Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: NGvz+Y+XxEw2ubUuhikIhZtjNLCUlZhQUU0ZDfOPDPs=
Subject key identifier: 73:FC:4A:72:58:D2:0A:7B:73:93:C5:A5:6B:81:01:65:2D:1C:03:A3
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 01A06E70ADD5AC6342AECC31BBEF60AA8311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 16CE
Signing time: Fri 04 Sep 2026 22:01:13 +0000
Manifest this update: Fri 04 Sep 2026 22:01:13 +0000
Manifest next update: Sat 05 Sep 2026 22:01:13 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: e3nIpUZYwgOCelkWxtHREApyEcxXeVtdaHse1ll3NVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:ad:d5:ac:63:42:ae:cc:31:bb:ef:60:aa:83:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Sep 4 22:01:13 2026 GMT
Not After : Sep 5 22:01:13 2026 GMT
Subject: CN=73fc4a7258d20a7b7393c5a56b8101652d1c03a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:e4:07:84:ee:62:a3:43:a7:f3:03:22:37:
6c:b9:70:08:9f:90:8a:e9:1e:e7:b1:97:44:94:21:
7e:22:35:f4:9d:3f:bc:53:f8:8d:3a:7c:9c:61:c5:
c7:8b:f1:5a:52:11:ea:94:93:48:b4:29:ec:72:2f:
30:c5:f8:b3:8a:a1:26:d5:3c:71:bd:7d:f7:2f:c5:
8b:12:b4:55:67:62:b4:27:a7:47:85:fb:e2:a3:7a:
bb:7b:b3:ae:59:a2:25:c6:3f:30:a8:e9:21:29:15:
95:fa:fb:13:0b:db:f0:ef:99:0f:9d:64:40:f3:47:
a1:42:f8:52:e5:38:10:b8:27:70:42:4d:32:c6:7c:
d5:a4:db:59:d4:cb:23:35:e8:b4:86:d6:ce:a9:d5:
0a:c0:15:ae:e5:bb:1f:58:d9:3a:85:29:c9:27:dd:
ab:c5:d8:4a:37:85:e8:ce:9c:46:96:af:fb:70:1e:
31:06:4a:4a:34:fa:6a:e5:db:50:35:35:b2:0c:4f:
b1:b0:6a:65:2f:cc:f4:e3:48:a4:89:4b:37:61:c2:
11:cc:d8:72:50:2f:7c:1a:a4:9e:15:7d:a3:c9:ff:
99:3a:ea:fc:20:55:a4:bc:51:3b:ec:99:62:59:ba:
34:a7:57:d3:f4:d4:48:d4:bc:ae:70:ac:bf:31:fe:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:4A:72:58:D2:0A:7B:73:93:C5:A5:6B:81:01:65:2D:1C:03:A3
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:15:06:2d:26:b5:ef:bb:1f:38:96:43:33:26:f3:04:ca:cd:
4f:bf:0b:b3:31:34:83:43:71:ee:bc:67:5b:5b:a9:1a:28:73:
c3:80:90:64:be:b1:7f:ad:cf:41:f7:50:91:0e:c9:08:fd:17:
ce:6f:59:f1:48:bb:36:96:31:e8:52:94:60:5e:bd:7f:53:98:
d2:10:e8:ef:18:ba:84:5d:07:fe:6d:bf:88:20:a6:98:bf:ca:
d9:6f:ea:d1:8d:0b:a8:9f:36:a1:bd:99:3d:17:3b:24:3d:c7:
f3:5d:f5:ff:99:58:65:90:eb:85:c1:e6:0b:9d:6b:7c:2b:76:
1b:01:dc:d4:48:32:98:11:b6:b4:1e:8a:eb:70:40:19:98:7b:
e5:12:cb:4f:d5:84:23:b6:93:38:14:de:04:a7:2e:80:a9:d8:
64:e7:43:4e:b6:e6:38:c5:89:ff:6b:a6:09:bc:7e:11:cc:7f:
6f:45:32:da:77:ee:15:b5:3c:99:7a:cb:f6:97:03:40:8f:aa:
ed:d9:be:a9:ea:34:bc:52:99:6d:0d:d0:f3:12:1b:4b:8a:07:
4b:ff:5a:29:f3:ed:7b:e1:44:34:78:dd:9d:2a:d1:36:c3:7f:
2d:48:ef:16:0e:fa:37:81:db:b2:2f:6d:47:42:b6:8b:26:0f:
e5:4c:51:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucK3VrGNCrswxu+9gqoMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjYwOTA0MjIwMTEzWhcNMjYwOTA1MjIwMTEzWjAzMTEwLwYDVQQD
Eyg3M2ZjNGE3MjU4ZDIwYTdiNzM5M2M1YTU2YjgxMDE2NTJkMWMwM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+TkB4TuYqNDp/MDIjdsuXAIn5CK
6R7nsZdElCF+IjX0nT+8U/iNOnycYcXHi/FaUhHqlJNItCnsci8wxfiziqEm1Txx
vX33L8WLErRVZ2K0J6dHhfvio3q7e7OuWaIlxj8wqOkhKRWV+vsTC9vw75kPnWRA
80ehQvhS5TgQuCdwQk0yxnzVpNtZ1MsjNei0htbOqdUKwBWu5bsfWNk6hSnJJ92r
xdhKN4XozpxGlq/7cB4xBkpKNPpq5dtQNTWyDE+xsGplL8z040ikiUs3YcIRzNhy
UC98GqSeFX2jyf+ZOur8IFWkvFE77JliWbo0p1fT9NRI1LyucKy/Mf5h/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP8SnJY0gp7c5PFpWuBAWUtHAOjMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBUGLSa1
77sfOJZDMybzBMrNT78LszE0g0Nx7rxnW1upGihzw4CQZL6xf63PQfdQkQ7JCP0X
zm9Z8Ui7NpYx6FKUYF69f1OY0hDo7xi6hF0H/m2/iCCmmL/K2W/q0Y0LqJ82ob2Z
PRc7JD3H8131/5lYZZDrhcHmC51rfCt2GwHc1EgymBG2tB6K63BAGZh75RLLT9WE
I7aTOBTeBKcugKnYZOdDTrbmOMWJ/2umCbx+Ecx/b0Uy2nfuFbU8mXrL9pcDQI+q
7dm+qeo0vFKZbQ3Q8xIbS4oHS/9aKfPte+FENHjdnSrRNsN/LUjvFg76N4Hbsi9t
R0K2iyYP5UxRsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:11:56 2026 by rpki-client