Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: 9Gt8fqsgpuqn5ZkO2ttKbqWWMROmzfbu3tl2l9WoHsc=
Subject key identifier: 24:48:07:5A:06:4E:A3:81:22:29:3C:93:E5:3F:1C:63:4D:21:5F:9D
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 01A0CFDB0E16CEB6983C7023BF1389886336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: D0
Signing time: Wed 23 Sep 2026 20:00:34 +0000
Manifest this update: Wed 23 Sep 2026 20:00:34 +0000
Manifest next update: Thu 24 Sep 2026 20:00:34 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: zGXdOV4nxw12H+zlkbSU1/xOjitbj+ka2t37jEJF+7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:0e:16:ce:b6:98:3c:70:23:bf:13:89:88:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Sep 23 20:00:34 2026 GMT
Not After : Sep 24 20:00:34 2026 GMT
Subject: CN=2448075a064ea38122293c93e53f1c634d215f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:ac:52:e2:4c:c8:a7:b2:75:5d:78:f2:04:
0e:ed:da:0a:5b:f5:a5:aa:02:4a:57:e1:a2:6b:ed:
22:83:7d:7e:33:64:97:d5:22:d8:0c:9b:dd:4f:ec:
df:83:eb:5f:7d:62:a0:d0:65:6d:9c:3f:40:d9:94:
71:1f:9b:ec:a8:70:0a:2b:95:82:7a:ed:b9:d7:4c:
5b:ce:0e:51:11:dd:58:55:a2:76:54:d1:12:25:47:
a9:10:b3:b0:14:34:db:27:b6:10:b3:9a:8f:8b:28:
09:1c:1f:26:88:b3:20:d1:4a:7a:d2:5b:c4:8d:a7:
2d:9b:80:38:cd:c1:e0:66:fd:36:cf:f1:9a:6b:d0:
2f:a1:4e:ec:17:c9:73:79:81:4c:83:59:28:f8:40:
1a:f6:e1:5e:6f:bd:c7:02:38:c0:8d:78:6e:99:bd:
f7:3b:11:e6:1c:5e:58:52:21:14:f9:60:c1:b7:93:
a2:dd:15:3f:80:b3:9c:d2:3e:2c:7f:b3:b2:95:09:
f0:28:13:ad:7f:fc:0b:3e:47:5f:7f:bf:89:4c:9e:
24:2b:ae:36:8a:50:22:24:17:2b:52:df:ef:97:be:
ab:ff:b7:83:21:db:d6:fe:64:13:93:50:e7:65:86:
40:5c:88:23:4c:d1:ac:99:00:25:c8:0d:59:29:f3:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:07:5A:06:4E:A3:81:22:29:3C:93:E5:3F:1C:63:4D:21:5F:9D
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:9c:79:43:27:c6:2f:86:11:86:62:a1:80:08:63:c8:32:
ff:27:3f:9b:0e:9a:2c:74:5d:00:8a:36:63:d3:6c:f1:80:1f:
fa:07:22:cb:96:fb:67:c1:9e:26:6d:c2:a2:34:f7:fa:ef:f1:
44:9d:80:9c:6f:a8:c5:6b:a0:56:4d:d9:1e:44:7d:0b:ed:4f:
2a:f7:e9:63:5c:3a:68:37:45:ac:fc:55:ea:d5:26:7b:4d:c4:
0f:46:ac:39:c5:83:d2:51:f8:02:24:cb:38:3c:32:6a:b2:e0:
03:79:c0:a0:70:e2:ea:8a:5e:bd:53:39:c6:40:71:a6:8b:cf:
c4:57:86:11:1e:ae:dc:bf:af:4e:35:f3:7c:d0:09:60:2f:32:
6c:de:4a:9e:58:52:ff:0c:2d:b5:3d:de:5a:ab:8f:3b:45:49:
1b:99:74:b7:e8:e2:95:55:c8:06:9a:c8:cf:e8:5c:ec:cb:39:
97:a8:74:ea:69:16:fd:af:09:05:27:18:8d:e9:a2:49:cf:91:
81:a9:33:2c:8e:e1:45:68:3d:b1:79:5f:a4:92:c0:de:ae:3a:
f2:41:a4:fb:fb:e3:87:b3:0d:8f:0b:1e:2a:d5:27:ad:47:05:
e6:d7:8a:77:1a:c0:e1:9f:cb:6d:09:a1:8c:87:df:e1:14:c4:
ad:5a:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:31:27 2026 by rpki-client