Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: uoM11Q+cHQSZ8WafnSQaVAOp/NvTcg1Dw32W8xnCT8k=
Subject key identifier: C4:EA:03:5A:48:D6:2C:31:75:EF:69:2A:CC:7B:F9:05:3C:0A:F8:25
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A1DCF000CA777B05F915FC9333B05D0BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: 014D
Signing time: Sun 15 Nov 2026 02:01:18 +0000
Manifest this update: Sun 15 Nov 2026 02:01:18 +0000
Manifest next update: Mon 16 Nov 2026 02:01:18 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: F/xnDpesPNaR258jk1R2EusBkBYu3oCOiEW1HJA2c7g=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:00:ca:77:7b:05:f9:15:fc:93:33:b0:5d:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Nov 15 02:01:18 2026 GMT
Not After : Nov 16 02:01:18 2026 GMT
Subject: CN=c4ea035a48d62c3175ef692acc7bf9053c0af825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:7a:08:63:1b:54:e9:b4:da:58:4f:ae:25:
58:7c:46:f2:61:a2:e1:ee:08:58:8c:14:b5:c5:ec:
24:b0:08:21:20:b2:9a:4f:6b:55:4a:56:c7:98:ba:
b9:c4:9e:d9:f7:6a:70:5f:5f:35:a5:3a:e0:12:75:
2a:a6:b8:e6:e0:c5:52:40:62:d8:80:6e:45:cd:91:
ed:35:cc:61:09:4a:78:25:3f:4d:fa:8f:69:9f:c4:
ac:9c:c3:ae:68:8e:7e:bf:6c:88:a5:8b:11:11:df:
45:a5:8b:f0:e7:07:37:c6:d4:1e:50:aa:2a:a1:fb:
d8:dd:f9:7c:da:cf:dc:8f:1d:7a:1e:17:49:a1:c1:
78:4b:b9:33:94:75:4a:6e:93:9c:fb:87:d8:e0:81:
3b:5c:e6:63:72:76:28:f6:ee:4e:14:7b:20:66:30:
0f:9c:ec:9a:b1:5f:2a:2e:7d:de:da:e4:ef:cf:33:
09:ba:1b:7e:81:65:ab:b4:b9:04:4e:bb:95:06:c3:
aa:26:16:ce:b2:4e:54:e5:54:36:8f:26:4b:34:f6:
76:98:fa:9b:e6:a7:bb:78:26:20:4f:cd:82:f3:a5:
23:73:ef:88:93:b2:93:c6:fd:4f:63:07:03:e7:e0:
d4:16:2d:98:e1:84:52:c1:05:d9:67:6b:85:67:59:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:03:5A:48:D6:2C:31:75:EF:69:2A:CC:7B:F9:05:3C:0A:F8:25
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:b0:a9:cf:eb:76:19:13:73:e6:48:ed:ee:e8:3c:bf:dc:
28:fa:43:4d:1a:04:26:b4:26:de:05:6a:54:e7:a2:43:9d:26:
20:24:42:59:5e:d8:5c:da:07:47:e1:cb:ce:49:64:b2:96:cb:
f3:de:2b:21:1f:7e:31:04:a6:dc:3a:70:ea:b8:26:2a:c4:dc:
3d:d8:82:7c:a2:e3:c8:81:05:df:22:80:59:e5:d8:79:41:cd:
c6:12:9c:28:f0:4d:2f:a7:13:2a:07:c9:a3:c3:c8:5a:35:a0:
a5:b6:e7:44:23:f3:59:1d:1d:aa:60:14:33:30:43:bc:c4:c5:
fb:63:38:3c:12:d6:2b:6f:7c:63:b0:88:7c:8b:fb:6e:52:58:
30:49:ad:36:3f:b7:e1:bb:1b:22:99:3b:ed:73:70:2d:7a:51:
bb:94:9b:a8:5a:e6:90:38:e8:d6:21:5f:7a:ae:73:e1:4b:bf:
e5:ab:11:67:0d:05:c3:df:2e:6f:d7:13:9e:2b:8c:2a:2e:c1:
5f:7c:ea:cb:a6:e6:82:76:62:9a:78:cc:03:2f:20:98:4e:53:
a0:ee:4b:68:1f:f7:ef:2e:04:e5:66:1c:d4:d9:c3:38:c3:86:
8f:b7:22:ec:99:95:71:2b:06:9a:34:a1:31:16:e7:97:8c:7f:
8e:f8:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:48:40 2026 by rpki-client