Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: SQtrnC04/ty2yVFbHeCbgJySNjsNrA1nkHwftaupnQI=
Subject key identifier: B4:05:5B:BF:B4:A5:62:38:7F:2B:CA:64:47:9B:A7:45:70:78:81:71
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01A0CC363A15188A6C6830B301D8543BE6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1995
Signing time: Wed 23 Sep 2026 03:01:40 +0000
Manifest this update: Wed 23 Sep 2026 03:01:40 +0000
Manifest next update: Thu 24 Sep 2026 03:01:40 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: TLjUmMigvtQly550ZLPB3E4sWvKYmvhRhcRGA0hfiKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:3a:15:18:8a:6c:68:30:b3:01:d8:54:3b:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Sep 23 03:01:40 2026 GMT
Not After : Sep 24 03:01:40 2026 GMT
Subject: CN=b4055bbfb4a562387f2bca64479ba74570788171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:16:e6:b7:05:41:da:87:f6:a1:d3:60:13:
9d:91:a7:28:59:3e:9e:ea:36:9b:1d:80:71:81:cb:
a8:1d:9b:79:70:c4:f1:32:37:f9:71:01:fd:48:04:
2f:1d:04:13:ef:86:94:dd:6c:51:7a:cf:74:54:14:
d5:72:11:cc:7e:eb:6b:91:5f:d3:4c:fb:88:97:6e:
25:75:4f:79:b8:7e:ad:7d:eb:e1:d9:ed:03:49:cc:
f8:18:d6:71:49:7a:79:f5:bc:2e:ba:62:3f:6f:86:
09:01:25:f4:fb:68:79:00:36:a9:7f:69:9f:0e:92:
08:11:56:7b:93:a0:01:54:22:6e:5c:ab:6f:33:4c:
bd:49:52:68:34:b2:a7:71:d4:51:46:7e:da:d3:c4:
4c:20:07:f2:6b:92:65:7e:8a:9e:85:5e:f2:ee:41:
e9:52:bc:80:6b:57:d9:78:e4:8e:b2:a9:d4:a3:59:
07:13:44:32:b0:48:30:a7:c5:88:c3:53:98:1c:00:
f7:88:93:53:84:d6:85:d9:a9:87:cc:ba:03:4a:b4:
db:0f:c2:61:ad:ec:dd:ff:e1:f6:dd:2a:0a:57:06:
8d:ed:1b:01:0b:f6:a2:a4:d3:70:97:a1:a2:e4:a4:
92:df:33:a0:17:48:3d:f0:83:4a:24:ba:6f:50:cb:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:5B:BF:B4:A5:62:38:7F:2B:CA:64:47:9B:A7:45:70:78:81:71
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0d:14:f5:0a:7a:81:64:d8:14:f4:bf:d6:83:5f:87:8b:c7:
73:8a:a4:dc:a9:e8:3e:90:ef:05:06:06:af:ab:27:12:71:f7:
53:79:bc:ba:70:4f:14:57:00:7a:9d:7a:d2:0f:f0:67:3c:f4:
c9:d3:2c:21:4e:93:4d:26:db:22:4b:c4:fb:5f:0d:c6:61:19:
c3:92:57:0d:4c:56:e4:25:62:0a:5b:33:92:a8:e0:9d:88:ae:
f2:5d:b9:ff:c9:83:03:02:33:f2:48:34:75:b7:65:a6:a5:a1:
33:6f:2c:68:cf:c1:cf:ea:9c:83:f5:71:41:ac:e3:10:e6:a2:
fa:33:49:07:6a:8e:d1:b2:dc:87:cd:35:53:73:3d:7b:10:de:
98:26:6f:a6:12:6d:81:55:e9:b5:23:d2:b7:7a:0a:ed:cc:47:
c7:b5:b3:83:03:1e:13:b7:20:88:c1:88:e6:3e:cb:3e:9f:87:
af:1a:fa:50:72:7b:6a:bf:d9:e8:75:5b:0c:89:d1:93:53:ac:
35:f7:89:3c:68:68:8e:a1:c8:cf:6a:38:40:4b:f7:70:35:23:
e5:16:7e:01:68:33:a9:53:44:5a:c2:b4:a5:10:48:f0:9f:aa:
21:c0:50:82:de:3c:e1:f7:78:ac:a1:2a:28:07:1e:70:a5:1c:
b1:3a:fb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNjoVGIpsaDCzAdhUO+b8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjYwOTIzMDMwMTQwWhcNMjYwOTI0MDMwMTQwWjAzMTEwLwYDVQQD
EyhiNDA1NWJiZmI0YTU2MjM4N2YyYmNhNjQ0NzliYTc0NTcwNzg4MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxoW5rcFQdqH9qHTYBOdkacoWT6e
6jabHYBxgcuoHZt5cMTxMjf5cQH9SAQvHQQT74aU3WxRes90VBTVchHMfutrkV/T
TPuIl24ldU95uH6tfevh2e0DScz4GNZxSXp59bwuumI/b4YJASX0+2h5ADapf2mf
DpIIEVZ7k6ABVCJuXKtvM0y9SVJoNLKncdRRRn7a08RMIAfya5JlfoqehV7y7kHp
UryAa1fZeOSOsqnUo1kHE0QysEgwp8WIw1OYHAD3iJNThNaF2amHzLoDSrTbD8Jh
rezd/+H23SoKVwaN7RsBC/aipNNwl6Gi5KSS3zOgF0g98INKJLpvUMv5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQFW7+0pWI4fyvKZEebp0VweIFxMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMg0U9Qp6
gWTYFPS/1oNfh4vHc4qk3KnoPpDvBQYGr6snEnH3U3m8unBPFFcAep160g/wZzz0
ydMsIU6TTSbbIkvE+18NxmEZw5JXDUxW5CViClszkqjgnYiu8l25/8mDAwIz8kg0
dbdlpqWhM28saM/Bz+qcg/VxQazjEOai+jNJB2qO0bLch801U3M9exDemCZvphJt
gVXptSPSt3oK7cxHx7WzgwMeE7cgiMGI5j7LPp+Hrxr6UHJ7ar/Z6HVbDInRk1Os
NfeJPGhojqHIz2o4QEv3cDUj5RZ+AWgzqVNEWsK0pRBI8J+qIcBQgt484fd4rKEq
KAcecKUcsTr7xQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:27:08 2026 by rpki-client