Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
File: Y2csMhGSVoEc_v9efDYpEZNlxBk.mft (raw, json)
Hash identifier: e+TUwc0A/EXBAUD/Hkg7zDEBSJCX28XyeRPk2LMQsLQ=
Subject key identifier: D9:BB:F7:DF:82:79:D8:40:74:07:BF:9D:CB:1F:A0:B9:4D:89:09:2F
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Certificate issuer: /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial: 01A0E174F479EBCCF2A37C21D9162C04F5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:13 +0000
Manifest this update: Sun 27 Sep 2026 06:02:13 +0000
Manifest next update: Mon 28 Sep 2026 06:02:13 +0000
Files and hashes: 1: Y2csMhGSVoEc_v9efDYpEZNlxBk.crl (hash: d+Xrf1yNepayh0vRSeuhf6Z1/Ss9mB1kCsdaKne+l2s=)
2: dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa (hash: 7negqj+cXGDnJClvB1tA9Ds9JK3g22g19iEuLC7d5hM=)
3: zo2qx61yORuCWKZTMikpC0Y_XdA.asa (hash: htZ7XNkenFrj9WSytSLvWOuP7M7LeldRqaDXaKNxolY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:f4:79:eb:cc:f2:a3:7c:21:d9:16:2c:04:f5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
Validity
Not Before: Sep 27 06:02:13 2026 GMT
Not After : Sep 28 06:02:13 2026 GMT
Subject: CN=d9bbf7df8279d8407407bf9dcb1fa0b94d89092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:76:f2:c3:4f:b3:79:67:14:4c:8c:03:9e:
af:71:6c:34:49:74:74:0c:27:16:29:38:18:15:9f:
20:ec:19:fb:d5:5b:72:5e:84:60:76:9c:b0:0e:6f:
61:ad:6b:2e:f5:a8:f0:63:3b:2f:9b:45:b5:ac:1b:
ae:be:8b:24:4d:e7:27:f0:65:8f:dc:a2:45:21:a1:
78:04:3a:89:0b:4d:b7:3d:4d:a6:89:d8:3e:cc:22:
27:ff:5b:b9:11:07:f4:9c:2d:bf:0b:0c:c3:a4:8d:
02:b3:93:07:ac:c5:0c:5c:fc:49:8a:03:88:69:de:
3d:f1:66:3f:b9:96:f5:c8:5e:76:ae:8a:84:18:37:
5f:3b:95:e0:bf:61:b5:63:7f:31:03:c8:b7:09:f7:
4b:f6:20:35:ad:3d:d4:fb:9d:b7:c1:cd:65:34:10:
08:a9:09:37:f4:10:3a:dd:75:0c:9d:50:0c:f7:a9:
76:91:0f:d4:94:a1:47:41:3c:05:57:3f:7b:55:2e:
7f:d4:26:d4:1a:59:3f:71:77:ff:f5:26:cb:4b:1a:
9e:c2:83:cf:b1:60:c6:1f:1d:ae:a3:4d:87:78:29:
3d:7d:f3:9d:10:b1:55:42:b4:de:97:ee:ad:ca:ae:
0a:8d:9f:54:2f:1a:d6:44:cb:07:ea:ce:4a:bb:e0:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:F7:DF:82:79:D8:40:74:07:BF:9D:CB:1F:A0:B9:4D:89:09:2F
X509v3 Authority Key Identifier:
keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:40:aa:42:25:17:40:ac:87:14:f7:58:0b:97:2b:5e:13:
a5:f3:ed:b5:d2:05:49:1a:08:1b:a7:a1:17:3c:6f:c5:df:62:
7d:83:93:2e:e1:47:57:e5:c4:b4:94:c6:ef:4a:44:f1:01:e4:
9a:2a:4b:a5:bd:74:47:75:42:ec:2d:5f:fa:25:bf:fb:b3:8a:
33:30:e2:35:95:f9:2c:f6:2a:a9:8b:3b:8c:f4:b0:6f:3d:92:
17:98:5d:62:aa:b5:d1:ad:69:57:1f:ed:ad:59:30:03:44:b3:
63:17:92:c1:ef:fe:f2:06:35:35:1f:b5:b6:f2:a9:82:22:a2:
44:63:87:4c:55:98:be:48:e5:db:60:0f:31:8f:9a:e0:27:23:
23:a2:7d:9f:a0:09:1e:61:c7:23:a9:91:c3:b5:3e:fc:4d:69:
61:a7:ee:98:06:1b:aa:b6:43:2c:8d:8d:d4:18:4e:2a:54:c9:
a6:2a:51:14:2e:55:8e:e7:07:03:cb:5e:37:2d:e3:49:87:f3:
e5:48:ec:86:85:07:8b:5b:cf:91:0d:a2:65:99:e9:78:dd:82:
20:88:6a:3a:50:80:a3:ef:42:0c:4d:fe:77:08:70:d0:37:5e:
95:f8:fc:3f:a0:10:c1:8e:75:7b:c9:c5:a3:90:78:c5:70:9d:
64:15:74:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdPR568zyo3wh2RYsBPXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjcyYzMyMTE5MjU2ODExY2ZlZmY1ZTdjMzYyOTExOTM2
NWM0MTkwHhcNMjYwOTI3MDYwMjEzWhcNMjYwOTI4MDYwMjEzWjAzMTEwLwYDVQQD
EyhkOWJiZjdkZjgyNzlkODQwNzQwN2JmOWRjYjFmYTBiOTRkODkwOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG128sNPs3lnFEyMA56vcWw0SXR0
DCcWKTgYFZ8g7Bn71VtyXoRgdpywDm9hrWsu9ajwYzsvm0W1rBuuvoskTecn8GWP
3KJFIaF4BDqJC023PU2midg+zCIn/1u5EQf0nC2/CwzDpI0Cs5MHrMUMXPxJigOI
ad498WY/uZb1yF52roqEGDdfO5Xgv2G1Y38xA8i3CfdL9iA1rT3U+523wc1lNBAI
qQk39BA63XUMnVAM96l2kQ/UlKFHQTwFVz97VS5/1CbUGlk/cXf/9SbLSxqewoPP
sWDGHx2uo02HeCk9ffOdELFVQrTel+6tyq4KjZ9ULxrWRMsH6s5Ku+D3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm799+CedhAdAe/ncsfoLlNiQkvMB8GA1UdIwQY
MBaAFGNnLDIRklaBHP7/Xnw2KRGTZcQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jYmVmNmQtZGI3My00ZDhiLWIwY2Mt
ZjA2ZTg5YzQ3NzBhLzEvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jYmVmNmQtZGI3My00ZDhiLWIwY2MtZjA2ZTg5YzQ3NzBh
LzEvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBNAqkIl
F0CshxT3WAuXK14TpfPttdIFSRoIG6ehFzxvxd9ifYOTLuFHV+XEtJTG70pE8QHk
mipLpb10R3VC7C1f+iW/+7OKMzDiNZX5LPYqqYs7jPSwbz2SF5hdYqq10a1pVx/t
rVkwA0SzYxeSwe/+8gY1NR+1tvKpgiKiRGOHTFWYvkjl22APMY+a4CcjI6J9n6AJ
HmHHI6mRw7U+/E1pYafumAYbqrZDLI2N1BhOKlTJpipRFC5VjucHA8teNy3jSYfz
5UjshoUHi1vPkQ2iZZnpeN2CIIhqOlCAo+9CDE3+dwhw0Ddelfj8P6AQwY51e8nF
o5B4xXCdZBV0FQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:52:41 2026 by rpki-client