Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
File: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft (raw, json)
Hash identifier: m1AFZiBvrM2SGYXz0Yb8BzqhUq0BmcH0CTS0GHmQ890=
Subject key identifier: 28:89:49:43:A4:6D:38:DD:62:95:3D:CE:78:26:6D:34:7D:25:57:08
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Certificate issuer: /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial: 01A14BE220FFB9F86193CBAD0614B84070DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
Manifest number: 0115
Signing time: Sat 17 Oct 2026 22:01:13 +0000
Manifest this update: Sat 17 Oct 2026 22:01:13 +0000
Manifest next update: Sun 18 Oct 2026 22:01:13 +0000
Files and hashes: 1: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (hash: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=)
2: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl (hash: aE+Kv8Ew7n+CEMCCoRIHHEMRrBGXxEav1Lpk9Q/m7NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e2:20:ff:b9:f8:61:93:cb:ad:06:14:b8:40:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Validity
Not Before: Oct 17 22:01:13 2026 GMT
Not After : Oct 18 22:01:13 2026 GMT
Subject: CN=28894943a46d38dd62953dce78266d347d255708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:ca:c3:0d:18:6f:47:4c:7c:55:be:9f:0b:
d7:c2:64:38:2d:ca:95:0d:77:02:f3:d0:46:03:ec:
21:78:ff:14:a2:b8:8d:22:05:4a:1a:1b:ac:d9:ac:
71:7e:dc:62:4c:5a:f4:41:24:2c:53:c7:f9:47:9a:
ec:4e:40:d8:c2:81:1c:c0:60:c3:92:05:a7:20:51:
d2:98:5c:87:8e:6f:aa:2b:19:f3:c8:b2:ae:5c:ee:
5a:a9:2b:81:d5:e3:ab:ba:2c:3f:bd:15:96:2d:a8:
ca:17:bd:5f:02:d4:3c:55:50:bb:40:b9:35:e7:3a:
22:10:24:d7:36:bd:a6:68:86:02:a4:95:32:03:8f:
ad:2d:2b:36:62:17:89:f2:4c:4c:a5:79:f7:f0:5a:
2b:3f:54:2d:2c:19:43:10:98:85:44:bd:f7:e9:80:
78:15:d5:8a:15:48:f0:d8:55:d0:ec:0b:bb:4b:87:
8a:da:55:46:c6:2f:3f:28:5c:d1:43:c0:63:ca:64:
4f:11:05:a2:86:1f:e4:7e:84:1e:35:29:50:52:a7:
9f:91:f9:c2:82:c2:cf:16:d9:51:44:47:89:83:60:
ea:9a:8e:5c:f7:24:a5:4d:4d:1d:40:9b:1b:41:54:
f7:03:0e:c0:4b:ef:01:9e:e5:99:7a:ac:a6:9b:b4:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:49:43:A4:6D:38:DD:62:95:3D:CE:78:26:6D:34:7D:25:57:08
X509v3 Authority Key Identifier:
keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:44:30:6a:21:84:2c:37:d0:37:b0:f6:0e:c7:fa:4f:89:66:
86:66:9b:89:f8:cc:de:d1:5b:7b:c4:9d:32:02:d3:7a:52:c4:
16:87:8f:ac:51:72:a4:4c:9c:05:6b:ff:53:54:54:7a:a5:ea:
ac:b2:cc:7d:01:bc:75:fe:3f:47:11:ae:1e:39:c7:aa:50:d3:
73:ed:83:71:9c:db:92:9d:37:76:27:7c:9e:ff:fc:ae:7d:98:
ab:79:39:45:16:da:74:c8:b0:51:1b:d4:9c:0c:0f:99:9f:87:
65:5a:11:3c:56:cb:67:c3:fc:ee:b1:dc:e7:0b:c6:97:40:6f:
7b:f0:1e:c5:b8:cf:6a:cb:74:c3:4b:2c:a0:b6:56:f5:16:32:
3b:6a:b0:77:09:e0:50:41:60:c1:a8:cb:fd:48:c9:32:99:14:
f4:82:3e:34:49:4d:49:a2:a2:63:86:b5:2f:bc:ce:2e:22:83:
3e:9a:56:25:85:06:17:bb:6e:de:32:cd:87:eb:bf:3a:4f:84:
93:53:bf:11:e5:db:22:35:a3:63:27:83:9e:88:31:03:8f:6b:
b5:b5:15:79:6b:a5:ee:7c:e5:0c:7e:9c:64:94:df:78:b5:af:
4a:9b:de:58:6f:a7:a6:c4:57:4b:90:ea:f2:81:7f:a0:0c:8f:
41:e4:ea:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFL4iD/ufhhk8utBhS4QHDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWM2Mzk0MTM0YTE3ZDY0OTdjYTNhYmFjZDM3NWM0MDE0
MmYzZTgwHhcNMjYxMDE3MjIwMTEzWhcNMjYxMDE4MjIwMTEzWjAzMTEwLwYDVQQD
EygyODg5NDk0M2E0NmQzOGRkNjI5NTNkY2U3ODI2NmQzNDdkMjU1NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/Kww0Yb0dMfFW+nwvXwmQ4LcqV
DXcC89BGA+wheP8UoriNIgVKGhus2axxftxiTFr0QSQsU8f5R5rsTkDYwoEcwGDD
kgWnIFHSmFyHjm+qKxnzyLKuXO5aqSuB1eOruiw/vRWWLajKF71fAtQ8VVC7QLk1
5zoiECTXNr2maIYCpJUyA4+tLSs2YheJ8kxMpXn38ForP1QtLBlDEJiFRL336YB4
FdWKFUjw2FXQ7Au7S4eK2lVGxi8/KFzRQ8BjymRPEQWihh/kfoQeNSlQUqefkfnC
gsLPFtlRREeJg2Dqmo5c9ySlTU0dQJsbQVT3Aw7AS+8BnuWZeqymm7QVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiJSUOkbTjdYpU9zngmbTR9JVcIMB8GA1UdIwQY
MBaAFGPsY5QTShfWSXyjq6zTdcQBQvPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZjA1MzItNWQyNS00ZTEwLWJmZDMt
OWQ4ZWU3NjA5MTVhLzEvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZjA1MzItNWQyNS00ZTEwLWJmZDMtOWQ4ZWU3NjA5MTVh
LzEvWS14amxCTktGOVpKZktPcnJOTjF4QUZDOC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0QwaiGE
LDfQN7D2Dsf6T4lmhmabifjM3tFbe8SdMgLTelLEFoePrFFypEycBWv/U1RUeqXq
rLLMfQG8df4/RxGuHjnHqlDTc+2DcZzbkp03did8nv/8rn2Yq3k5RRbadMiwURvU
nAwPmZ+HZVoRPFbLZ8P87rHc5wvGl0Bve/AexbjPast0w0ssoLZW9RYyO2qwdwng
UEFgwajL/UjJMpkU9II+NElNSaKiY4a1L7zOLiKDPppWJYUGF7tu3jLNh+u/Ok+E
k1O/EeXbIjWjYyeDnogxA49rtbUVeWul7nzlDH6cZJTfeLWvSpveWG+npsRXS5Dq
8oF/oAyPQeTqlw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:39 2026 by rpki-client