Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: h8SSTRbu0zx4mbAsMcKkLEU4N57+xNM5sDOh8wtfJjA=
Subject key identifier: 1B:2F:DA:08:20:E4:44:73:BB:53:F9:54:56:36:FD:61:58:19:EF:21
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A0C2FB6571DD8223F394E60EA5187C24A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: BB
Signing time: Mon 21 Sep 2026 08:00:50 +0000
Manifest this update: Mon 21 Sep 2026 08:00:50 +0000
Manifest next update: Tue 22 Sep 2026 08:00:50 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: a5vx8TLorQdE39+Abt7oXLLKwz33sG0+0cYaRFjT900=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:65:71:dd:82:23:f3:94:e6:0e:a5:18:7c:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Sep 21 08:00:50 2026 GMT
Not After : Sep 22 08:00:50 2026 GMT
Subject: CN=1b2fda0820e44473bb53f9545636fd615819ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:e8:9a:0c:23:46:30:e5:23:74:09:92:b7:
26:fd:ff:6c:45:25:3b:a6:e3:da:13:43:5b:19:73:
01:92:f7:cd:9e:e3:d1:f8:71:20:b8:bc:f4:7c:ff:
8f:13:fb:10:08:28:54:a3:4d:8f:c7:3f:0b:46:98:
30:82:8d:0d:63:31:ee:bf:17:01:3f:d9:a4:3c:0f:
c5:2d:41:8c:c9:2d:75:dd:97:05:15:d5:4f:e6:a2:
df:d4:c8:0a:a8:86:38:6d:e7:74:e1:15:28:14:6d:
a1:c2:ab:ba:6e:b1:a4:0f:47:02:f0:e4:4d:91:1d:
2d:e4:73:fe:ba:ca:da:e3:7f:f6:8e:1b:db:f9:f8:
5b:30:89:2a:80:63:cd:e4:82:48:16:25:10:0f:50:
ef:68:8a:20:05:1d:ca:53:c9:a3:00:d7:ea:e8:01:
87:3a:cf:02:33:05:4d:fb:82:be:8c:31:e2:31:a5:
0b:53:36:0f:1c:2f:74:a0:d2:80:e5:ed:9b:b0:0b:
8e:0f:3d:0a:3c:67:d5:60:1e:b4:cd:e2:32:ff:b9:
87:8f:55:70:ef:e0:22:0a:de:db:c7:b0:70:b3:d3:
4d:61:ed:41:69:1f:88:9d:2f:43:78:0a:43:ec:9b:
6d:84:63:3a:f7:71:cb:4c:05:5b:ca:c1:09:52:07:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:DA:08:20:E4:44:73:BB:53:F9:54:56:36:FD:61:58:19:EF:21
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:03:94:d3:f7:e2:b8:e1:bb:0c:14:ce:62:3e:30:f7:97:93:
83:2f:25:54:89:b7:51:b4:88:0a:e5:ed:23:c0:09:43:96:d4:
a8:2d:98:65:ed:a8:6d:05:85:80:1f:7d:7a:63:14:33:7f:e1:
6a:42:eb:5d:50:f8:28:8d:63:fe:fe:6c:7d:96:c6:88:1a:14:
8b:f6:dd:37:98:48:f3:7d:39:e6:c0:e7:c7:69:0a:35:54:20:
59:9d:83:04:a8:11:b0:a1:b3:6d:26:b8:73:6c:86:4f:f2:f0:
61:99:43:1d:d4:b0:d3:8f:46:9f:7b:4c:0b:6b:5a:6a:56:c8:
0c:7d:b2:c5:c2:af:32:8b:3e:3d:c5:8d:8c:9d:e1:55:00:b0:
01:b0:f9:a4:ce:06:8f:b2:74:26:41:e2:08:c9:4c:b5:2d:94:
d6:21:63:23:ee:8f:1a:ab:05:26:c2:71:7f:bb:38:82:ab:ff:
4c:ee:fa:7f:89:45:7b:88:22:b9:c5:49:b4:a0:41:e8:a5:46:
c7:19:d1:cc:54:48:f4:03:cb:12:5c:9d:5c:57:e3:ce:5b:26:
73:d5:99:c6:4a:8c:3d:80:3e:92:a1:bc:6a:17:96:3f:fc:65:
1e:9c:d0:32:d9:55:bf:a2:bf:96:33:a1:b7:43:b6:7c:41:0c:
d6:0f:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:15 2026 by rpki-client