Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: 0iBNmpExCVdcjyTn1H6W9pKS8Se2ZQ6NcsB0mAQSyD0=
Subject key identifier: D6:BB:6A:8D:6D:3B:B9:AA:80:08:04:B3:77:8C:2C:69:52:BD:42:2E
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 01A020FA07780F4DC932B05416204A6A10FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 11DB
Signing time: Thu 20 Aug 2026 21:00:51 +0000
Manifest this update: Thu 20 Aug 2026 21:00:51 +0000
Manifest next update: Fri 21 Aug 2026 21:00:51 +0000
Files and hashes: 1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: /hn1IDrng3HCP4CdInsB+iIu6JMWAXKL1ExoZGnigzI=)
3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:07:78:0f:4d:c9:32:b0:54:16:20:4a:6a:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Aug 20 21:00:51 2026 GMT
Not After : Aug 21 21:00:51 2026 GMT
Subject: CN=d6bb6a8d6d3bb9aa800804b3778c2c6952bd422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:5d:94:89:15:2c:96:9b:7d:4b:71:cb:b0:
40:28:9a:14:9c:50:46:65:a7:0a:d0:8f:3b:cf:60:
95:95:73:7e:1b:fe:ff:d8:3c:11:ef:aa:7a:94:43:
a8:1a:a1:b3:64:c4:62:03:23:02:d6:7d:b9:00:c5:
5f:b9:b7:67:0a:c8:ac:a7:db:17:f7:21:d1:c8:73:
30:c3:f5:52:fc:aa:e9:33:77:fa:ee:f8:3c:51:ff:
af:06:a4:3f:00:f8:a5:7b:a3:18:05:6e:b0:08:23:
89:1f:0e:00:b1:64:7c:88:4a:bf:0e:3e:6e:c6:cc:
bc:ea:49:1e:de:d0:0e:ea:6e:fd:b4:e9:71:d0:ef:
3a:5d:f1:77:22:45:b1:ca:8e:2a:b5:a7:43:b2:3f:
0f:35:eb:91:a2:b4:b1:13:b0:88:26:26:73:c6:06:
30:eb:f6:ff:bd:1e:83:7c:01:04:c1:7d:e9:90:41:
a6:bb:c8:33:c9:cb:e5:41:0d:6f:c0:c5:7e:e6:24:
ad:3f:94:1a:19:11:eb:3d:3c:da:21:33:45:a3:66:
71:95:65:1b:ae:71:87:b2:3d:de:e8:8d:72:6b:ef:
73:d7:f6:cb:1e:92:a0:71:8e:bb:8e:16:37:f2:4f:
a7:80:21:57:de:4a:6d:99:81:ea:2d:a1:05:34:b6:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:6A:8D:6D:3B:B9:AA:80:08:04:B3:77:8C:2C:69:52:BD:42:2E
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:92:df:ea:99:67:1d:bb:28:eb:47:76:19:01:36:be:0b:0a:
21:5e:4d:48:a2:65:a4:fa:ad:89:60:07:9d:c1:97:c6:13:2a:
e7:e8:8e:87:89:13:0a:b2:dd:62:08:bb:77:f6:79:10:99:80:
c3:7a:fa:90:35:0a:54:8b:eb:88:b3:08:32:2b:8d:e0:46:fb:
c1:09:39:7e:29:38:49:8c:84:a2:32:20:b7:96:77:66:78:ae:
40:ad:52:95:b4:fc:a6:d5:b4:61:9f:56:aa:2b:6e:c5:6b:f9:
b4:9e:d1:fc:ea:8e:d8:85:9d:5c:75:af:50:cc:1f:33:96:66:
ff:f8:97:7c:4f:3f:68:0c:07:9c:65:b1:6d:92:c3:02:ce:ec:
19:97:c8:cf:a8:a9:51:db:14:b0:d8:3f:34:57:80:96:06:f1:
8d:75:de:25:20:0b:46:fe:7c:b7:f9:5a:95:4e:ed:e0:23:3c:
e7:19:05:a2:92:55:4f:25:a8:d9:3c:b9:ed:89:9c:ac:14:74:
6c:bf:2a:98:76:32:ab:5f:a7:07:b0:2a:37:df:8b:54:36:ae:
65:d5:04:eb:14:26:54:fa:87:d9:6d:6c:74:ab:24:c0:6c:f8:
5c:73:d3:09:03:1a:75:4f:78:c5:a9:ca:b3:00:a8:ff:8b:bb:
56:22:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:44 2026 by rpki-client