Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: sOugn6RM7lz7H5F88mLParNyf+Ooqj8QDYD3EO4CQTg=
Subject key identifier: FD:CD:BE:63:07:AB:D1:C7:87:E8:C4:40:E2:9F:F1:D7:AD:34:28:9B
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01A0C8C69BC3BAB0342BC9B0F0C4835A9CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0BC5
Signing time: Tue 22 Sep 2026 11:00:53 +0000
Manifest this update: Tue 22 Sep 2026 11:00:53 +0000
Manifest next update: Wed 23 Sep 2026 11:00:53 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: eHv0i1cQ2PtdUlutm5VKNvQMkvqXhfa1BymgWK+4GHw=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:9b:c3:ba:b0:34:2b:c9:b0:f0:c4:83:5a:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Sep 22 11:00:53 2026 GMT
Not After : Sep 23 11:00:53 2026 GMT
Subject: CN=fdcdbe6307abd1c787e8c440e29ff1d7ad34289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:24:a5:a2:4a:5e:c2:9e:d3:c5:6e:34:80:
d7:1c:ff:e7:22:03:3d:63:2f:e4:b6:a4:7d:32:6d:
e8:66:d4:c9:a2:72:2a:24:63:ce:8e:0e:f4:f9:05:
f7:c3:9f:1b:c1:36:d1:cb:bc:9f:3d:73:0d:04:ad:
45:43:65:30:78:70:8f:7c:c1:b3:30:06:f9:33:49:
6c:da:76:55:65:73:da:81:ad:ef:88:bc:b8:34:b7:
04:7e:1e:68:29:1d:0d:3e:cf:a3:b1:80:c4:a9:4e:
b1:0c:0b:29:b7:10:7c:a2:a7:45:da:d7:90:58:4a:
ba:e4:87:f2:95:f2:11:d5:f2:cd:76:80:b2:0f:bf:
6a:72:5a:86:0c:cf:9e:3d:4f:07:be:bb:c2:92:e3:
d0:af:ba:a7:5b:c8:ef:08:e9:d1:16:e2:e8:a7:73:
ba:80:53:fe:ee:d9:2b:3c:11:32:fe:d3:8a:01:b5:
97:a1:70:e3:92:7c:f8:5e:9a:d1:cd:68:d4:e9:6c:
9b:a5:37:19:47:eb:7d:85:1f:ae:66:d6:13:73:86:
df:ed:e3:34:2d:db:d9:3a:aa:85:24:9c:b9:c1:b3:
ef:ba:f4:66:ac:f2:93:d3:43:31:1c:fa:c4:3d:bd:
f1:6f:8b:d2:bb:e1:60:c8:5e:2e:73:81:e7:7c:d9:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:BE:63:07:AB:D1:C7:87:E8:C4:40:E2:9F:F1:D7:AD:34:28:9B
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:d0:44:e6:ba:b5:b1:84:e0:d4:17:04:83:17:f4:fe:f5:
ed:fd:d2:c9:77:91:8f:40:68:66:a0:8f:fa:28:20:86:69:ef:
c8:dc:e2:6d:87:97:aa:85:57:f9:53:56:7a:50:88:22:46:8f:
a4:c8:4e:85:db:b2:f7:b4:12:18:29:f6:01:cb:30:48:99:dc:
be:45:48:4f:de:d5:2b:97:6d:25:a6:2b:73:85:80:cb:55:37:
ac:8a:e0:a6:8e:15:7e:bf:82:28:d1:93:ef:b7:b6:9a:3e:f4:
5f:cf:77:f4:70:e8:3e:80:a9:b0:f4:b5:25:5e:f6:41:db:c9:
58:d5:1b:f3:ac:54:60:87:b2:ab:4c:05:a7:ae:02:a3:10:35:
95:1a:28:b8:58:76:11:f5:d2:c1:1d:42:66:96:ec:00:4c:4f:
dc:03:ed:49:e2:83:ff:4a:cf:e2:09:46:c4:06:8e:18:88:4b:
0f:79:46:a2:e5:74:1c:ed:0f:b1:ab:91:f1:69:99:3a:f1:83:
6b:32:25:e0:e5:52:7d:29:72:95:be:f8:0a:e1:79:8e:51:87:
22:5e:7d:7f:cc:eb:90:7d:1d:eb:e0:8b:0f:01:68:7a:18:22:
89:af:4e:45:57:58:b0:1e:ef:44:d3:e3:8e:7e:f0:a6:2f:f9:
2f:c6:38:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxpvDurA0K8mw8MSDWpzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjYwOTIyMTEwMDUzWhcNMjYwOTIzMTEwMDUzWjAzMTEwLwYDVQQD
EyhmZGNkYmU2MzA3YWJkMWM3ODdlOGM0NDBlMjlmZjFkN2FkMzQyODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8kpaJKXsKe08VuNIDXHP/nIgM9
Yy/ktqR9Mm3oZtTJonIqJGPOjg70+QX3w58bwTbRy7yfPXMNBK1FQ2UweHCPfMGz
MAb5M0ls2nZVZXPaga3viLy4NLcEfh5oKR0NPs+jsYDEqU6xDAsptxB8oqdF2teQ
WEq65IfylfIR1fLNdoCyD79qclqGDM+ePU8HvrvCkuPQr7qnW8jvCOnRFuLop3O6
gFP+7tkrPBEy/tOKAbWXoXDjknz4XprRzWjU6WybpTcZR+t9hR+uZtYTc4bf7eM0
LdvZOqqFJJy5wbPvuvRmrPKT00MxHPrEPb3xb4vSu+FgyF4uc4HnfNlZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3NvmMHq9HHh+jEQOKf8detNCibMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTDQROa6
tbGE4NQXBIMX9P717f3SyXeRj0BoZqCP+igghmnvyNzibYeXqoVX+VNWelCIIkaP
pMhOhduy97QSGCn2AcswSJncvkVIT97VK5dtJaYrc4WAy1U3rIrgpo4Vfr+CKNGT
77e2mj70X8939HDoPoCpsPS1JV72QdvJWNUb86xUYIeyq0wFp64CoxA1lRoouFh2
EfXSwR1CZpbsAExP3APtSeKD/0rP4glGxAaOGIhLD3lGouV0HO0PsauR8WmZOvGD
azIl4OVSfSlylb74CuF5jlGHIl59f8zrkH0d6+CLDwFoehgiia9ORVdYsB7vRNPj
jn7wpi/5L8Y4eg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:39 2026 by rpki-client