Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: 2wrPAcdkEGtGt/nWHm61ZWWR44EiD+xhwnwyEgSdjAg=
Subject key identifier: DB:0C:D2:9A:1B:40:BE:E7:D9:07:1F:37:84:A5:BC:1E:17:D1:73:21
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 01A0D6828EA6237F5AEEFAC8DB1F50DB9446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0559
Signing time: Fri 25 Sep 2026 03:01:15 +0000
Manifest this update: Fri 25 Sep 2026 03:01:15 +0000
Manifest next update: Sat 26 Sep 2026 03:01:15 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: 6Yi2ACb7H7bjSQSDbS37RWxGMx29ochrveZKKvguqJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:8e:a6:23:7f:5a:ee:fa:c8:db:1f:50:db:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Sep 25 03:01:15 2026 GMT
Not After : Sep 26 03:01:15 2026 GMT
Subject: CN=db0cd29a1b40bee7d9071f3784a5bc1e17d17321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:d3:e9:51:d3:72:22:d1:18:2c:16:8f:dd:
8e:c6:41:3c:8f:eb:63:74:cb:46:35:66:20:1f:b6:
a9:9b:db:1a:8e:72:3c:6c:ee:33:14:fd:5c:f8:a6:
90:ee:33:c0:82:7d:db:6b:8f:06:99:16:9e:c4:de:
6f:1e:d9:b7:dc:4b:83:c2:f8:57:7e:46:4e:64:f5:
1b:20:1b:b4:d1:d4:e3:6e:78:7f:7c:b5:1f:ff:9b:
3c:5c:fc:52:1f:d5:67:09:c4:e5:d8:1b:d3:38:f0:
b3:80:c5:f9:5e:f5:e3:a6:9e:2c:e3:8d:3d:da:55:
11:2c:65:fb:87:bb:bb:6f:4f:45:5b:89:85:0b:c2:
24:5b:c0:8d:ea:82:84:d3:e7:e3:a2:37:f8:a8:c5:
9b:5c:e5:47:74:f6:e3:86:29:8c:0f:47:d2:29:a4:
10:5a:ff:36:85:41:bd:1b:e7:bc:c1:b9:73:0b:cc:
c1:3e:38:ef:70:22:a7:f7:1b:56:21:b0:d6:47:f3:
f8:75:0b:79:90:90:b0:fa:c0:d4:c2:d6:06:4a:15:
8f:fd:89:88:0a:81:f7:a6:c6:fb:38:48:d8:9a:90:
ac:ec:dd:cb:f7:00:40:bb:1d:32:9e:db:cf:d7:1f:
f4:b2:65:0f:12:ef:5e:7b:df:61:ec:29:5c:c6:0f:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:D2:9A:1B:40:BE:E7:D9:07:1F:37:84:A5:BC:1E:17:D1:73:21
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:b4:40:2e:83:52:ec:9d:8b:a8:c0:f6:31:0a:ce:84:1c:
7d:09:fe:d1:fb:1d:68:0e:37:44:0b:4b:59:f7:7c:ed:d6:a2:
0d:fb:da:d9:ed:43:d4:a2:e8:68:5f:25:42:8a:fd:b4:bb:0b:
a0:15:38:84:ab:5c:0e:6f:18:57:a1:02:b8:19:8a:64:5b:e7:
9f:57:19:34:9d:8d:83:54:fa:31:23:09:cd:af:3d:1b:32:33:
a8:e7:6e:11:c5:78:1f:7c:4f:a7:a9:fc:6a:e8:ae:b2:f4:a8:
2f:52:40:9a:69:6b:97:75:90:11:d3:d2:c9:85:08:b1:eb:aa:
6b:2c:f6:fa:02:fe:e0:e4:44:c5:98:43:89:5d:05:d9:67:78:
27:ce:fe:71:4e:fc:45:1f:4d:f2:b4:9c:c3:9d:49:f3:d9:a9:
2e:a8:c3:40:f2:2c:5b:d8:04:e3:6f:45:5b:1f:b5:f0:a3:9d:
ba:8f:de:bc:a4:05:be:be:cb:92:f8:5a:cd:1a:46:d8:71:55:
fe:1b:eb:f5:f3:54:99:fb:28:c4:a9:1a:11:e7:35:e1:8c:94:
3b:17:35:6f:c3:c5:66:c7:53:28:99:8e:21:2b:e7:25:00:0e:
1c:0d:bf:bf:e6:74:bd:48:4c:5c:c9:91:28:7a:d0:26:8e:9d:
4b:ab:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:22:07 2026 by rpki-client