Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
File: Y2csMhGSVoEc_v9efDYpEZNlxBk.mft (raw, json)
Hash identifier: ykA0yJM3Bx51faVxF8Jss+zJ46fJb/j0x2UcEogz7NA=
Subject key identifier: 1C:B0:7B:C9:89:10:72:CE:A5:38:82:AE:4E:03:BE:01:E7:43:55:A8
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Certificate issuer: /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial: 01A10248F98523959163147C81C11B167A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:39 +0000
Manifest this update: Sat 03 Oct 2026 15:01:39 +0000
Manifest next update: Sun 04 Oct 2026 15:01:39 +0000
Files and hashes: 1: Y2csMhGSVoEc_v9efDYpEZNlxBk.crl (hash: WepZzru9vPzFHGyDsjmqtapOuLvDZbqQ2M/dENsvRFI=)
2: dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa (hash: 7negqj+cXGDnJClvB1tA9Ds9JK3g22g19iEuLC7d5hM=)
3: zo2qx61yORuCWKZTMikpC0Y_XdA.asa (hash: htZ7XNkenFrj9WSytSLvWOuP7M7LeldRqaDXaKNxolY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:f9:85:23:95:91:63:14:7c:81:c1:1b:16:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
Validity
Not Before: Oct 3 15:01:39 2026 GMT
Not After : Oct 4 15:01:39 2026 GMT
Subject: CN=1cb07bc9891072cea53882ae4e03be01e74355a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:7f:d9:37:e4:8c:5f:37:07:2d:3a:52:33:
a7:54:9c:f8:94:7d:96:13:f6:7c:c7:e8:58:99:b6:
10:93:cb:db:91:cd:3c:c6:0d:5f:ac:10:53:1a:82:
c7:e9:c3:ec:f6:45:07:7a:a5:a1:44:80:ef:6f:1b:
97:d7:41:b5:1e:7e:72:32:5b:f7:f3:67:ed:c0:c5:
1e:06:7c:43:17:9d:84:55:8c:d4:88:8a:0d:e1:96:
31:c2:ef:d4:a7:59:ed:b2:19:4b:5b:8e:ca:a7:cc:
ec:b4:c4:8d:76:f5:4b:04:60:3a:ee:dd:4f:c4:26:
78:ca:07:19:ad:f7:57:ca:be:90:0a:3c:71:f1:d2:
fa:c5:9f:f2:40:b6:23:b6:ef:83:3f:ff:e6:63:a0:
dd:4d:75:86:43:e3:40:60:c9:c2:e8:8a:15:f9:7d:
0d:d7:de:34:7a:1c:fe:05:2d:8b:0f:cf:d3:fd:77:
44:85:b1:ec:aa:42:30:c9:1c:0a:3f:fd:50:b1:fd:
22:51:2b:7f:04:6b:0a:7a:e7:49:b7:44:ea:2a:07:
31:79:95:91:d2:97:a1:06:13:8a:0e:6c:b1:40:d8:
c1:dc:a2:67:34:4a:25:81:2b:2a:db:d5:64:bd:f9:
56:24:16:9e:77:da:84:2f:28:95:91:74:98:c6:ec:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:7B:C9:89:10:72:CE:A5:38:82:AE:4E:03:BE:01:E7:43:55:A8
X509v3 Authority Key Identifier:
keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:01:a7:fd:c0:2a:1a:22:13:fb:de:5d:d0:09:ca:63:55:16:
85:e0:c6:f7:62:e1:3e:d9:d2:a8:d8:d4:eb:db:3a:ea:22:78:
a5:a8:a7:1d:ff:e6:21:92:df:d3:c7:da:32:85:b4:a9:f2:52:
cf:4c:38:ec:05:bc:1d:63:a7:f8:d4:66:b2:ae:46:25:8e:68:
62:90:93:45:ec:e0:a0:fa:8f:c4:cc:84:13:f2:70:ae:7a:a9:
3e:1b:d3:47:79:c5:78:31:a2:84:2e:58:96:0d:82:fa:37:70:
f3:c1:27:d1:c0:03:b6:0b:be:0e:4e:ae:2c:1d:ff:3a:ab:12:
93:87:17:53:24:9f:4e:30:8d:b6:3e:3f:6d:a0:05:c3:40:51:
ed:af:e3:4f:6b:a6:94:47:dc:8c:3f:f5:aa:cb:d2:2f:ee:32:
18:1a:8d:5b:ae:be:ce:54:a7:53:29:23:d8:52:b7:76:ea:85:
46:7c:55:75:90:f7:18:b4:95:3a:dd:9b:db:1d:d5:3f:07:f5:
dc:44:78:95:4c:ea:ee:cf:e7:d2:dc:42:72:68:c9:8e:08:92:
bc:75:4d:a5:e4:89:d7:e6:b1:b5:8f:6a:c2:a1:7c:c8:f6:77:
b4:37:95:42:fe:f5:3b:0c:b4:69:fc:8f:ff:ae:44:e6:99:75:
d7:a0:6c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSPmFI5WRYxR8gcEbFnomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjcyYzMyMTE5MjU2ODExY2ZlZmY1ZTdjMzYyOTExOTM2
NWM0MTkwHhcNMjYxMDAzMTUwMTM5WhcNMjYxMDA0MTUwMTM5WjAzMTEwLwYDVQQD
EygxY2IwN2JjOTg5MTA3MmNlYTUzODgyYWU0ZTAzYmUwMWU3NDM1NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJd/2TfkjF83By06UjOnVJz4lH2W
E/Z8x+hYmbYQk8vbkc08xg1frBBTGoLH6cPs9kUHeqWhRIDvbxuX10G1Hn5yMlv3
82ftwMUeBnxDF52EVYzUiIoN4ZYxwu/Up1ntshlLW47Kp8zstMSNdvVLBGA67t1P
xCZ4ygcZrfdXyr6QCjxx8dL6xZ/yQLYjtu+DP//mY6DdTXWGQ+NAYMnC6IoV+X0N
1940ehz+BS2LD8/T/XdEhbHsqkIwyRwKP/1Qsf0iUSt/BGsKeudJt0TqKgcxeZWR
0pehBhOKDmyxQNjB3KJnNEolgSsq29VkvflWJBaed9qELyiVkXSYxuyF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBywe8mJEHLOpTiCrk4DvgHnQ1WoMB8GA1UdIwQY
MBaAFGNnLDIRklaBHP7/Xnw2KRGTZcQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jYmVmNmQtZGI3My00ZDhiLWIwY2Mt
ZjA2ZTg5YzQ3NzBhLzEvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jYmVmNmQtZGI3My00ZDhiLWIwY2MtZjA2ZTg5YzQ3NzBh
LzEvWTJjc01oR1NWb0VjX3Y5ZWZEWXBFWk5seEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAywGn/cAq
GiIT+95d0AnKY1UWheDG92LhPtnSqNjU69s66iJ4painHf/mIZLf08faMoW0qfJS
z0w47AW8HWOn+NRmsq5GJY5oYpCTRezgoPqPxMyEE/JwrnqpPhvTR3nFeDGihC5Y
lg2C+jdw88En0cADtgu+Dk6uLB3/OqsSk4cXUySfTjCNtj4/baAFw0BR7a/jT2um
lEfcjD/1qsvSL+4yGBqNW66+zlSnUykj2FK3duqFRnxVdZD3GLSVOt2b2x3VPwf1
3ER4lUzq7s/n0txCcmjJjgiSvHVNpeSJ1+axtY9qwqF8yPZ3tDeVQv71Owy0afyP
/65E5pl116BsmA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:41:04 2026 by rpki-client