Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: KNq2wEgxbSaFx4wznlbxCDFC2Y9iouKh5G/9cXHTmns=
Subject key identifier: 2F:02:B9:34:AA:B6:6D:1B:E6:03:B5:F0:D6:B4:F9:C6:CD:74:F2:3E
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 01A173268FF0665CA5FEF1E7F056E7A1099D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1755
Signing time: Sun 25 Oct 2026 13:01:09 +0000
Manifest this update: Sun 25 Oct 2026 13:01:09 +0000
Manifest next update: Mon 26 Oct 2026 13:01:09 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: uZgcF1exTcDqyTitUIwOFoV6QASv71r1c2xTFffkTf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:8f:f0:66:5c:a5:fe:f1:e7:f0:56:e7:a1:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Oct 25 13:01:09 2026 GMT
Not After : Oct 26 13:01:09 2026 GMT
Subject: CN=2f02b934aab66d1be603b5f0d6b4f9c6cd74f23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:b5:84:a4:ba:9f:07:15:51:ca:0f:7c:de:
58:be:ac:7b:11:9d:cd:37:36:6f:22:ac:41:3e:49:
f9:58:21:06:8e:aa:46:0c:d6:85:1e:c0:f0:f6:f2:
8b:44:56:86:dd:b5:6e:40:64:53:a1:f9:26:50:fd:
dd:b5:40:a7:d9:09:d3:f1:d6:c1:d7:81:0d:6c:c1:
19:8d:10:4d:b8:63:56:5b:2f:30:b7:7f:7e:41:cf:
0a:18:7e:25:4e:01:4c:b0:1d:7f:32:68:fb:13:67:
42:2e:ab:2d:07:c6:d6:56:21:3b:9c:d9:e8:bc:9e:
36:0b:3b:5b:a7:fc:c8:b4:f0:96:fd:43:c1:92:6a:
f6:05:28:10:c8:a6:14:ba:92:82:c4:e5:97:a8:85:
88:0c:10:ee:8d:11:c9:d3:dd:e5:a3:7c:91:b6:43:
ab:12:f0:43:89:22:8c:a0:15:d8:21:e1:46:fc:e5:
90:f2:b6:0f:51:5b:e7:0a:4d:54:55:90:25:e9:85:
f8:5d:6e:71:3a:a4:9d:a7:14:13:92:b1:e7:86:e9:
ec:52:b2:86:53:e9:28:e6:77:7e:5b:f8:bc:cc:2b:
e3:4f:cb:0c:ce:d4:e2:f9:f8:de:66:72:f3:98:83:
b6:5f:48:41:48:19:e2:63:d7:85:6c:66:cc:1d:0b:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:B9:34:AA:B6:6D:1B:E6:03:B5:F0:D6:B4:F9:C6:CD:74:F2:3E
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:7f:ce:71:94:ec:66:33:e6:26:82:95:86:73:af:b5:bf:
83:43:61:35:60:56:b7:6d:59:d9:c5:04:6a:06:10:39:46:50:
4a:91:db:d2:d1:d5:e6:c6:6d:70:ef:ef:10:dc:7c:21:09:2b:
00:04:74:9a:a9:9d:0b:f4:00:9e:65:ab:de:cd:8c:e4:0f:67:
25:b5:0f:c6:62:80:93:b1:97:60:f5:60:70:21:ef:52:41:a0:
a8:2c:24:83:6c:e4:58:54:e4:c5:29:ac:fa:d5:6f:48:06:15:
00:24:bd:a9:d5:92:e6:35:c8:93:1e:91:35:b8:46:a2:af:f2:
01:55:1d:9f:b2:9c:8f:f7:54:b9:e7:f3:01:d3:41:1f:8f:03:
4d:6b:58:78:a1:81:b2:eb:e9:93:65:11:4e:38:34:be:f0:19:
b0:00:cb:d0:e4:bb:85:69:32:80:2d:4f:45:14:26:2b:b9:2d:
13:f7:e8:5e:33:62:46:ac:b6:47:b9:5a:e0:8b:b5:fa:65:45:
70:7d:d7:78:8e:cf:6e:46:9e:6b:96:1d:23:d8:0e:71:76:b3:
c2:e9:62:b0:db:80:7e:f0:86:1f:40:4e:4d:37:f6:97:54:a9:
37:29:cc:f2:81:2d:21:ff:b4:7c:be:22:fc:68:02:a6:42:46:
3d:bd:1c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzJo/wZlyl/vHn8FbnoQmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjYxMDI1MTMwMTA5WhcNMjYxMDI2MTMwMTA5WjAzMTEwLwYDVQQD
EygyZjAyYjkzNGFhYjY2ZDFiZTYwM2I1ZjBkNmI0ZjljNmNkNzRmMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A21hKS6nwcVUcoPfN5Yvqx7EZ3N
NzZvIqxBPkn5WCEGjqpGDNaFHsDw9vKLRFaG3bVuQGRTofkmUP3dtUCn2QnT8dbB
14ENbMEZjRBNuGNWWy8wt39+Qc8KGH4lTgFMsB1/Mmj7E2dCLqstB8bWViE7nNno
vJ42Cztbp/zItPCW/UPBkmr2BSgQyKYUupKCxOWXqIWIDBDujRHJ093lo3yRtkOr
EvBDiSKMoBXYIeFG/OWQ8rYPUVvnCk1UVZAl6YX4XW5xOqSdpxQTkrHnhunsUrKG
U+ko5nd+W/i8zCvjT8sMztTi+fjeZnLzmIO2X0hBSBniY9eFbGbMHQt+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8CuTSqtm0b5gO18Na0+cbNdPI+MB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4F/znGU
7GYz5iaClYZzr7W/g0NhNWBWt21Z2cUEagYQOUZQSpHb0tHV5sZtcO/vENx8IQkr
AAR0mqmdC/QAnmWr3s2M5A9nJbUPxmKAk7GXYPVgcCHvUkGgqCwkg2zkWFTkxSms
+tVvSAYVACS9qdWS5jXIkx6RNbhGoq/yAVUdn7Kcj/dUuefzAdNBH48DTWtYeKGB
suvpk2URTjg0vvAZsADL0OS7hWkygC1PRRQmK7ktE/foXjNiRqy2R7la4Iu1+mVF
cH3XeI7Pbkaea5YdI9gOcXazwulisNuAfvCGH0BOTTf2l1SpNynM8oEtIf+0fL4i
/GgCpkJGPb0cLw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:53:42 2026 by rpki-client