Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier: ED7lnzCjoGwCh9B2CUc0FuVSgRG78xi0XGsedPpr1pc=
Subject key identifier: 3A:B7:19:E2:41:3D:50:38:5E:93:61:30:9C:2D:F6:6F:01:3C:2E:BF
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial: 01A128436C878776BE44253CCE6BEB8AA101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number: 02C1
Signing time: Sun 11 Oct 2026 00:01:09 +0000
Manifest this update: Sun 11 Oct 2026 00:01:09 +0000
Manifest next update: Mon 12 Oct 2026 00:01:09 +0000
Files and hashes: 1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: N6vhW+E5ufeFiwfWAABnNsIeB0dxuMgSGGuzV9z8ZWU=)
3: v-DfpxyzzKxt20fKpcz-d2vnkjE.roa (hash: bVMoY+WNqxOIWzjaGvX9XGjb85s1gnx8ahnPJ/Q8OBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:6c:87:87:76:be:44:25:3c:ce:6b:eb:8a:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Validity
Not Before: Oct 11 00:01:09 2026 GMT
Not After : Oct 12 00:01:09 2026 GMT
Subject: CN=3ab719e2413d50385e9361309c2df66f013c2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:16:40:9e:7e:6f:25:db:23:bd:b8:a1:77:
57:05:f7:22:9d:93:37:70:f1:6c:32:f0:13:92:97:
00:3d:a3:7d:50:28:65:cd:e1:e9:a9:13:13:b2:3e:
77:d9:be:25:a1:52:d4:0b:92:cf:f9:07:e3:b3:8e:
7f:37:6d:0d:28:d5:c3:1e:8e:0b:4d:b0:60:1a:fe:
e8:c7:e8:75:b6:3b:d5:23:b3:33:65:e1:d7:20:0d:
33:94:f0:0c:fa:39:a1:82:8c:a9:5d:21:ba:7e:2f:
f5:f9:2c:a4:df:ef:9b:f2:c3:30:4a:04:a2:30:9f:
3a:d6:9b:ec:db:da:e8:7f:e4:73:cc:eb:d7:29:a9:
31:8f:49:e5:48:9f:a8:42:d3:43:27:74:f6:2f:7b:
7f:13:d7:1e:c5:e4:a5:da:53:04:f3:cb:17:10:6e:
cd:6f:b8:e5:a1:77:2e:c3:a6:30:45:ac:00:44:a4:
62:1f:08:a1:7b:f6:dc:5f:fe:16:bf:74:a0:0f:11:
e8:70:71:93:47:f0:87:55:52:d3:da:36:ba:08:77:
80:bb:9e:bd:cd:a0:29:e2:c4:a6:13:c3:40:da:6c:
71:51:88:24:ce:a7:95:9b:72:29:22:85:42:f4:3e:
b5:4a:72:ae:62:62:9d:05:02:ab:bc:85:7c:6e:e6:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:19:E2:41:3D:50:38:5E:93:61:30:9C:2D:F6:6F:01:3C:2E:BF
X509v3 Authority Key Identifier:
keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:2a:6a:41:ac:e6:2e:04:c2:50:d7:ea:cb:48:14:2f:9a:
78:9f:e7:55:9c:36:d0:63:cd:78:3a:fc:79:02:0a:17:7f:0c:
49:31:ae:6b:ef:9f:6a:2c:b4:cf:3f:a5:68:99:a1:ee:d8:6c:
c2:07:ce:48:35:8a:c0:2b:99:71:ec:d7:14:db:6b:1e:09:cc:
31:4b:d6:50:67:c7:31:7e:11:3f:67:52:1d:8e:ec:4b:c6:17:
2a:a4:82:cd:cc:3a:a2:7e:c8:14:e3:11:74:cd:d2:c1:27:85:
51:96:81:ba:4a:dd:c4:06:a1:c7:a0:91:f4:5a:e5:31:7a:f1:
d2:ca:7f:f2:e9:14:68:33:79:84:13:33:8a:0e:29:0e:cd:f9:
ca:0a:78:df:b6:6f:41:dc:6f:e1:d3:0e:9d:39:09:1d:19:42:
3c:c7:bc:43:2a:fb:9a:c3:b0:2a:fb:8c:18:ee:ea:d6:f2:14:
14:3d:0c:62:c3:48:d3:5c:81:1a:65:7f:0c:dd:a8:09:27:56:
91:49:97:8d:cb:cb:0f:b3:71:98:68:51:58:32:35:ac:48:7c:
19:27:32:08:59:c2:c4:e1:71:1a:b0:87:d1:94:fb:25:33:57:
77:b0:c8:1b:7b:8d:0f:9c:e0:be:5e:92:3c:99:45:98:48:94:
6f:b5:6e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQ2yHh3a+RCU8zmvriqEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzY2JmY2RhMWRjMDlkODhiM2FmNWNlZjkwZGEwMTYyZmRh
Mzc0YjQwHhcNMjYxMDExMDAwMTA5WhcNMjYxMDEyMDAwMTA5WjAzMTEwLwYDVQQD
EygzYWI3MTllMjQxM2Q1MDM4NWU5MzYxMzA5YzJkZjY2ZjAxM2MyZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA4WQJ5+byXbI724oXdXBfcinZM3
cPFsMvATkpcAPaN9UChlzeHpqRMTsj532b4loVLUC5LP+Qfjs45/N20NKNXDHo4L
TbBgGv7ox+h1tjvVI7MzZeHXIA0zlPAM+jmhgoypXSG6fi/1+Syk3++b8sMwSgSi
MJ861pvs29rof+RzzOvXKakxj0nlSJ+oQtNDJ3T2L3t/E9cexeSl2lME88sXEG7N
b7jloXcuw6YwRawARKRiHwihe/bcX/4Wv3SgDxHocHGTR/CHVVLT2ja6CHeAu569
zaAp4sSmE8NA2mxxUYgkzqeVm3IpIoVC9D61SnKuYmKdBQKrvIV8bubROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq3GeJBPVA4XpNhMJwt9m8BPC6/MB8GA1UdIwQY
MBaAFGPL/NodwJ2Is69c75DaAWL9o3S0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTh2ODJoM0FuWWl6cjF6dmtOb0JZdjJqZExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmI3ZTYtMDRjMC00MzYxLTk0YzAt
NzMzMWJmMjA3ZjRkLzEvWTh2ODJoM0FuWWl6cjF6dmtOb0JZdjJqZExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmI3ZTYtMDRjMC00MzYxLTk0YzAtNzMzMWJmMjA3ZjRk
LzEvWTh2ODJoM0FuWWl6cjF6dmtOb0JZdjJqZExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmMqakGs
5i4EwlDX6stIFC+aeJ/nVZw20GPNeDr8eQIKF38MSTGua++faiy0zz+laJmh7ths
wgfOSDWKwCuZcezXFNtrHgnMMUvWUGfHMX4RP2dSHY7sS8YXKqSCzcw6on7IFOMR
dM3SwSeFUZaBukrdxAahx6CR9FrlMXrx0sp/8ukUaDN5hBMzig4pDs35ygp437Zv
Qdxv4dMOnTkJHRlCPMe8Qyr7msOwKvuMGO7q1vIUFD0MYsNI01yBGmV/DN2oCSdW
kUmXjcvLD7NxmGhRWDI1rEh8GScyCFnCxOFxGrCH0ZT7JTNXd7DIG3uND5zgvl6S
PJlFmEiUb7Vuzg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:44:25 2026 by rpki-client