Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: WSBD54oSsesRyzelQOX72LV0pSxOa+U8B8mKHWOaQ7s=
Subject key identifier: 8E:6B:AC:90:B3:DB:43:46:8A:E6:0F:D3:80:19:37:A2:49:CE:04:91
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 01A129563541C438D66F90BF8350F3EC0BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 05:01:17 +0000
Manifest this update: Sun 11 Oct 2026 05:01:17 +0000
Manifest next update: Mon 12 Oct 2026 05:01:17 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: kTnoBAzOxMoqA3UawDAVEUfTM65G1hCWKjzuN1ynrP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:35:41:c4:38:d6:6f:90:bf:83:50:f3:ec:0b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Oct 11 05:01:17 2026 GMT
Not After : Oct 12 05:01:17 2026 GMT
Subject: CN=8e6bac90b3db43468ae60fd3801937a249ce0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:74:5c:9d:58:96:f2:7e:94:b1:a6:93:35:
9d:f5:91:ee:75:a1:3a:df:87:87:4c:70:d7:53:c0:
38:06:4b:1b:21:71:49:ec:80:e8:9a:96:b0:c4:8a:
d2:52:51:05:91:c1:67:85:64:c2:8a:06:d5:e2:1e:
f7:e6:ea:e0:12:0a:79:78:f1:f9:31:8e:e3:ad:26:
cf:2f:db:3b:38:a2:1a:9a:67:88:3d:67:29:d6:18:
cc:c0:08:b4:0d:ce:f2:83:06:54:99:75:83:2e:e0:
93:17:20:e8:67:94:cd:b7:c3:cf:7b:c9:b4:68:50:
21:f7:57:7e:eb:17:09:1c:2c:4e:6e:ee:93:a5:a0:
cf:05:6e:6b:d0:ec:3e:9a:db:68:50:35:10:16:f1:
4a:f3:d6:99:78:07:4e:49:19:6d:fa:df:e3:9c:c0:
f5:83:65:52:a0:40:f3:31:55:0b:60:f1:17:54:de:
6c:81:7e:2d:83:94:de:68:81:3d:30:3b:03:b3:21:
f3:b2:d9:96:b1:7b:29:3d:09:f6:7d:e0:a3:01:eb:
3a:fd:84:bb:ad:c5:e6:8c:82:fe:30:59:6d:5a:7e:
ce:10:b7:e6:46:3f:8d:5b:9e:4a:83:f3:51:b4:a7:
7f:37:34:bf:36:75:9a:8d:64:88:55:b0:89:34:ba:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:AC:90:B3:DB:43:46:8A:E6:0F:D3:80:19:37:A2:49:CE:04:91
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1f:4f:3d:46:ea:6d:2b:ff:47:80:e4:9c:c5:2a:a4:5c:df:
96:f4:a9:0c:7b:d3:db:f7:e1:5f:01:d3:4a:e4:f1:d6:e7:2b:
50:c4:57:f0:4e:d3:53:15:2b:46:3d:f7:43:bc:5d:57:0b:e8:
97:ed:2d:f1:d9:ab:2f:0b:7b:89:ac:a5:df:30:58:d5:0a:fe:
d0:be:04:06:da:a2:0a:ad:2d:6b:da:02:5c:78:1f:40:f9:a1:
09:20:39:91:ec:e5:7d:1d:bf:65:48:6b:0d:11:09:26:98:16:
52:29:a6:21:b4:bd:aa:00:11:d4:da:44:43:95:99:97:e4:55:
eb:88:c9:c6:f6:06:55:bb:76:6b:25:08:64:cd:48:15:44:45:
5a:73:fd:86:96:d6:67:0f:66:f0:17:82:58:82:ab:70:5a:b0:
69:73:88:47:7d:26:f0:77:b8:4e:45:50:b4:77:33:11:8d:ad:
f7:ef:6d:2d:eb:70:20:cb:50:4a:a3:a4:89:a7:5a:ed:86:92:
f6:39:c5:df:75:18:4d:3f:89:32:8c:d8:4a:3b:f1:46:c5:ce:
d4:69:ad:4f:89:d4:eb:eb:23:57:51:b1:f1:9a:58:6f:15:c7:
5b:e2:fb:d8:f3:0b:db:03:5c:25:2f:9d:a4:49:f7:6e:22:b0:
51:22:1f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVjVBxDjWb5C/g1Dz7AvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm
YWMyZTMwHhcNMjYxMDExMDUwMTE3WhcNMjYxMDEyMDUwMTE3WjAzMTEwLwYDVQQD
Eyg4ZTZiYWM5MGIzZGI0MzQ2OGFlNjBmZDM4MDE5MzdhMjQ5Y2UwNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qt0XJ1YlvJ+lLGmkzWd9ZHudaE6
34eHTHDXU8A4BksbIXFJ7IDompawxIrSUlEFkcFnhWTCigbV4h735urgEgp5ePH5
MY7jrSbPL9s7OKIammeIPWcp1hjMwAi0Dc7ygwZUmXWDLuCTFyDoZ5TNt8PPe8m0
aFAh91d+6xcJHCxObu6TpaDPBW5r0Ow+mttoUDUQFvFK89aZeAdOSRlt+t/jnMD1
g2VSoEDzMVULYPEXVN5sgX4tg5TeaIE9MDsDsyHzstmWsXspPQn2feCjAes6/YS7
rcXmjIL+MFltWn7OELfmRj+NW55Kg/NRtKd/NzS/NnWajWSIVbCJNLpdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5rrJCz20NGiuYP04AZN6JJzgSRMB8GA1UdIwQY
MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct
Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm
LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1x9PPUbq
bSv/R4DknMUqpFzflvSpDHvT2/fhXwHTSuTx1ucrUMRX8E7TUxUrRj33Q7xdVwvo
l+0t8dmrLwt7iayl3zBY1Qr+0L4EBtqiCq0ta9oCXHgfQPmhCSA5kezlfR2/ZUhr
DREJJpgWUimmIbS9qgAR1NpEQ5WZl+RV64jJxvYGVbt2ayUIZM1IFURFWnP9hpbW
Zw9m8BeCWIKrcFqwaXOIR30m8He4TkVQtHczEY2t9+9tLetwIMtQSqOkiada7YaS
9jnF33UYTT+JMozYSjvxRsXO1GmtT4nU6+sjV1Gx8ZpYbxXHW+L72PML2wNcJS+d
pEn3biKwUSIfRw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:05:45 2026 by rpki-client