Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: zWRGF1Co7pDEhnadfj99t3qWBSBKXBdwKbFDL9nwRCU=
Subject key identifier: 6C:48:A4:C6:82:1D:C7:C4:10:69:41:74:C3:3A:4A:64:84:7F:39:D6
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A0D07F7F6A0C415EB9A9F5B9EE6B32AF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 23:00:11 +0000
Manifest this update: Wed 23 Sep 2026 23:00:11 +0000
Manifest next update: Thu 24 Sep 2026 23:00:11 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: UeBdmO6Bpb7gX9C/8vtEbUT/n2xZftEYETW3NUMg7XE=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7f:6a:0c:41:5e:b9:a9:f5:b9:ee:6b:32:af:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Sep 23 23:00:11 2026 GMT
Not After : Sep 24 23:00:11 2026 GMT
Subject: CN=6c48a4c6821dc7c410694174c33a4a64847f39d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:8a:e1:6d:83:d7:dd:eb:90:52:09:f9:84:
87:6b:1b:d5:63:01:a8:24:fa:43:0b:15:85:d4:8d:
50:5d:14:a4:49:07:aa:00:d1:01:75:bd:73:c1:41:
a4:90:c9:40:bb:47:a1:5a:13:6f:35:82:c5:1c:9a:
ed:8d:a2:62:d0:33:8b:f2:0c:04:33:08:98:a1:2a:
7f:8b:47:63:16:db:03:e8:58:0e:b1:0a:31:c9:e9:
fc:8b:1a:2d:c4:75:4c:db:02:45:2c:a7:a0:95:bc:
b4:28:b8:7c:57:ad:6e:bd:b3:be:ad:3a:28:df:99:
7e:5d:97:80:b7:d8:fa:58:0b:7f:5b:97:1a:ea:ab:
10:8e:c3:87:3f:7b:7d:5a:46:30:d0:72:6c:7c:7d:
3f:58:44:16:f3:84:60:a0:d4:6e:91:29:fd:d3:19:
10:f5:1a:f3:83:0a:4e:6a:44:4a:90:04:55:ca:5a:
12:6b:89:9a:d0:6b:07:6a:8e:97:54:10:12:2c:66:
fe:ba:cb:e0:f4:e8:9e:b2:73:c8:79:fb:c0:7d:b6:
51:51:a9:b0:80:52:69:6a:a5:2d:94:50:5b:df:4d:
2a:41:2b:af:9e:19:5e:f5:9f:57:69:fa:59:f1:eb:
6b:80:9f:0b:59:8e:6f:2a:1d:09:67:9d:92:23:e4:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:A4:C6:82:1D:C7:C4:10:69:41:74:C3:3A:4A:64:84:7F:39:D6
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:de:e5:aa:7c:d7:de:ff:39:a8:96:3f:0d:96:9c:58:3e:
2a:ba:30:e7:30:b0:11:a6:ea:e0:b3:e1:41:04:77:b5:e2:a1:
c4:5c:bf:fa:0b:e0:14:18:68:35:3e:45:ff:77:95:27:d7:63:
8a:4d:bd:52:23:75:2b:ce:6b:27:02:07:e6:7e:b5:65:36:85:
db:65:e2:e9:2d:29:49:ed:de:95:62:67:c8:ef:55:05:9f:4f:
9c:3c:ee:ae:35:b1:0c:9f:da:b2:20:b9:7d:87:9a:c4:f4:73:
60:93:6f:ae:82:aa:48:4d:a7:d3:ae:05:62:af:c8:04:75:0e:
a8:59:ff:e7:8d:3f:1c:44:90:3f:f4:a2:fd:5a:ac:19:d0:72:
22:f2:91:1a:07:49:fa:79:57:d1:1c:a7:2a:43:75:cb:00:fb:
12:fa:f0:ac:97:ab:4b:05:22:ff:42:be:0a:a8:df:d8:69:90:
17:a4:b6:86:02:fe:17:48:81:35:95:f4:82:69:c0:48:c0:2f:
ad:b1:80:3c:6b:92:b0:ec:92:f7:56:8f:ac:61:3d:03:1b:a8:
7e:4d:32:6e:2a:b4:52:46:6e:23:9a:1e:2c:bc:d1:48:68:d1:
37:c1:fd:22:31:3b:dd:6e:a1:79:a9:f5:22:f3:8c:fa:4a:bc:
f0:8c:e7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf39qDEFeuan1ue5rMq8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmE5ZWY4MTBlZGFhZjUyNDUzZDI4MzczZWYwZjc5YjA5
YmQ2M2QwHhcNMjYwOTIzMjMwMDExWhcNMjYwOTI0MjMwMDExWjAzMTEwLwYDVQQD
Eyg2YzQ4YTRjNjgyMWRjN2M0MTA2OTQxNzRjMzNhNGE2NDg0N2YzOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuK4W2D193rkFIJ+YSHaxvVYwGo
JPpDCxWF1I1QXRSkSQeqANEBdb1zwUGkkMlAu0ehWhNvNYLFHJrtjaJi0DOL8gwE
MwiYoSp/i0djFtsD6FgOsQoxyen8ixotxHVM2wJFLKeglby0KLh8V61uvbO+rToo
35l+XZeAt9j6WAt/W5ca6qsQjsOHP3t9WkYw0HJsfH0/WEQW84RgoNRukSn90xkQ
9RrzgwpOakRKkARVyloSa4ma0GsHao6XVBASLGb+usvg9OiesnPIefvAfbZRUamw
gFJpaqUtlFBb300qQSuvnhle9Z9XafpZ8etrgJ8LWY5vKh0JZ52SI+QEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxIpMaCHcfEEGlBdMM6SmSEfznWMB8GA1UdIwQY
MBaAFMtqnvgQ7ar1JFPSg3PvD3mwm9Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgt
NGEzZTFmYjlhYWU5LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgtNGEzZTFmYjlhYWU5
LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchTe5ap8
197/OaiWPw2WnFg+Krow5zCwEabq4LPhQQR3teKhxFy/+gvgFBhoNT5F/3eVJ9dj
ik29UiN1K85rJwIH5n61ZTaF22Xi6S0pSe3elWJnyO9VBZ9PnDzurjWxDJ/asiC5
fYeaxPRzYJNvroKqSE2n064FYq/IBHUOqFn/540/HESQP/Si/VqsGdByIvKRGgdJ
+nlX0RynKkN1ywD7EvrwrJerSwUi/0K+Cqjf2GmQF6S2hgL+F0iBNZX0gmnASMAv
rbGAPGuSsOyS91aPrGE9Axuofk0ybiq0UkZuI5oeLLzRSGjRN8H9IjE73W6hean1
IvOM+kq88IznIQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:44:41 2026 by rpki-client