIaUDfhJpdtJUTVxG+oJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3BuisAvm1AkPrLWxEQc4sG7YcOMB8GA1UdIwQY
MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt
OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0
LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAFjIZY+
B3LgkEGMPR+mdDzdyZqtDbH+kVSsAWiKBdpTBQRBIXW+3VHGmSc8BPMp1k8aAugp
F5CWN/qSIAUe5EJDNggPyMzRX21liY74rfYY1q8Mm16zeJ+AJ3s90ejICor1/5it
Ty4eTXit1jM2qr1vOeCoTWY635UDrLDv1nieIA1N8HCbMeRqNSO4f9gCXIDq8e/s
x+cQLYssmAilvfmpk3jPoVbvz87kJVcWm1aFUfJo8slEfxkXkaHHqyXJC0tX/7Bi
e3gt03byOE/aePsu5+0266BqUuOn7EhuNJz8UTm1aMuL2Fu/s67l4PKhNMYcIDdF
qksByXji7OV+Ow==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:57:51 2026 by rpki-client