Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: Y7TBQ41ikK21zj1sTC/j8wHeptDGCT0fFMGJZhZd/tg=
Subject key identifier: A5:49:09:C6:E9:58:B8:8A:38:6B:C7:2B:52:60:0B:CA:30:DF:3B:D5
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A08D8D88121EA875DB192EA23757512146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0922
Signing time: Thu 10 Sep 2026 23:00:57 +0000
Manifest this update: Thu 10 Sep 2026 23:00:57 +0000
Manifest next update: Fri 11 Sep 2026 23:00:57 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: f5TBCLDBOxmES66qC//2Pwen7YZbLCBXCAkJC1/RGNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:88:12:1e:a8:75:db:19:2e:a2:37:57:51:21:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Sep 10 23:00:57 2026 GMT
Not After : Sep 11 23:00:57 2026 GMT
Subject: CN=a54909c6e958b88a386bc72b52600bca30df3bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:ad:66:6c:b4:8d:0b:0c:b2:4e:47:8f:ce:
8f:3d:14:d5:35:b0:56:c2:40:36:38:c1:2c:6d:8e:
36:5e:34:59:c4:e5:77:32:03:08:36:61:2a:30:c5:
bc:66:8f:21:65:85:4a:11:f2:67:1a:58:95:75:04:
ae:56:6b:ab:3c:15:1a:e9:ae:29:28:c6:c9:5f:7a:
25:5a:2b:f9:1d:41:83:7e:ce:be:32:41:cd:c0:c3:
c3:81:f2:f5:cc:1e:59:49:9b:5d:86:84:43:1c:ab:
6e:d0:95:51:b8:c5:5c:97:86:91:9b:d7:cb:ec:a7:
3d:47:9e:4f:52:11:72:9b:07:2f:10:9d:41:93:af:
77:7f:41:b3:76:5a:26:69:99:71:71:b4:3a:22:89:
70:35:86:9d:3e:6e:13:a1:58:a5:81:51:c3:80:61:
bf:8e:0b:73:e9:1f:a8:5d:13:4d:39:71:9d:9a:f7:
b0:99:2c:5c:52:dc:49:a7:07:f4:f3:31:00:c8:0d:
83:82:1f:a8:73:8c:ce:0a:98:79:ab:fa:29:3b:d3:
32:34:6c:ec:f2:ab:e5:9a:c4:27:65:87:28:9f:7b:
04:73:4b:ee:d9:c2:d4:e1:26:57:73:20:2c:4b:6e:
ce:f6:af:1a:35:2b:a7:34:12:26:2b:18:55:9e:9b:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:09:C6:E9:58:B8:8A:38:6B:C7:2B:52:60:0B:CA:30:DF:3B:D5
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:0c:21:fc:45:30:ff:42:41:15:11:f5:6a:77:ea:52:e1:
ba:00:44:29:08:4c:10:d9:c0:03:22:66:4d:47:cd:fc:68:f4:
a2:a9:95:60:3d:06:86:24:c6:bb:49:c5:08:da:64:33:ff:05:
02:9e:eb:71:79:53:58:66:a6:f3:11:dd:fd:b3:12:eb:72:0c:
db:2c:66:96:b8:93:17:5c:e9:34:37:45:36:06:d5:2e:5b:c8:
66:cc:f8:8e:95:65:b9:aa:0e:13:4d:c6:f9:46:ab:ab:ab:9e:
12:9a:96:b8:b0:99:35:7c:47:d9:bc:40:c3:98:68:46:a6:59:
b6:8c:63:10:6c:f7:d4:47:d0:1f:ce:51:14:09:04:1b:e8:0a:
c3:e1:f5:6b:7c:aa:d5:09:95:4a:27:0d:04:0e:5c:e3:e5:17:
71:c6:60:7e:ef:7c:51:98:2f:7a:a2:05:11:bc:20:0a:7d:67:
63:9d:65:a8:35:85:3a:2a:9a:b8:d2:42:52:20:2c:f9:2d:56:
2e:3e:59:79:da:7c:f6:15:ed:63:22:73:0a:2e:60:d9:af:15:
68:79:65:63:01:4f:c0:4d:cf:0b:b8:42:b6:2e:d2:4e:4d:54:
ba:ea:19:3f:ba:fe:de:39:74:60:28:d2:4e:37:f0:e8:b9:01:
1c:2f:e6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjYgSHqh12xkuojdXUSFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjYwOTEwMjMwMDU3WhcNMjYwOTExMjMwMDU3WjAzMTEwLwYDVQQD
EyhhNTQ5MDljNmU5NThiODhhMzg2YmM3MmI1MjYwMGJjYTMwZGYzYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6OtZmy0jQsMsk5Hj86PPRTVNbBW
wkA2OMEsbY42XjRZxOV3MgMINmEqMMW8Zo8hZYVKEfJnGliVdQSuVmurPBUa6a4p
KMbJX3olWiv5HUGDfs6+MkHNwMPDgfL1zB5ZSZtdhoRDHKtu0JVRuMVcl4aRm9fL
7Kc9R55PUhFymwcvEJ1Bk693f0GzdlomaZlxcbQ6IolwNYadPm4ToVilgVHDgGG/
jgtz6R+oXRNNOXGdmvewmSxcUtxJpwf08zEAyA2Dgh+oc4zOCph5q/opO9MyNGzs
8qvlmsQnZYcon3sEc0vu2cLU4SZXcyAsS27O9q8aNSunNBImKxhVnpv/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVJCcbpWLiKOGvHK1JgC8ow3zvVMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmC0MIfxF
MP9CQRUR9Wp36lLhugBEKQhMENnAAyJmTUfN/Gj0oqmVYD0GhiTGu0nFCNpkM/8F
Ap7rcXlTWGam8xHd/bMS63IM2yxmlriTF1zpNDdFNgbVLlvIZsz4jpVluaoOE03G
+Uarq6ueEpqWuLCZNXxH2bxAw5hoRqZZtoxjEGz31EfQH85RFAkEG+gKw+H1a3yq
1QmVSicNBA5c4+UXccZgfu98UZgveqIFEbwgCn1nY51lqDWFOiqauNJCUiAs+S1W
Lj5Zedp89hXtYyJzCi5g2a8VaHllYwFPwE3PC7hCti7STk1UuuoZP7r+3jl0YCjS
Tjfw6LkBHC/mzA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:40 2026 by rpki-client