Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: 9lMKVCJbWIMd3POUbbFCNsA/zgn0afcVFtyceWxTp+c=
Subject key identifier: 02:01:79:1F:CA:36:24:2D:5A:BF:33:31:85:C2:06:E3:FC:2F:9F:A3
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 01A12089B7E130D9B90FAEBBE97ADA63DC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 17E4
Signing time: Fri 09 Oct 2026 12:00:58 +0000
Manifest this update: Fri 09 Oct 2026 12:00:58 +0000
Manifest next update: Sat 10 Oct 2026 12:00:58 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: 1y3Odhpwsq8VkzaPBn7P7kbpWtpppafSE5kTwEC3gKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:b7:e1:30:d9:b9:0f:ae:bb:e9:7a:da:63:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Oct 9 12:00:58 2026 GMT
Not After : Oct 10 12:00:58 2026 GMT
Subject: CN=0201791fca36242d5abf333185c206e3fc2f9fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:26:7e:77:88:8f:29:0f:94:e6:65:b7:03:
ef:23:22:cb:d8:8b:e9:f1:e7:93:7b:b7:95:5d:c9:
be:6f:3c:fd:d9:18:09:d5:a0:f6:09:cc:31:70:21:
0d:f5:19:26:19:49:c7:af:a0:ad:1c:da:17:82:49:
4e:f4:cb:74:f9:d9:bf:aa:6b:74:82:ab:38:ed:a3:
09:c7:ab:b4:14:7b:ae:ca:87:a1:97:fa:af:ec:38:
d8:14:e7:9c:d5:39:07:7c:98:54:01:f4:7d:39:c1:
32:9f:32:1f:44:3b:54:25:56:6c:be:b7:f1:79:f9:
82:98:b3:c3:b2:1d:ed:92:0f:d2:9c:d9:7b:7d:65:
a2:f6:4b:5d:a9:14:1a:d6:71:4b:30:e3:21:44:1c:
62:ee:82:21:4b:ed:f4:f4:81:3b:95:95:e9:3a:0e:
41:50:00:eb:02:a4:b2:22:56:7e:0f:f1:93:71:19:
4a:ed:6c:0d:a7:d2:79:cc:35:c9:66:67:88:e1:70:
05:7e:b7:e0:2a:08:c6:14:76:a7:b0:16:e5:ea:2a:
27:34:28:e4:82:60:b2:ad:f1:66:52:91:cb:e9:6c:
61:bc:93:09:56:e7:f8:3e:78:7a:52:3d:ee:9e:b0:
b1:3a:27:02:60:38:e8:99:ee:d4:54:b7:06:ac:0f:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:79:1F:CA:36:24:2D:5A:BF:33:31:85:C2:06:E3:FC:2F:9F:A3
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:1c:9b:24:d6:d7:1a:3f:62:5c:9a:f9:1e:5d:e2:1d:18:
81:16:9c:ab:94:de:db:6d:08:00:2b:7c:dd:6b:c1:8f:6f:51:
2a:6a:8b:5a:c6:06:53:0e:fb:15:00:16:f8:ff:ce:39:e2:7e:
f9:ec:7b:da:04:86:a9:8b:46:8a:63:0d:41:ad:5a:92:49:7d:
25:86:47:fe:24:4d:59:e1:cc:77:24:d3:86:91:81:17:e2:69:
c0:98:59:36:29:8f:05:6e:d2:86:01:50:ba:81:08:c9:71:dd:
e3:ef:73:45:f3:9c:3b:70:ee:26:33:86:65:da:fb:35:bd:0a:
49:5d:5f:b4:10:c1:c0:bb:cc:00:23:fb:70:12:36:c3:3e:2d:
7c:fc:2b:ba:53:24:7c:8c:83:79:9a:41:79:92:88:45:fa:ae:
c5:2a:af:83:f6:a4:86:b8:39:f3:69:f6:b8:f9:1f:d8:99:48:
c4:ab:2a:62:b0:e3:86:20:0f:1f:f6:84:a9:36:a4:ce:c8:83:
a9:cd:7f:2d:30:d0:ee:5a:0d:0e:58:04:fd:66:6f:48:ba:42:
89:35:8b:50:e6:40:fd:7e:45:43:ac:98:77:58:1f:fb:b9:23:
2a:1d:d4:de:92:71:dd:86:e3:b1:d6:2d:0c:85:49:e2:8c:c9:
91:41:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:47 2026 by rpki-client