Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: vDzCzVlMtzndTBJ6azzio2JrutzCfSx+0wpACH7XI5Q=
Subject key identifier: 32:B5:02:3A:95:66:5B:49:AB:41:ED:5C:D6:18:1A:D3:FF:8E:51:A9
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 01A0CA46C58C0E20CB22F07BBB51D2004546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:30 +0000
Manifest this update: Tue 22 Sep 2026 18:00:30 +0000
Manifest next update: Wed 23 Sep 2026 18:00:30 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: P9XzOyGIfgPSgTTSPbIhjLAbivGafPYnzJbtSEOybTc=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:c5:8c:0e:20:cb:22:f0:7b:bb:51:d2:00:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Sep 22 18:00:30 2026 GMT
Not After : Sep 23 18:00:30 2026 GMT
Subject: CN=32b5023a95665b49ab41ed5cd6181ad3ff8e51a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:af:f2:44:4d:60:45:b7:cd:bd:4a:07:1c:
70:b2:79:db:a5:b0:da:1c:29:d5:db:36:4f:f9:41:
b0:7a:56:09:ad:1c:89:da:0c:ed:25:f7:76:91:d2:
c0:09:b2:d4:41:65:00:3f:e6:ad:dd:8b:61:62:e8:
b6:c3:8d:6c:16:46:96:df:b0:65:03:c0:c9:c8:46:
45:e2:0f:2b:d6:3c:af:46:3a:06:2e:26:3f:a2:06:
e3:78:a2:f8:0f:e1:9c:55:dc:0e:74:78:75:48:71:
53:ae:ac:89:81:64:2d:a0:8b:fb:9a:72:d8:0f:b2:
52:c4:b2:f5:7b:f4:a1:f2:12:54:60:c8:b8:e0:75:
c1:90:3f:1c:b1:ff:fe:96:3b:10:f4:78:62:81:56:
65:a9:81:24:b5:d3:6b:98:e9:37:b3:16:c8:2d:d0:
dd:51:7b:73:d7:46:d5:0a:db:28:df:63:e3:34:42:
85:86:ee:dd:54:ee:89:c7:03:14:4e:fe:73:b4:39:
1b:60:0c:29:a4:59:36:e7:30:70:f9:84:2f:45:ae:
fa:24:04:5c:ba:bb:da:00:ee:42:3c:8c:40:3d:63:
5e:52:cd:18:9b:e0:a1:4b:11:7e:6d:ee:00:06:c7:
21:4d:a8:4f:7a:bd:1d:2c:74:51:ec:f6:c5:70:f2:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:02:3A:95:66:5B:49:AB:41:ED:5C:D6:18:1A:D3:FF:8E:51:A9
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:3d:b5:0e:2b:29:6d:20:78:42:14:80:b9:ee:7a:7e:a4:
59:9f:0c:6e:ee:71:a2:00:22:da:73:c4:4c:ff:0c:15:26:b5:
3b:2a:08:22:fe:93:c7:98:be:02:54:16:2d:a0:c7:e4:ff:90:
fa:ce:e9:6a:1c:95:6d:dd:6e:a3:c9:17:a1:a5:31:01:65:7f:
cb:c8:6d:c5:cb:30:cc:30:94:cd:a9:1b:7a:85:76:6f:e2:9b:
1e:a6:49:38:62:62:27:a8:3e:4b:0e:e3:65:aa:e7:52:a8:c5:
0d:a0:54:df:fa:e6:11:24:89:b1:54:6b:a6:a6:75:a5:f0:97:
46:43:d4:95:19:69:d0:b0:77:93:d2:ac:32:5d:70:c8:f6:3a:
fa:cc:86:7a:97:fd:e8:79:61:88:6f:77:fc:70:0e:44:02:43:
1f:3e:fe:b0:70:99:f0:36:bb:7e:cd:36:7d:8a:5b:19:5c:e3:
88:20:c3:50:c5:5f:f0:78:be:a0:96:be:e3:9e:65:0f:77:53:
fc:44:d8:73:a2:a2:55:8d:19:9b:eb:c5:ba:ed:f8:42:2a:c8:
e2:61:c8:33:01:49:6c:af:f5:20:50:85:f3:b1:11:08:a3:fc:
a3:35:2d:59:4d:a7:1b:2a:51:8a:35:21:e2:29:8d:da:64:9b:
18:35:0b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRsWMDiDLIvB7u1HSAEVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODhhNWVlNzcwNDg4OTIwOWRlNTg5YjBlNjU3OTYxZWQ1
OTBjMDEwHhcNMjYwOTIyMTgwMDMwWhcNMjYwOTIzMTgwMDMwWjAzMTEwLwYDVQQD
EygzMmI1MDIzYTk1NjY1YjQ5YWI0MWVkNWNkNjE4MWFkM2ZmOGU1MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqv8kRNYEW3zb1KBxxwsnnbpbDa
HCnV2zZP+UGwelYJrRyJ2gztJfd2kdLACbLUQWUAP+at3YthYui2w41sFkaW37Bl
A8DJyEZF4g8r1jyvRjoGLiY/ogbjeKL4D+GcVdwOdHh1SHFTrqyJgWQtoIv7mnLY
D7JSxLL1e/Sh8hJUYMi44HXBkD8csf/+ljsQ9HhigVZlqYEktdNrmOk3sxbILdDd
UXtz10bVCtso32PjNEKFhu7dVO6JxwMUTv5ztDkbYAwppFk25zBw+YQvRa76JARc
urvaAO5CPIxAPWNeUs0Ym+ChSxF+be4ABschTahPer0dLHRR7PbFcPJWcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK1AjqVZltJq0HtXNYYGtP/jlGpMB8GA1UdIwQY
MBaAFMuIpe53BIiSCd5Ymw5leWHtWQwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt
OTllZTRhODk4NWMzLzEveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz
LzEveTRpbDduY0VpSklKM2xpYkRtVjVZZTFaREFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJY9tQ4r
KW0geEIUgLnuen6kWZ8Mbu5xogAi2nPETP8MFSa1OyoIIv6Tx5i+AlQWLaDH5P+Q
+s7pahyVbd1uo8kXoaUxAWV/y8htxcswzDCUzakbeoV2b+KbHqZJOGJiJ6g+Sw7j
ZarnUqjFDaBU3/rmESSJsVRrpqZ1pfCXRkPUlRlp0LB3k9KsMl1wyPY6+syGepf9
6HlhiG93/HAORAJDHz7+sHCZ8Da7fs02fYpbGVzjiCDDUMVf8Hi+oJa+455lD3dT
/ETYc6KiVY0Zm+vFuu34QirI4mHIMwFJbK/1IFCF87ERCKP8ozUtWU2nGypRijUh
4imN2mSbGDULAA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:25 2026 by rpki-client