Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: teiLsENn74fnAu57ltL2kyzcmWDrPPkl7AxIGvdEKpA=
Subject key identifier: D5:93:8A:05:45:67:51:19:92:EE:65:6D:D7:4C:F3:BC:C7:D3:7A:C7
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01A0D2A652B89850406A1EC7A1A290311217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0B45
Signing time: Thu 24 Sep 2026 09:01:50 +0000
Manifest this update: Thu 24 Sep 2026 09:01:50 +0000
Manifest next update: Fri 25 Sep 2026 09:01:50 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: vEaxqvIs+SdguQxv0OPg6Erp/z1qdIEn1yw1qHwGr1Y=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:52:b8:98:50:40:6a:1e:c7:a1:a2:90:31:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Sep 24 09:01:50 2026 GMT
Not After : Sep 25 09:01:50 2026 GMT
Subject: CN=d5938a054567511992ee656dd74cf3bcc7d37ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:2b:b9:9b:36:4b:f2:d4:00:f5:ed:91:f9:
4f:71:7c:d9:09:d5:db:50:78:ea:5a:0d:dc:44:27:
cf:34:15:12:6d:4f:da:d0:45:b7:d2:7d:cf:a8:da:
11:77:9d:fe:c0:66:4c:48:44:40:b9:96:e6:2d:f1:
0c:47:79:74:cf:f0:31:72:b1:c0:1d:4d:95:3e:3f:
ef:f6:03:22:21:ec:76:3b:cc:9b:69:31:b6:a4:eb:
4e:59:f2:b7:29:d4:76:6d:41:ae:01:9c:14:f8:a3:
ff:c0:4a:33:68:15:3c:c8:8d:34:60:86:6d:d2:f8:
32:91:36:2e:bd:fb:04:9e:ee:cf:73:96:5d:ae:1d:
e6:2a:55:f2:7b:10:e3:36:4e:f7:d4:e4:8b:c3:e9:
68:ee:00:05:d2:83:a7:c7:23:3e:95:c9:d9:77:49:
4e:13:5c:f0:6c:e0:b9:27:3a:8d:78:d4:97:c1:e2:
a4:0e:17:17:6a:53:ac:09:e0:c6:21:68:b5:05:c4:
8a:12:e8:8d:21:17:8b:28:a6:1a:e6:b7:c7:bc:3a:
79:e5:01:53:f4:21:7d:b9:e0:84:87:18:38:13:09:
b1:b5:8b:76:53:96:50:24:1f:a2:0c:52:2b:5b:a9:
c0:4f:5a:18:92:67:c4:37:0b:b0:14:01:d7:4a:a6:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:8A:05:45:67:51:19:92:EE:65:6D:D7:4C:F3:BC:C7:D3:7A:C7
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:72:ad:6f:cc:38:c7:70:cc:f7:b6:20:97:73:0f:57:ce:
35:30:ea:12:fa:ab:0b:83:69:e0:a1:34:aa:16:66:29:f8:59:
3f:a8:d8:21:3f:4a:9e:8a:30:ae:3d:f2:2c:e3:dc:5f:68:97:
ea:d6:9d:cd:f1:9f:86:76:6c:d7:b3:a0:ba:2a:25:df:15:ed:
64:61:dd:ac:f8:24:70:e1:52:d5:32:5b:a1:92:22:a5:0f:dc:
69:26:67:1d:f9:64:a2:ea:6a:9f:11:2f:24:57:8e:2e:2b:2d:
f3:79:23:98:a7:e9:fd:3e:03:4a:0e:ec:cc:6c:c2:9f:2b:75:
a4:f6:ab:e6:ca:0d:df:27:cd:89:2f:70:67:38:74:fa:5b:cd:
ab:9c:58:61:4d:11:23:01:3e:ef:d1:c6:b3:f0:f3:92:db:65:
7f:60:76:83:38:97:37:46:f4:5a:ee:9b:c3:3e:44:2c:11:8f:
98:c5:0d:37:58:73:bc:55:d3:9b:53:a7:4e:e5:3f:d6:8c:be:
59:e3:9f:7b:9a:99:f0:40:23:a8:01:66:ae:ce:5e:10:f0:93:
69:77:e1:2c:e4:de:45:07:88:99:96:bb:7c:c3:92:de:f8:8c:
c5:6c:c2:85:56:57:f1:a1:fe:81:f5:b4:48:02:da:d8:e0:f2:
0f:b4:8b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSplK4mFBAah7HoaKQMRIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh
NTAxZTAwHhcNMjYwOTI0MDkwMTUwWhcNMjYwOTI1MDkwMTUwWjAzMTEwLwYDVQQD
EyhkNTkzOGEwNTQ1Njc1MTE5OTJlZTY1NmRkNzRjZjNiY2M3ZDM3YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcwruZs2S/LUAPXtkflPcXzZCdXb
UHjqWg3cRCfPNBUSbU/a0EW30n3PqNoRd53+wGZMSERAuZbmLfEMR3l0z/AxcrHA
HU2VPj/v9gMiIex2O8ybaTG2pOtOWfK3KdR2bUGuAZwU+KP/wEozaBU8yI00YIZt
0vgykTYuvfsEnu7Pc5Zdrh3mKlXyexDjNk731OSLw+lo7gAF0oOnxyM+lcnZd0lO
E1zwbOC5JzqNeNSXweKkDhcXalOsCeDGIWi1BcSKEuiNIReLKKYa5rfHvDp55QFT
9CF9ueCEhxg4EwmxtYt2U5ZQJB+iDFIrW6nAT1oYkmfENwuwFAHXSqYfVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWTigVFZ1EZku5lbddM87zH03rHMB8GA1UdIwQY
MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt
OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0
LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFZyrW/M
OMdwzPe2IJdzD1fONTDqEvqrC4Np4KE0qhZmKfhZP6jYIT9Knoowrj3yLOPcX2iX
6tadzfGfhnZs17Oguiol3xXtZGHdrPgkcOFS1TJboZIipQ/caSZnHflkoupqnxEv
JFeOList83kjmKfp/T4DSg7szGzCnyt1pPar5soN3yfNiS9wZzh0+lvNq5xYYU0R
IwE+79HGs/Dzkttlf2B2gziXN0b0Wu6bwz5ELBGPmMUNN1hzvFXTm1OnTuU/1oy+
WeOfe5qZ8EAjqAFmrs5eEPCTaXfhLOTeRQeImZa7fMOS3viMxWzChVZX8aH+gfW0
SALa2ODyD7SLzg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:40:33 2026 by rpki-client