Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: e1TeSMiuO8Dnp/9iHJwAud7vw/b0JxTQxIkgpe8K1Bo=
Subject key identifier: 5D:5F:1B:AB:06:F6:A3:55:C8:8A:14:9F:6F:35:8B:D1:A2:0A:51:AA
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01A08C444194803C1AC17555300ADD4D8D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0A97
Signing time: Thu 10 Sep 2026 17:01:18 +0000
Manifest this update: Thu 10 Sep 2026 17:01:18 +0000
Manifest next update: Fri 11 Sep 2026 17:01:18 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: 6ffcz+Pn93QClthszRtSr8o9gbErX7ZOIl5WFHlXizs=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:41:94:80:3c:1a:c1:75:55:30:0a:dd:4d:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Sep 10 17:01:18 2026 GMT
Not After : Sep 11 17:01:18 2026 GMT
Subject: CN=5d5f1bab06f6a355c88a149f6f358bd1a20a51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:bb:c2:b8:d3:cf:c4:1c:bf:a4:0a:1a:10:
78:e8:92:1f:6b:65:ae:a9:e0:e9:aa:0b:e9:93:91:
f0:e0:7a:da:8e:e3:97:e8:0c:a2:5b:d7:4d:4c:a9:
3c:b7:ab:e4:6c:e9:41:e2:69:32:a9:82:e1:22:9b:
eb:dc:54:9c:99:4d:91:60:a3:e1:f1:df:55:9f:40:
71:27:9d:1a:db:0b:8e:b7:da:64:f2:0b:ff:a8:19:
40:c6:b4:ac:23:fc:91:76:1b:a0:36:ff:4d:1a:6c:
04:f4:b0:38:1c:1b:b6:fa:0a:c1:b9:36:ce:4c:c6:
ea:45:3a:99:cb:12:de:b1:35:ec:cc:ec:d7:41:7c:
fb:c5:8d:78:5b:79:4d:1b:79:e0:a0:14:8a:20:50:
c3:ae:f5:63:4b:b0:bb:53:25:75:40:05:e6:7a:bd:
95:91:82:a4:b1:5e:3f:fa:02:37:90:b9:30:4e:89:
a6:3d:6e:24:6e:f3:c7:7f:5a:7e:c3:fa:86:6a:e1:
26:67:85:df:07:f3:c0:e2:cc:ed:b6:de:3d:5e:b5:
a3:e2:b3:fa:ba:3b:d8:b7:db:7b:05:4e:e3:23:77:
34:32:a6:37:e0:3e:a8:fc:76:fa:b5:0e:3b:05:18:
85:69:82:f2:ce:a2:a7:78:34:42:c7:12:ad:19:3c:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:1B:AB:06:F6:A3:55:C8:8A:14:9F:6F:35:8B:D1:A2:0A:51:AA
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:38:49:ef:e7:f4:d3:c5:a7:1f:29:e8:cc:36:43:ae:67:87:
1c:bc:c4:dd:d1:fc:f1:7c:82:e2:96:90:70:13:5c:92:74:45:
59:7f:f3:fe:9c:52:3f:5d:f2:99:84:45:00:67:78:56:5f:a2:
08:9d:32:b0:48:34:8c:63:0f:e9:23:0c:f8:ed:20:63:11:1e:
91:11:27:a3:16:64:a4:ee:9f:e9:bb:5c:43:4e:cc:31:83:86:
35:0a:9c:56:ee:75:00:5d:c4:1b:ac:4b:2b:5c:6c:1b:3f:25:
aa:ae:02:77:91:24:4f:cf:a4:ae:92:76:0d:9d:d6:99:a2:31:
22:a6:93:1b:4e:63:59:45:bc:bd:57:dd:8b:9c:96:92:ac:f0:
58:e2:8e:3c:d0:f8:7a:92:0d:bb:2c:05:cf:ca:de:40:83:67:
a2:c2:30:19:e5:3b:b2:78:a7:d3:a8:3b:30:93:e8:f1:57:7b:
d6:89:b3:f5:ed:aa:4d:fb:13:34:54:7e:ca:4b:22:83:ae:77:
b7:8a:9b:b3:d5:50:2e:d9:4d:19:77:b9:57:a1:28:3b:35:f5:
bd:ee:93:bb:65:d5:f4:03:87:4f:b6:69:40:6e:b5:61:81:a5:
fd:58:66:04:b6:fb:87:c0:0e:d5:82:01:86:65:78:ab:2f:fb:
83:7e:14:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMREGUgDwawXVVMArdTY1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjZlNzY2MzQ1NTczZDcxNTlkNjc5NGVkYWVkYjczOWEy
NDFmOGYwHhcNMjYwOTEwMTcwMTE4WhcNMjYwOTExMTcwMTE4WjAzMTEwLwYDVQQD
Eyg1ZDVmMWJhYjA2ZjZhMzU1Yzg4YTE0OWY2ZjM1OGJkMWEyMGE1MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1q7wrjTz8Qcv6QKGhB46JIfa2Wu
qeDpqgvpk5Hw4HrajuOX6AyiW9dNTKk8t6vkbOlB4mkyqYLhIpvr3FScmU2RYKPh
8d9Vn0BxJ50a2wuOt9pk8gv/qBlAxrSsI/yRdhugNv9NGmwE9LA4HBu2+grBuTbO
TMbqRTqZyxLesTXszOzXQXz7xY14W3lNG3ngoBSKIFDDrvVjS7C7UyV1QAXmer2V
kYKksV4/+gI3kLkwTommPW4kbvPHf1p+w/qGauEmZ4XfB/PA4szttt49XrWj4rP6
ujvYt9t7BU7jI3c0MqY34D6o/Hb6tQ47BRiFaYLyzqKneDRCxxKtGTwxHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1fG6sG9qNVyIoUn281i9GiClGqMB8GA1UdIwQY
MBaAFMtm52Y0VXPXFZ1nlO2u23OaJB+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NTg5MGUtNmY3MS00ZDM2LTk4OGEt
NjViZjc5YjBhOTg5LzEveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NTg5MGUtNmY3MS00ZDM2LTk4OGEtNjViZjc5YjBhOTg5
LzEveTJiblpqUlZjOWNWbldlVTdhN2JjNW9rSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApThJ7+f0
08WnHynozDZDrmeHHLzE3dH88XyC4paQcBNcknRFWX/z/pxSP13ymYRFAGd4Vl+i
CJ0ysEg0jGMP6SMM+O0gYxEekREnoxZkpO6f6btcQ07MMYOGNQqcVu51AF3EG6xL
K1xsGz8lqq4Cd5EkT8+krpJ2DZ3WmaIxIqaTG05jWUW8vVfdi5yWkqzwWOKOPND4
epINuywFz8reQINnosIwGeU7snin06g7MJPo8Vd71omz9e2qTfsTNFR+yksig653
t4qbs9VQLtlNGXe5V6EoOzX1ve6Tu2XV9AOHT7ZpQG61YYGl/VhmBLb7h8AO1YIB
hmV4qy/7g34USg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:39 2026 by rpki-client