Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: VxRolBRPXGZn+f/ZjtZzk0Ba7pOiXQDvfmU6HP73yV4=
Subject key identifier: 88:C8:00:1E:A1:14:58:7A:E8:C2:A5:C1:3F:7F:96:27:05:19:32:4B
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 01A0CFA4202E8FDDC3E5EB54F6985549EAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:00:34 +0000
Manifest this update: Wed 23 Sep 2026 19:00:34 +0000
Manifest next update: Thu 24 Sep 2026 19:00:34 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: C10gTJ2kBL1ly9YjL7mIpkPMdkPKfx8uUXsbhp1LNYQ=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:20:2e:8f:dd:c3:e5:eb:54:f6:98:55:49:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Sep 23 19:00:34 2026 GMT
Not After : Sep 24 19:00:34 2026 GMT
Subject: CN=88c8001ea114587ae8c2a5c13f7f96270519324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:04:3c:96:a9:08:47:6c:c2:c0:cd:5a:8c:
c6:56:89:80:d9:c9:01:3b:5f:f7:6d:fe:48:2e:72:
cc:00:c6:0c:57:49:ad:45:1b:16:48:2a:f8:42:5f:
f8:b3:b1:85:ce:19:6e:03:73:00:9b:5e:75:b5:50:
eb:f5:02:6e:8e:67:9c:1f:d6:21:6f:39:a8:bf:41:
48:af:b1:ed:40:f8:fb:81:5a:56:ca:ab:09:30:a4:
92:12:54:91:cd:79:35:70:52:6c:16:67:06:92:a9:
b6:de:e5:74:20:2d:db:c7:02:a2:78:e1:8a:98:79:
f8:24:96:04:0e:0b:1b:a0:ef:f7:b4:21:d0:ca:ef:
de:89:e9:1f:9d:c5:d2:5e:a4:66:fb:1b:f9:e0:45:
66:45:69:f7:57:72:ba:4e:74:26:aa:4f:d1:27:4d:
d0:70:21:3a:70:7c:11:2d:b0:af:f7:56:8e:64:2a:
11:5e:4f:17:68:b4:e5:d7:54:ec:72:25:51:90:50:
40:b1:25:3a:54:26:9d:a5:b2:ca:69:ca:5f:9b:73:
29:a7:10:3a:d6:2e:8e:c8:3d:ea:bc:59:87:ca:5b:
5d:25:08:02:4b:89:49:5b:1b:56:02:b0:8a:cc:d0:
43:a2:e3:06:64:4a:00:63:15:69:8c:ef:22:67:b1:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:00:1E:A1:14:58:7A:E8:C2:A5:C1:3F:7F:96:27:05:19:32:4B
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:0f:aa:7c:f6:c7:3d:f3:48:a9:09:d6:d8:83:56:d5:89:
ef:94:b7:ed:7a:a6:06:23:74:18:b7:3f:85:70:b3:54:68:8c:
b0:98:6c:b7:d5:47:5c:46:25:dd:f1:82:43:94:08:de:d7:01:
21:8f:08:b0:ab:a8:3f:a0:c2:4a:19:62:e9:6b:22:92:a2:ec:
fd:6f:d6:6a:6f:51:5d:b8:7d:f3:8c:52:bd:1a:96:bd:c7:61:
52:9f:96:6d:b5:5a:cc:a1:0b:e2:a7:7c:26:07:09:00:d4:cf:
64:09:f4:e5:54:aa:e5:25:0b:75:b8:20:b6:44:dd:5d:09:49:
c9:5e:70:dd:55:58:ac:9b:2b:c1:6a:1a:bc:4a:94:20:d6:87:
5e:85:9f:96:f3:18:c9:e7:d3:5d:08:0c:71:29:1c:8e:32:63:
49:9d:70:8b:53:a4:a2:fc:29:c5:d4:48:c1:ec:7e:2c:8a:b9:
75:9e:a6:d5:8c:9e:73:d0:20:8b:4b:b3:8c:5c:ff:0a:a2:ae:
36:a1:24:90:7d:93:c7:1e:fa:41:28:8d:52:2d:e7:9c:0f:33:
9a:61:f0:a1:5e:6f:ba:76:2f:a8:dd:6e:27:13:97:ee:b9:25:
4e:53:29:24:9a:bb:42:fa:7b:48:8b:95:dc:fd:00:d0:9a:56:
1a:88:c2:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpCAuj93D5etU9phVSer6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj
NTVhNGEwHhcNMjYwOTIzMTkwMDM0WhcNMjYwOTI0MTkwMDM0WjAzMTEwLwYDVQQD
Eyg4OGM4MDAxZWExMTQ1ODdhZThjMmE1YzEzZjdmOTYyNzA1MTkzMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7cEPJapCEdswsDNWozGVomA2ckB
O1/3bf5ILnLMAMYMV0mtRRsWSCr4Ql/4s7GFzhluA3MAm151tVDr9QJujmecH9Yh
bzmov0FIr7HtQPj7gVpWyqsJMKSSElSRzXk1cFJsFmcGkqm23uV0IC3bxwKieOGK
mHn4JJYEDgsboO/3tCHQyu/eiekfncXSXqRm+xv54EVmRWn3V3K6TnQmqk/RJ03Q
cCE6cHwRLbCv91aOZCoRXk8XaLTl11TsciVRkFBAsSU6VCadpbLKacpfm3MppxA6
1i6OyD3qvFmHyltdJQgCS4lJWxtWArCKzNBDouMGZEoAYxVpjO8iZ7FD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjIAB6hFFh66MKlwT9/licFGTJLMB8GA1UdIwQY
MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt
YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj
LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxEPqnz2
xz3zSKkJ1tiDVtWJ75S37XqmBiN0GLc/hXCzVGiMsJhst9VHXEYl3fGCQ5QI3tcB
IY8IsKuoP6DCShli6WsikqLs/W/Wam9RXbh984xSvRqWvcdhUp+WbbVazKEL4qd8
JgcJANTPZAn05VSq5SULdbggtkTdXQlJyV5w3VVYrJsrwWoavEqUINaHXoWflvMY
yefTXQgMcSkcjjJjSZ1wi1OkovwpxdRIwex+LIq5dZ6m1Yyec9Agi0uzjFz/CqKu
NqEkkH2Txx76QSiNUi3nnA8zmmHwoV5vunYvqN1uJxOX7rklTlMpJJq7Qvp7SIuV
3P0A0JpWGojC/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:18:50 2026 by rpki-client