Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: YbTwH4ZudKXJW61TKxjbaFrxoLm5qg0SV8RRnd3QxTQ=
Subject key identifier: 6E:53:B7:B0:A5:7E:CB:42:62:FF:75:25:71:32:9C:0A:A7:34:38:30
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A0C4E93AEBDC4F5CCFF0CE79F1B35C1B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 17:00:14 +0000
Manifest this update: Mon 21 Sep 2026 17:00:14 +0000
Manifest next update: Tue 22 Sep 2026 17:00:14 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: LpjRQ0/NuLduxSKbrE6Z3blTMx4XSUWZMRJ11JSS7jY=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:3a:eb:dc:4f:5c:cf:f0:ce:79:f1:b3:5c:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Sep 21 17:00:14 2026 GMT
Not After : Sep 22 17:00:14 2026 GMT
Subject: CN=6e53b7b0a57ecb4262ff752571329c0aa7343830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:34:c9:16:ce:b0:57:45:40:29:bf:2b:5e:
05:ad:be:08:6b:e8:7a:0f:ce:c7:01:ad:95:77:78:
8e:70:54:cd:87:b5:fb:b3:f1:25:d0:33:86:bd:a2:
1b:d1:dd:46:ec:61:bb:74:c2:1c:ca:ab:c6:17:e7:
5e:02:64:14:7e:37:d9:cd:0d:51:da:96:25:d0:3d:
63:97:16:5d:bd:09:ee:63:48:b9:27:77:11:b8:ff:
9a:b9:31:9c:38:41:6c:ab:3f:a7:78:0a:b9:af:76:
3f:0d:9e:e9:57:5e:e8:46:fd:ce:a7:a1:3a:c3:64:
be:2d:3e:f4:d2:80:0e:48:8e:80:e1:65:ee:58:68:
15:7c:45:bd:4a:13:27:c8:2f:b3:26:02:14:5b:cc:
9d:b3:82:d5:64:a8:24:ff:d1:f0:b6:97:35:e8:ad:
fe:88:8a:cf:a4:e5:70:c1:4d:45:bf:b6:ea:49:95:
95:56:64:cb:a8:21:f7:78:e9:0e:41:e9:89:61:c2:
7e:0e:58:a2:6f:e0:cb:4a:50:d8:54:ba:f9:e5:45:
55:0e:42:37:9c:dd:f4:73:11:8d:4b:4d:2d:41:a5:
7c:7b:a6:6a:e5:ac:eb:fe:00:c0:8e:91:1a:a5:87:
33:4a:a7:25:75:2f:4b:d0:37:fe:ed:7c:3c:17:33:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:B7:B0:A5:7E:CB:42:62:FF:75:25:71:32:9C:0A:A7:34:38:30
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:99:46:6f:3c:ab:ca:06:2b:dd:86:89:90:e7:0b:29:f5:
f8:95:38:2a:89:a4:cd:cb:a8:64:00:79:0e:d1:79:ba:d7:e7:
37:a9:d8:56:a2:64:40:30:4d:0b:dc:23:51:d1:9d:f1:aa:77:
25:d9:99:fc:d6:e5:d2:ac:5d:b1:47:93:96:e2:ca:d1:4c:27:
24:69:af:87:75:37:2b:e1:34:49:cd:95:91:6a:ab:c9:ff:03:
fa:00:c1:a8:b8:c1:98:b6:f3:cb:a5:27:f8:f0:43:58:e9:c2:
a9:4f:81:52:f2:31:64:71:ea:95:87:13:2f:ad:59:c0:21:22:
12:6c:b6:8a:0b:ce:50:0a:26:d1:bb:6f:0a:2e:ac:cf:a2:7d:
72:94:ec:76:ec:95:65:79:bb:cc:de:b6:d8:6f:f0:aa:81:b8:
24:36:e3:b3:18:77:f8:02:fc:2a:64:2b:53:74:c1:be:dd:8e:
62:fc:d3:ae:fd:51:ea:9f:8a:e6:d6:6e:a9:94:9b:a1:73:66:
76:36:0c:a8:e8:b2:a0:a1:19:9f:80:56:8d:8f:84:20:b1:1e:
c6:dd:ae:2b:4d:ac:18:19:9d:98:11:4b:f6:12:aa:e9:7b:a7:
c0:2f:13:bc:0f:d6:21:3a:ed:63:d3:28:88:59:c8:8f:2c:52:
2c:1e:90:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6Trr3E9cz/DOefGzXBthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmE5ZWY4MTBlZGFhZjUyNDUzZDI4MzczZWYwZjc5YjA5
YmQ2M2QwHhcNMjYwOTIxMTcwMDE0WhcNMjYwOTIyMTcwMDE0WjAzMTEwLwYDVQQD
Eyg2ZTUzYjdiMGE1N2VjYjQyNjJmZjc1MjU3MTMyOWMwYWE3MzQzODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lg0yRbOsFdFQCm/K14Frb4Ia+h6
D87HAa2Vd3iOcFTNh7X7s/El0DOGvaIb0d1G7GG7dMIcyqvGF+deAmQUfjfZzQ1R
2pYl0D1jlxZdvQnuY0i5J3cRuP+auTGcOEFsqz+neAq5r3Y/DZ7pV17oRv3Op6E6
w2S+LT700oAOSI6A4WXuWGgVfEW9ShMnyC+zJgIUW8yds4LVZKgk/9Hwtpc16K3+
iIrPpOVwwU1Fv7bqSZWVVmTLqCH3eOkOQemJYcJ+Dliib+DLSlDYVLr55UVVDkI3
nN30cxGNS00tQaV8e6Zq5azr/gDAjpEapYczSqcldS9L0Df+7Xw8FzNnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5Tt7ClfstCYv91JXEynAqnNDgwMB8GA1UdIwQY
MBaAFMtqnvgQ7ar1JFPSg3PvD3mwm9Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgt
NGEzZTFmYjlhYWU5LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgtNGEzZTFmYjlhYWU5
LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuiZRm88
q8oGK92GiZDnCyn1+JU4KomkzcuoZAB5DtF5utfnN6nYVqJkQDBNC9wjUdGd8ap3
JdmZ/Nbl0qxdsUeTluLK0UwnJGmvh3U3K+E0Sc2VkWqryf8D+gDBqLjBmLbzy6Un
+PBDWOnCqU+BUvIxZHHqlYcTL61ZwCEiEmy2igvOUAom0btvCi6sz6J9cpTsduyV
ZXm7zN622G/wqoG4JDbjsxh3+AL8KmQrU3TBvt2OYvzTrv1R6p+K5tZuqZSboXNm
djYMqOiyoKEZn4BWjY+EILEext2uK02sGBmdmBFL9hKq6XunwC8TvA/WITrtY9Mo
iFnIjyxSLB6Q5g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:27:33 2026 by rpki-client