Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: cqm7J9Dn+rJRCLCHEbPASjcesnSrf3naNOb6kKU6QD0=
Subject key identifier: D9:B2:12:B9:55:BE:ED:EA:F6:D8:FB:1D:2B:D8:BE:BE:48:3A:EB:B5
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01A0C331CD6E941A04FF1D2A40C1850771D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 10E9
Signing time: Mon 21 Sep 2026 09:00:15 +0000
Manifest this update: Mon 21 Sep 2026 09:00:15 +0000
Manifest next update: Tue 22 Sep 2026 09:00:15 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 99VFU+JpW8nZgylhYAVTM45pgySRTztIHMrbm5wk/QY=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:cd:6e:94:1a:04:ff:1d:2a:40:c1:85:07:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Sep 21 09:00:15 2026 GMT
Not After : Sep 22 09:00:15 2026 GMT
Subject: CN=d9b212b955beedeaf6d8fb1d2bd8bebe483aebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:f2:5e:e2:fe:b4:6f:26:a6:94:04:80:d8:
ff:04:5b:31:43:ce:f5:da:5e:50:a5:55:4f:4f:cd:
ac:8a:8e:05:1e:e9:1b:00:ce:fc:dc:60:29:2b:77:
8e:5e:66:56:fc:9f:37:fc:98:96:25:64:f4:c8:33:
07:e3:ad:50:54:57:07:0b:17:01:d7:16:75:3e:4f:
3c:77:48:af:0b:e3:60:02:ba:20:3e:71:dc:45:ec:
4c:96:5b:ef:b7:b8:0c:b0:8f:19:6d:8e:ac:5d:ae:
be:f8:8a:1d:b6:5f:f0:d3:54:eb:38:ac:95:fd:c4:
3d:bb:07:10:d8:b0:7e:64:c3:5b:40:a1:46:90:98:
07:6b:97:67:63:28:c0:b9:f7:49:6b:0b:b7:7b:14:
18:2b:73:9c:82:2d:4b:af:f4:b2:8a:cd:09:ff:f4:
47:35:97:3d:ee:38:1f:ee:3b:8d:42:ea:da:11:9a:
82:44:e4:7c:ee:2a:c8:1a:3f:2b:22:9d:1a:c8:07:
23:1c:e0:29:f0:26:fa:e8:6f:fa:4e:50:dd:4e:fd:
98:f8:fb:ce:52:a5:36:5f:2a:da:ba:f7:b5:86:da:
d4:31:e4:e0:97:c2:89:88:af:2a:9a:ef:f0:dd:50:
df:86:c4:a5:d9:28:b4:5b:24:d3:75:09:47:b1:d9:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:12:B9:55:BE:ED:EA:F6:D8:FB:1D:2B:D8:BE:BE:48:3A:EB:B5
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:a9:98:76:5a:8a:37:92:08:f7:c9:82:af:20:c4:3f:69:
67:1f:67:01:96:55:6a:98:b5:a4:4a:59:1b:2f:67:65:18:f0:
a4:48:ea:dc:86:ed:df:56:56:d6:ed:a9:3e:b6:89:25:b1:4d:
b5:e1:b9:1c:5f:43:0c:e1:b3:9c:e1:d4:b7:f0:9e:67:64:d5:
42:57:d9:0f:fe:e0:58:d7:e5:44:3a:42:80:c2:85:54:85:1b:
df:55:0a:81:8b:95:ad:bc:cd:db:77:a4:0f:19:14:43:f5:c9:
cd:cb:9e:46:7f:fc:20:e9:a1:41:c8:2a:aa:98:db:be:5a:14:
3d:bd:56:59:85:f3:1c:94:18:7f:b0:68:8d:62:94:83:c0:c2:
95:fc:3f:f5:4b:ee:1a:78:11:49:d5:a7:ec:22:c8:70:6c:ea:
97:68:6d:17:75:ec:e5:68:9e:93:21:4e:ea:e7:88:fb:0f:8b:
b5:4b:29:ee:6f:04:4b:03:7a:15:a8:15:63:19:63:5c:f3:cc:
d6:7b:3d:a5:e7:ee:e6:39:4e:e7:e6:be:ae:81:08:53:6f:e5:
83:2f:8c:62:f2:5a:8d:93:21:6d:62:7c:8e:44:68:8f:f2:3f:
4f:81:fb:6d:11:fc:34:86:d2:43:34:41:fd:f3:43:eb:25:19:
86:08:ac:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:10 2026 by rpki-client