Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: 1IaTwZi3lX8wvoOl0WcfyiMZ+43aoDU4BIOxVBqR5J0=
Subject key identifier: 2B:D8:8A:90:C8:37:F0:19:F5:8C:D0:28:01:4D:7B:C4:EA:DE:BB:0E
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01A0C6D87E77AA252ED3096A4A79F1D04D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 02:01:11 +0000
Manifest this update: Tue 22 Sep 2026 02:01:11 +0000
Manifest next update: Wed 23 Sep 2026 02:01:11 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: iK452Zok7Y34nf+LYjmaK5cxeXmXbyyWmTV6tud7Qdo=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:7e:77:aa:25:2e:d3:09:6a:4a:79:f1:d0:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Sep 22 02:01:11 2026 GMT
Not After : Sep 23 02:01:11 2026 GMT
Subject: CN=2bd88a90c837f019f58cd028014d7bc4eadebb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:2b:52:11:3e:1f:19:5f:4d:03:ac:b6:d1:
fc:c4:02:7e:2d:a5:09:db:88:06:20:2c:28:92:cc:
c7:e1:eb:49:4e:db:08:b9:04:21:04:f1:f4:02:bb:
30:3b:81:6f:c9:d3:4c:21:03:7d:4f:64:59:d0:35:
9e:f6:65:23:48:a1:16:ba:7f:3d:17:63:77:dd:eb:
7a:eb:fb:d2:b5:b9:d4:59:5a:4a:4e:c8:a3:ed:8e:
96:e9:b6:2e:9f:60:87:a6:e1:c1:12:6d:65:de:d9:
4a:0e:79:44:bd:2e:ff:28:6d:c1:4e:d0:db:1f:b9:
1d:82:e0:67:33:18:f0:c9:cf:79:3b:8c:06:11:00:
77:34:d6:e5:00:43:8c:77:8b:fb:a2:d2:a4:06:aa:
5d:3b:5e:2e:cc:f9:f8:b6:7f:e4:fe:56:31:66:7c:
11:bb:7c:73:ef:b3:d9:7d:8b:f9:74:25:de:19:09:
e0:5a:f1:4a:eb:bd:76:9e:67:d3:cc:8b:7e:ee:44:
26:b0:54:c6:72:be:74:1a:0d:87:5b:2e:9a:e6:56:
97:68:77:56:64:95:1d:73:dd:10:4c:2d:1f:bd:28:
b0:2e:7e:d6:91:92:df:0a:b0:9c:46:aa:e6:0c:7a:
87:35:2a:c4:e7:1b:eb:43:43:91:5f:84:27:6e:ee:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D8:8A:90:C8:37:F0:19:F5:8C:D0:28:01:4D:7B:C4:EA:DE:BB:0E
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:11:03:2e:15:2e:bd:88:e6:76:0f:c3:ff:5f:95:eb:26:
3a:eb:82:30:07:5a:09:b9:60:98:2d:55:e9:ca:8c:2e:81:d9:
54:b0:54:97:ae:b7:38:f0:3a:62:89:fb:5d:64:f8:80:98:d8:
40:c6:c9:25:67:cd:de:44:90:8e:ef:9f:b4:ff:59:00:0b:31:
8f:4e:e9:7f:74:51:78:0d:84:31:1b:c7:14:02:eb:20:c1:d1:
cc:cf:3e:94:3f:25:eb:60:88:72:e7:aa:0d:aa:46:8b:cd:fa:
83:a8:bf:47:a2:22:d8:69:4a:b8:98:0a:1b:f5:e7:0b:60:06:
58:7c:cc:c8:2e:a6:e1:f3:df:06:43:0f:1c:3f:58:98:5f:c5:
9f:63:cf:13:20:d1:64:ab:82:85:1b:8d:da:2f:eb:1b:df:6a:
97:de:c8:4e:15:6c:10:e8:eb:8a:46:03:51:75:c6:5a:0d:a1:
bd:76:4c:5b:c5:67:c2:47:30:24:3e:eb:c5:77:89:eb:f8:d7:
be:bd:90:7b:ad:51:9d:99:39:eb:be:5f:74:69:dd:b7:91:38:
41:87:2e:32:b4:e4:4c:0c:04:db:be:67:b7:e3:50:4d:2e:4b:
8f:e2:b6:b3:dc:7e:12:b1:a9:43:b0:8c:21:1f:af:01:40:13:
33:b2:78:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2H53qiUu0wlqSnnx0E0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjYwOTIyMDIwMTExWhcNMjYwOTIzMDIwMTExWjAzMTEwLwYDVQQD
EygyYmQ4OGE5MGM4MzdmMDE5ZjU4Y2QwMjgwMTRkN2JjNGVhZGViYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuArUhE+HxlfTQOsttH8xAJ+LaUJ
24gGICwokszH4etJTtsIuQQhBPH0ArswO4FvydNMIQN9T2RZ0DWe9mUjSKEWun89
F2N33et66/vStbnUWVpKTsij7Y6W6bYun2CHpuHBEm1l3tlKDnlEvS7/KG3BTtDb
H7kdguBnMxjwyc95O4wGEQB3NNblAEOMd4v7otKkBqpdO14uzPn4tn/k/lYxZnwR
u3xz77PZfYv5dCXeGQngWvFK6712nmfTzIt+7kQmsFTGcr50Gg2HWy6a5laXaHdW
ZJUdc90QTC0fvSiwLn7WkZLfCrCcRqrmDHqHNSrE5xvrQ0ORX4Qnbu5NjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvYipDIN/AZ9YzQKAFNe8Tq3rsOMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxERAy4V
Lr2I5nYPw/9flesmOuuCMAdaCblgmC1V6cqMLoHZVLBUl663OPA6Yon7XWT4gJjY
QMbJJWfN3kSQju+ftP9ZAAsxj07pf3RReA2EMRvHFALrIMHRzM8+lD8l62CIcueq
DapGi836g6i/R6Ii2GlKuJgKG/XnC2AGWHzMyC6m4fPfBkMPHD9YmF/Fn2PPEyDR
ZKuChRuN2i/rG99ql97IThVsEOjrikYDUXXGWg2hvXZMW8VnwkcwJD7rxXeJ6/jX
vr2Qe61RnZk5675fdGndt5E4QYcuMrTkTAwE275nt+NQTS5Lj+K2s9x+ErGpQ7CM
IR+vAUATM7J4dw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:32 2026 by rpki-client