Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: I7KRAumEXpw6rGAFgZR1+JCAReVyYcWC7VoNY8T8rGw=
Subject key identifier: 98:DF:21:8D:3F:A4:98:92:41:58:03:D5:78:7B:96:D4:B0:6B:AD:46
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 01A17E863A1944864B0D994198BA7A73D4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 05B0
Signing time: Tue 27 Oct 2026 18:01:28 +0000
Manifest this update: Tue 27 Oct 2026 18:01:28 +0000
Manifest next update: Wed 28 Oct 2026 18:01:28 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: zSkFlKLKVjWFfv39TFkUT1GMn98Bvd7YyLt+W8imZzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:3a:19:44:86:4b:0d:99:41:98:ba:7a:73:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Oct 27 18:01:28 2026 GMT
Not After : Oct 28 18:01:28 2026 GMT
Subject: CN=98df218d3fa49892415803d5787b96d4b06bad46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:0b:67:eb:01:cb:24:84:e6:33:1c:fc:33:
11:c3:53:d2:49:67:0c:c4:5a:8a:e1:2a:4f:b8:8a:
fd:ab:09:80:8a:c2:6e:dd:2f:91:08:2f:89:6d:23:
e7:ed:d2:5f:89:fc:45:df:06:06:de:67:c4:d2:7a:
1a:8f:60:6e:7c:1c:2e:c2:34:26:b6:bd:16:62:bb:
02:0d:0b:83:ab:73:4e:96:75:98:ef:b9:b2:3c:90:
44:bc:d4:5f:08:b5:eb:fd:23:2b:07:fa:f3:d0:81:
11:bb:c8:6c:14:73:84:7e:f8:f8:4b:31:00:5b:78:
c5:56:0a:f3:9b:e1:62:41:d7:e8:1c:64:a1:bb:ca:
76:6f:aa:a6:90:1b:1e:b8:77:33:55:d1:df:87:0b:
b4:01:12:09:8b:63:8e:b9:d3:67:d2:49:95:e9:c5:
06:81:1f:02:2c:3e:1b:de:a5:60:3c:b9:87:39:a8:
35:6c:24:af:f4:de:14:cb:e8:80:02:ec:19:34:97:
03:9f:23:f4:ae:15:93:34:13:03:ac:db:c9:c1:6e:
5a:e1:4b:8d:7a:e2:13:45:2f:30:4f:83:ca:00:f0:
9e:e2:1e:1d:a7:5d:9e:9a:f4:f9:14:dc:29:70:1b:
25:23:de:ad:1c:c5:65:ae:02:bc:f5:bb:d2:4d:fa:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:21:8D:3F:A4:98:92:41:58:03:D5:78:7B:96:D4:B0:6B:AD:46
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:dd:7e:25:cf:cb:02:a9:b3:5a:ef:56:5b:ac:13:f0:b9:
26:4c:b2:ca:7a:de:88:d6:8f:98:1e:06:5e:56:f3:92:2d:a9:
2a:5e:6d:b1:74:be:d6:6d:6e:98:7b:38:7f:9d:46:b6:0f:32:
e4:6c:a5:bf:97:fb:d8:86:e4:27:7f:44:31:d6:de:9c:0c:df:
95:04:02:01:75:1e:00:e0:fa:fe:9b:30:61:44:bd:6c:a2:20:
3d:e8:26:39:fb:3e:36:7b:7c:40:66:76:67:71:36:18:58:a6:
33:4a:9a:7e:52:8c:f1:b5:20:dc:b4:bf:d7:ac:e4:d3:1d:47:
0f:34:61:14:74:60:21:7b:ef:8a:93:88:fa:a8:2e:50:f7:ce:
91:e8:58:9b:43:5e:b1:92:33:2f:9c:7e:90:47:3c:f9:34:ad:
bc:bc:2f:64:6a:50:b5:4e:09:b5:4b:9a:83:2e:58:db:bf:3e:
23:48:57:88:f2:ff:18:1b:dc:e7:c9:aa:78:63:77:5f:c7:3e:
44:a7:a1:6d:18:1c:1d:6c:03:0a:84:3e:e1:be:69:95:4d:f6:
10:47:dc:f4:58:5e:2b:ec:a3:b7:28:a3:b6:5a:29:6e:4f:35:
73:ec:4f:20:28:0d:6b:d6:54:7d:e7:87:7d:86:2c:f6:e2:44:
9a:05:c1:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hjoZRIZLDZlBmLp6c9TgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm
MmVhMDEwHhcNMjYxMDI3MTgwMTI4WhcNMjYxMDI4MTgwMTI4WjAzMTEwLwYDVQQD
Eyg5OGRmMjE4ZDNmYTQ5ODkyNDE1ODAzZDU3ODdiOTZkNGIwNmJhZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc4LZ+sByySE5jMc/DMRw1PSSWcM
xFqK4SpPuIr9qwmAisJu3S+RCC+JbSPn7dJfifxF3wYG3mfE0noaj2BufBwuwjQm
tr0WYrsCDQuDq3NOlnWY77myPJBEvNRfCLXr/SMrB/rz0IERu8hsFHOEfvj4SzEA
W3jFVgrzm+FiQdfoHGShu8p2b6qmkBseuHczVdHfhwu0ARIJi2OOudNn0kmV6cUG
gR8CLD4b3qVgPLmHOag1bCSv9N4Uy+iAAuwZNJcDnyP0rhWTNBMDrNvJwW5a4UuN
euITRS8wT4PKAPCe4h4dp12emvT5FNwpcBslI96tHMVlrgK89bvSTfqaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjfIY0/pJiSQVgD1Xh7ltSwa61GMB8GA1UdIwQY
MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt
ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1
LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgvdfiXP
ywKps1rvVlusE/C5JkyyynreiNaPmB4GXlbzki2pKl5tsXS+1m1umHs4f51Gtg8y
5Gylv5f72IbkJ39EMdbenAzflQQCAXUeAOD6/pswYUS9bKIgPegmOfs+Nnt8QGZ2
Z3E2GFimM0qaflKM8bUg3LS/16zk0x1HDzRhFHRgIXvvipOI+qguUPfOkehYm0Ne
sZIzL5x+kEc8+TStvLwvZGpQtU4JtUuagy5Y278+I0hXiPL/GBvc58mqeGN3X8c+
RKehbRgcHWwDCoQ+4b5plU32EEfc9FheK+yjtyijtlopbk81c+xPICgNa9ZUfeeH
fYYs9uJEmgXBrw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:36 2026 by rpki-client