Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: PLmBu3xvdayMT2uRaeKvJVTAVAokxVDPMout1gvqAso=
Subject key identifier: CA:73:BE:02:15:E2:9D:EC:96:D0:C1:0D:94:08:9B:5B:11:BD:28:7E
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 01A0E4E300A2145F3C58AA4F24ED9A0E42D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0F49
Signing time: Sun 27 Sep 2026 22:01:17 +0000
Manifest this update: Sun 27 Sep 2026 22:01:17 +0000
Manifest next update: Mon 28 Sep 2026 22:01:17 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: S8Hr4Solz+aVgAkRIBub99yS/hO+RMlvcTGJYCJETrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:00:a2:14:5f:3c:58:aa:4f:24:ed:9a:0e:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Sep 27 22:01:17 2026 GMT
Not After : Sep 28 22:01:17 2026 GMT
Subject: CN=ca73be0215e29dec96d0c10d94089b5b11bd287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:12:23:8a:2a:dd:89:82:c8:74:f0:72:87:
2c:d7:dc:3e:94:a9:d3:25:04:ce:f7:f9:23:3f:04:
82:12:4f:5a:34:84:6c:9c:b5:b4:87:04:e7:08:96:
d1:60:62:fc:36:1f:e4:c8:df:2a:9b:59:db:8d:fd:
92:7b:7b:ab:2f:c9:cc:0e:2d:21:2b:8b:88:11:1f:
b6:80:31:99:68:81:c8:26:56:a4:50:a9:c5:c5:5e:
47:90:e7:ee:ac:a9:7d:7a:8f:a2:df:1a:ca:10:69:
eb:16:18:07:27:e5:37:ef:1b:4e:07:5b:f6:9e:8f:
28:94:5f:5b:4b:32:a1:1a:ab:55:8e:02:d6:18:7f:
37:1b:3b:90:ce:a5:22:c6:fb:70:07:9a:17:42:cf:
b4:bf:d9:3b:73:3f:08:2a:a0:83:53:f9:43:e0:c1:
de:c6:e6:1e:5a:6f:d3:11:5a:d9:fa:29:90:2e:7f:
51:16:c7:58:c8:9c:a0:33:e9:6c:b3:50:42:2e:a3:
29:14:6b:b8:81:8a:05:6f:ec:cb:0c:25:a5:3f:d9:
81:d7:ff:01:01:64:58:02:4e:fb:8c:1d:a7:b9:e4:
7f:c9:10:2f:09:e6:ed:64:d5:43:25:36:a5:1c:ef:
b9:47:02:28:31:6e:f1:2c:c0:e2:64:38:8a:18:9d:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:BE:02:15:E2:9D:EC:96:D0:C1:0D:94:08:9B:5B:11:BD:28:7E
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:c4:d6:b2:7c:5b:70:5b:d2:5d:93:ba:eb:2c:e1:c5:d9:
34:ca:cb:21:0c:ed:30:1c:76:8e:e7:a4:b2:56:f1:e0:fd:c4:
10:20:1a:8c:a7:c5:5b:54:66:19:9a:1b:f5:67:c1:fa:b7:63:
8b:60:b6:6c:f4:a2:7e:00:85:02:e1:85:a8:2c:e3:a7:0f:f8:
b7:32:bc:78:63:f0:90:87:d1:d7:cb:84:0e:5d:a3:cf:dd:40:
0c:4d:31:41:d2:84:d6:c3:e4:c7:49:31:b4:af:48:9a:c8:f4:
45:ce:97:05:9f:4c:57:15:a9:b9:95:c2:75:95:6a:9c:04:1c:
bf:9b:1c:79:16:a8:ca:0d:f6:1c:89:3b:8a:fc:8e:81:4d:d7:
de:a2:43:d9:13:91:01:f8:f7:3e:3b:4a:d9:6e:ca:95:a0:4f:
45:71:1b:dc:7c:de:ef:de:62:05:d2:2d:19:69:57:67:28:a5:
01:27:05:b8:00:72:bd:2e:43:2a:34:00:ad:e3:27:9f:22:2f:
03:a7:ba:08:ef:94:90:81:85:1e:ff:c2:66:1e:9f:53:81:58:
43:02:f7:ac:e3:76:d1:dc:9b:6a:61:ae:d7:99:ba:2e:57:d7:
c1:09:e5:3f:19:63:0f:89:da:4c:d9:cf:bc:39:c8:2d:91:c9:
05:a5:27:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDk4wCiFF88WKpPJO2aDkLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjYwOTI3MjIwMTE3WhcNMjYwOTI4MjIwMTE3WjAzMTEwLwYDVQQD
EyhjYTczYmUwMjE1ZTI5ZGVjOTZkMGMxMGQ5NDA4OWI1YjExYmQyODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+4SI4oq3YmCyHTwcocs19w+lKnT
JQTO9/kjPwSCEk9aNIRsnLW0hwTnCJbRYGL8Nh/kyN8qm1nbjf2Se3urL8nMDi0h
K4uIER+2gDGZaIHIJlakUKnFxV5HkOfurKl9eo+i3xrKEGnrFhgHJ+U37xtOB1v2
no8olF9bSzKhGqtVjgLWGH83GzuQzqUixvtwB5oXQs+0v9k7cz8IKqCDU/lD4MHe
xuYeWm/TEVrZ+imQLn9RFsdYyJygM+lss1BCLqMpFGu4gYoFb+zLDCWlP9mB1/8B
AWRYAk77jB2nueR/yRAvCebtZNVDJTalHO+5RwIoMW7xLMDiZDiKGJ1F8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpzvgIV4p3sltDBDZQIm1sRvSh+MB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx/E1rJ8
W3Bb0l2Tuuss4cXZNMrLIQztMBx2juekslbx4P3EECAajKfFW1RmGZob9WfB+rdj
i2C2bPSifgCFAuGFqCzjpw/4tzK8eGPwkIfR18uEDl2jz91ADE0xQdKE1sPkx0kx
tK9Imsj0Rc6XBZ9MVxWpuZXCdZVqnAQcv5sceRaoyg32HIk7ivyOgU3X3qJD2ROR
Afj3PjtK2W7KlaBPRXEb3Hze795iBdItGWlXZyilAScFuAByvS5DKjQAreMnnyIv
A6e6CO+UkIGFHv/CZh6fU4FYQwL3rON20dybamGu15m6LlfXwQnlPxljD4naTNnP
vDnILZHJBaUnZg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:33:27 2026 by rpki-client