Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
File: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft (raw, json)
Hash identifier: iO4HHqxflnmQ72OJ5TALh2YOs7fUFuo7ulWBuTtLZuY=
Subject key identifier: 92:8C:F6:96:24:10:10:8B:C9:8A:43:79:0F:25:6B:CB:47:C1:71:94
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Certificate issuer: /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial: 01A0CA7E05F6C9F4D052392E8606E5D8B92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
Manifest number: D2
Signing time: Tue 22 Sep 2026 19:00:51 +0000
Manifest this update: Tue 22 Sep 2026 19:00:51 +0000
Manifest next update: Wed 23 Sep 2026 19:00:51 +0000
Files and hashes: 1: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (hash: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=)
2: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl (hash: k4DYsn9Sz9vWu16pH5aDEDqB/sjRG3/My61sBGGqgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:05:f6:c9:f4:d0:52:39:2e:86:06:e5:d8:b9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Validity
Not Before: Sep 22 19:00:51 2026 GMT
Not After : Sep 23 19:00:51 2026 GMT
Subject: CN=928cf6962410108bc98a43790f256bcb47c17194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:25:63:72:7f:eb:39:08:6a:8c:9b:86:e8:
7b:14:f9:a1:4a:4b:2b:85:e4:59:21:34:d5:0f:e9:
12:3e:1b:de:fd:f0:58:bb:19:39:33:18:10:89:6d:
ea:a2:db:27:24:90:71:b1:44:91:e1:c6:c4:ea:2d:
ed:da:4d:e3:80:f7:d1:89:84:54:fa:a8:d4:f8:3a:
d8:65:35:1c:6f:8d:ea:65:2f:71:55:ff:9e:fb:25:
72:0b:86:ac:26:49:3a:6b:53:6b:7d:08:56:65:21:
6d:d2:21:d0:b1:99:22:ae:65:1e:8f:87:cc:91:f3:
19:0b:73:f6:40:14:04:be:de:1f:8e:80:d4:66:b7:
d8:79:6d:f6:6a:56:3e:0e:60:a4:7b:68:75:79:d3:
8e:19:8d:89:1c:38:9f:1f:2d:e2:b3:e9:54:32:1b:
15:8f:3e:af:f9:52:f1:8b:ef:db:74:bd:01:27:6a:
11:ec:20:e6:83:b0:98:49:b5:5e:79:ad:21:47:c4:
9b:3e:24:de:9b:de:6c:8f:75:c0:c8:11:36:df:c0:
fb:07:e6:c5:d1:63:37:c3:68:c0:11:30:c8:81:54:
e9:17:4a:c5:0f:43:8c:8a:5f:58:fc:0c:69:05:69:
51:f3:a0:98:ae:d7:ec:40:1d:b4:5c:14:49:d7:64:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8C:F6:96:24:10:10:8B:C9:8A:43:79:0F:25:6B:CB:47:C1:71:94
X509v3 Authority Key Identifier:
keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:10:d0:65:50:de:cd:88:73:8d:69:0b:ef:b1:b5:10:02:ee:
0f:c7:27:47:86:a0:c1:08:77:37:cb:d4:e3:a3:08:ac:c7:ac:
e3:cc:c6:74:2c:44:11:cc:0e:cb:e3:71:bd:89:aa:97:54:30:
2e:49:27:bd:45:ba:e4:24:53:1b:fe:93:37:e5:e3:ae:5d:a0:
f8:e3:22:b2:40:f2:db:fb:26:37:6a:fc:09:60:4b:d3:4e:97:
fc:6b:9b:09:36:51:c1:b6:90:e7:68:a4:ea:d1:ab:ba:a2:8e:
9d:24:2d:eb:89:5f:a4:22:f9:4d:05:82:ea:93:24:9c:3d:de:
f1:eb:fc:23:5a:5e:c5:ab:1d:52:b2:c8:4d:64:53:3e:66:ad:
5e:39:c4:1f:b2:32:22:fa:ac:ba:23:50:1a:e6:a7:ab:49:82:
58:eb:f6:bf:81:ab:56:68:f2:3c:87:d1:4c:a5:34:9f:f2:a6:
d5:55:c7:e6:a9:84:74:67:8f:e9:8c:a2:d0:ea:fb:4a:1f:08:
e7:e3:35:32:8f:9c:df:0c:a9:c5:17:30:4a:c2:c7:1c:6c:c9:
7b:24:c3:d0:18:ea:d7:78:b9:a0:6b:c5:e8:f8:4f:d1:63:6e:
6b:57:4e:84:d6:2d:b0:dd:c0:96:bf:76:62:96:f4:c9:1d:5c:
03:fc:c4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfgX2yfTQUjkuhgbl2LktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWM2Mzk0MTM0YTE3ZDY0OTdjYTNhYmFjZDM3NWM0MDE0
MmYzZTgwHhcNMjYwOTIyMTkwMDUxWhcNMjYwOTIzMTkwMDUxWjAzMTEwLwYDVQQD
Eyg5MjhjZjY5NjI0MTAxMDhiYzk4YTQzNzkwZjI1NmJjYjQ3YzE3MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunolY3J/6zkIaoybhuh7FPmhSksr
heRZITTVD+kSPhve/fBYuxk5MxgQiW3qotsnJJBxsUSR4cbE6i3t2k3jgPfRiYRU
+qjU+DrYZTUcb43qZS9xVf+e+yVyC4asJkk6a1NrfQhWZSFt0iHQsZkirmUej4fM
kfMZC3P2QBQEvt4fjoDUZrfYeW32alY+DmCke2h1edOOGY2JHDifHy3is+lUMhsV
jz6v+VLxi+/bdL0BJ2oR7CDmg7CYSbVeea0hR8SbPiTem95sj3XAyBE238D7B+bF
0WM3w2jAETDIgVTpF0rFD0OMil9Y/AxpBWlR86CYrtfsQB20XBRJ12TyWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKM9pYkEBCLyYpDeQ8la8tHwXGUMB8GA1UdIwQY
MBaAFGPsY5QTShfWSXyjq6zTdcQBQvPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZjA1MzItNWQyNS00ZTEwLWJmZDMt
OWQ4ZWU3NjA5MTVhLzEvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZjA1MzItNWQyNS00ZTEwLWJmZDMtOWQ4ZWU3NjA5MTVh
LzEvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxDQZVDe
zYhzjWkL77G1EALuD8cnR4agwQh3N8vU46MIrMes48zGdCxEEcwOy+NxvYmql1Qw
LkknvUW65CRTG/6TN+Xjrl2g+OMiskDy2/smN2r8CWBL006X/GubCTZRwbaQ52ik
6tGruqKOnSQt64lfpCL5TQWC6pMknD3e8ev8I1pexasdUrLITWRTPmatXjnEH7Iy
IvqsuiNQGuanq0mCWOv2v4GrVmjyPIfRTKU0n/Km1VXH5qmEdGeP6Yyi0Or7Sh8I
5+M1Mo+c3wypxRcwSsLHHGzJeyTD0Bjq13i5oGvF6PhP0WNua1dOhNYtsN3Alr92
Ypb0yR1cA/zEtg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:24:47 2026 by rpki-client