Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: sZjZ6xrUbQ2O5yNhCL1xQfOYGx5NiScDnSjqaFw3WIw=
Subject key identifier: 0C:0F:21:6D:AD:4A:B9:C1:23:0A:C7:9B:3A:AA:85:52:FF:B2:20:BC
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01A0D8725D9FD577A787C2D917FD9038A244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 10F4
Signing time: Fri 25 Sep 2026 12:02:48 +0000
Manifest this update: Fri 25 Sep 2026 12:02:48 +0000
Manifest next update: Sat 26 Sep 2026 12:02:48 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: A1hyZPu2x8hEZ/WIZduIFAO9OFJOr+cqLLsZNf38oZg=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:5d:9f:d5:77:a7:87:c2:d9:17:fd:90:38:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Sep 25 12:02:48 2026 GMT
Not After : Sep 26 12:02:48 2026 GMT
Subject: CN=0c0f216dad4ab9c1230ac79b3aaa8552ffb220bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:bc:55:6e:28:b6:ce:ec:64:08:22:53:79:
50:aa:bf:e8:6e:27:b3:f8:9e:bb:55:ed:f7:7f:22:
c3:b8:04:df:98:f5:05:50:77:fe:94:69:8b:bd:7f:
41:f5:a8:31:9e:50:40:4f:fc:28:a9:bd:e2:a1:0d:
b8:11:ef:21:00:15:7d:e2:0d:ae:5d:b8:42:24:6e:
65:92:1c:eb:cd:84:18:9b:a4:bf:af:29:84:a7:0e:
62:8b:a4:2b:2b:93:6b:39:6d:c0:87:72:af:f9:7b:
78:51:11:de:2b:a2:32:df:8d:88:14:aa:dc:94:a2:
d6:86:f1:05:dd:fd:a9:a1:a7:bf:b9:6d:6a:45:3f:
c3:12:88:d9:94:65:d0:d5:3a:46:83:d0:5a:8e:4b:
20:1c:bb:74:cb:d4:21:b1:78:bc:dc:13:72:f5:e9:
15:86:16:0c:bf:02:26:14:6f:e4:cc:e2:73:5a:a0:
84:ea:ba:1e:16:ef:39:22:90:37:91:cd:de:d5:36:
4a:7e:8c:07:f4:45:68:b0:c9:ba:bb:4b:71:2e:8e:
26:6a:ba:82:21:2d:21:d4:0b:a1:c2:22:0e:57:bc:
f4:f3:8d:da:8e:f1:6d:db:ca:44:f8:db:8d:52:90:
bc:ab:f5:ef:c7:47:4d:da:f0:0b:bd:0d:cf:d7:48:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:21:6D:AD:4A:B9:C1:23:0A:C7:9B:3A:AA:85:52:FF:B2:20:BC
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f0:b2:0c:50:fe:39:b9:5b:31:4b:0c:ce:cb:61:62:5e:83:
bf:7e:e1:08:ce:ad:06:da:c5:6e:d8:ba:31:de:ac:6a:7a:db:
16:06:44:16:bf:89:1d:2b:a6:14:d1:a6:f4:8f:64:19:d6:a7:
fc:80:da:5d:ae:a6:cf:15:15:04:81:7e:79:e4:cf:07:82:1b:
df:a9:42:45:82:f6:1c:74:47:3d:6e:25:01:2e:e6:18:40:d7:
0d:97:22:64:3c:45:87:3e:6e:7c:72:e2:55:5f:cb:b7:09:b8:
69:79:62:d4:e7:fd:66:cb:da:18:4d:f0:cb:db:ab:de:57:c9:
a0:47:2b:d6:e6:fe:3e:90:84:4c:99:ed:6e:0e:45:c9:8a:81:
a9:9e:9a:e5:7b:72:5e:af:57:c2:a8:22:79:c9:33:fe:2e:10:
9e:28:97:1b:b4:63:27:d0:4c:f3:d9:a3:e0:90:e0:ef:28:e6:
8a:df:c0:41:dd:2b:5b:b9:74:0a:5f:5c:3f:e0:10:34:59:f4:
67:9b:c6:6c:4a:08:cd:a1:9f:cf:64:bf:89:3a:ab:ea:7b:0b:
43:0c:e5:9d:4a:73:a4:87:ae:07:13:6f:fe:6f:00:12:50:8e:
83:10:8f:2d:11:b9:3e:7d:bc:66:01:1b:4d:20:08:e1:44:01:
46:46:a0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcl2f1Xenh8LZF/2QOKJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjYwOTI1MTIwMjQ4WhcNMjYwOTI2MTIwMjQ4WjAzMTEwLwYDVQQD
EygwYzBmMjE2ZGFkNGFiOWMxMjMwYWM3OWIzYWFhODU1MmZmYjIyMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl28VW4ots7sZAgiU3lQqr/obiez
+J67Ve33fyLDuATfmPUFUHf+lGmLvX9B9agxnlBAT/woqb3ioQ24Ee8hABV94g2u
XbhCJG5lkhzrzYQYm6S/rymEpw5ii6QrK5NrOW3Ah3Kv+Xt4URHeK6Iy342IFKrc
lKLWhvEF3f2poae/uW1qRT/DEojZlGXQ1TpGg9BajksgHLt0y9QhsXi83BNy9ekV
hhYMvwImFG/kzOJzWqCE6roeFu85IpA3kc3e1TZKfowH9EVosMm6u0txLo4marqC
IS0h1AuhwiIOV7z0843ajvFt28pE+NuNUpC8q/Xvx0dN2vALvQ3P10iAkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwPIW2tSrnBIwrHmzqqhVL/siC8MB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafCyDFD+
OblbMUsMzsthYl6Dv37hCM6tBtrFbti6Md6sanrbFgZEFr+JHSumFNGm9I9kGdan
/IDaXa6mzxUVBIF+eeTPB4Ib36lCRYL2HHRHPW4lAS7mGEDXDZciZDxFhz5ufHLi
VV/Ltwm4aXli1Of9ZsvaGE3wy9ur3lfJoEcr1ub+PpCETJntbg5FyYqBqZ6a5Xty
Xq9Xwqgieckz/i4QniiXG7RjJ9BM89mj4JDg7yjmit/AQd0rW7l0Cl9cP+AQNFn0
Z5vGbEoIzaGfz2S/iTqr6nsLQwzlnUpzpIeuBxNv/m8AElCOgxCPLRG5Pn28ZgEb
TSAI4UQBRkagQA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:46 2026 by rpki-client