Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: 5YJCsY45ymiPwtmSHZKzq3Np/GXDTkRfKo27oyvZrTM=
Subject key identifier: 1B:26:1E:78:0E:9A:44:0B:4B:E5:19:62:73:E9:FE:57:A4:F6:80:9C
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01A1046E42005AA62AA05A235123D07DF42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 063A
Signing time: Sun 04 Oct 2026 01:01:37 +0000
Manifest this update: Sun 04 Oct 2026 01:01:37 +0000
Manifest next update: Mon 05 Oct 2026 01:01:37 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: O/qW+SL94Di2bkjV0WUNmFwuCqMw5ADA2acVsu5rrCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:42:00:5a:a6:2a:a0:5a:23:51:23:d0:7d:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Oct 4 01:01:37 2026 GMT
Not After : Oct 5 01:01:37 2026 GMT
Subject: CN=1b261e780e9a440b4be5196273e9fe57a4f6809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:d8:48:39:85:ff:1d:ff:b2:93:c5:a7:bc:
af:20:a1:32:c4:5a:c2:9c:d0:7c:94:94:d4:46:8c:
1a:c0:4e:f8:8a:04:92:26:92:ff:3b:a5:5e:46:ce:
aa:20:18:22:fc:c4:9e:c6:d6:50:6a:83:03:c1:1e:
12:44:de:dc:f5:c8:2b:d4:0a:b4:70:d9:d4:20:ca:
0a:78:92:38:02:5f:41:3f:4b:42:ed:5f:18:e7:a6:
3f:0e:5a:c7:d8:91:49:e8:31:9a:c6:7c:b1:2d:bd:
47:83:6e:e3:5f:06:4c:2e:23:d9:66:3c:67:28:3c:
84:71:2d:6c:29:dc:b3:3c:48:98:6d:7b:75:c5:30:
c0:88:bf:61:e5:18:9b:fb:72:39:77:4a:48:a4:f5:
eb:d1:a6:5a:f6:2c:9f:23:1e:0f:7c:95:50:46:52:
fe:06:a8:ba:1d:69:23:2b:ce:14:13:41:7e:61:40:
d0:9b:bf:b9:b5:53:5a:94:1d:ff:a1:b8:dc:bd:b0:
5e:94:e6:8c:97:e8:21:cc:60:be:84:61:5d:84:fe:
6d:17:3b:a2:83:45:f3:95:17:81:4a:db:94:10:d9:
6b:93:04:19:6e:1d:04:9b:28:4c:08:f6:2b:6c:8b:
12:27:67:3d:50:03:dc:ee:3e:ff:5e:2d:87:6d:85:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:1E:78:0E:9A:44:0B:4B:E5:19:62:73:E9:FE:57:A4:F6:80:9C
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a1:d9:e5:58:a9:82:ec:69:cf:8d:43:62:71:7d:5f:fd:75:
a6:af:11:6a:45:f9:96:b1:b0:87:70:c2:82:fb:b1:eb:5d:43:
ac:d5:7d:2a:c9:10:98:31:ae:c7:12:e6:f3:85:92:5a:58:5e:
8c:e3:22:3f:b2:6a:36:ec:98:d5:61:9e:ac:ea:e8:dd:58:d9:
87:f4:d8:50:92:4a:8a:96:7d:1e:10:6a:f5:51:43:94:cd:25:
2b:8c:29:1d:d0:66:0c:17:88:83:f4:78:d9:60:91:f0:35:57:
3e:f9:8d:83:fb:c1:48:91:09:90:a1:3f:43:b2:f7:65:4b:3a:
ec:54:0e:2b:16:9f:8a:65:95:9f:82:c0:fa:95:6e:70:9a:d5:
87:41:71:fa:4c:c2:14:55:40:f0:3e:ee:ab:5d:a0:f0:d6:f3:
bb:3c:2d:11:bd:4f:4f:c5:11:3e:54:53:3b:60:b8:55:aa:aa:
e6:a8:fd:15:f6:cd:7f:41:22:9d:8f:ad:09:93:7b:c2:07:0a:
a3:40:8c:b4:ad:b1:58:0b:d6:7d:5a:17:4f:69:62:bf:2e:24:
f8:c8:f9:04:c1:36:61:4b:30:a8:56:5f:88:2a:4e:62:5b:95:
00:fd:36:7c:59:47:56:cf:c9:ba:21:e4:fe:82:0b:ca:9b:f2:
93:5a:63:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbkIAWqYqoFojUSPQffQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5
ZTViNjQwHhcNMjYxMDA0MDEwMTM3WhcNMjYxMDA1MDEwMTM3WjAzMTEwLwYDVQQD
EygxYjI2MWU3ODBlOWE0NDBiNGJlNTE5NjI3M2U5ZmU1N2E0ZjY4MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzfYSDmF/x3/spPFp7yvIKEyxFrC
nNB8lJTURowawE74igSSJpL/O6VeRs6qIBgi/MSextZQaoMDwR4SRN7c9cgr1Aq0
cNnUIMoKeJI4Al9BP0tC7V8Y56Y/DlrH2JFJ6DGaxnyxLb1Hg27jXwZMLiPZZjxn
KDyEcS1sKdyzPEiYbXt1xTDAiL9h5Rib+3I5d0pIpPXr0aZa9iyfIx4PfJVQRlL+
Bqi6HWkjK84UE0F+YUDQm7+5tVNalB3/objcvbBelOaMl+ghzGC+hGFdhP5tFzui
g0XzlReBStuUENlrkwQZbh0EmyhMCPYrbIsSJ2c9UAPc7j7/Xi2HbYUO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsmHngOmkQLS+UZYnPp/lek9oCcMB8GA1UdIwQY
MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt
ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw
LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKHZ5Vip
guxpz41DYnF9X/11pq8RakX5lrGwh3DCgvux611DrNV9KskQmDGuxxLm84WSWlhe
jOMiP7JqNuyY1WGerOro3VjZh/TYUJJKipZ9HhBq9VFDlM0lK4wpHdBmDBeIg/R4
2WCR8DVXPvmNg/vBSJEJkKE/Q7L3ZUs67FQOKxafimWVn4LA+pVucJrVh0Fx+kzC
FFVA8D7uq12g8NbzuzwtEb1PT8URPlRTO2C4Vaqq5qj9FfbNf0EinY+tCZN7wgcK
o0CMtK2xWAvWfVoXT2livy4k+Mj5BME2YUswqFZfiCpOYluVAP02fFlHVs/JuiHk
/oILypvyk1pjqw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:56:24 2026 by rpki-client