Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
File: Y2csMhGSVoEc_v9efDYpEZNlxBk.mft (raw, json)
Hash identifier: cKpG6f8QqDB3+rZ/JpDwWebJIPRKMxHFy+SdiqtxNx4=
Subject key identifier: BC:98:C8:CE:F1:7E:E9:BA:3C:80:53:62:9E:39:C0:8C:FA:C7:19:A4
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Certificate issuer: /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial: 01A0F6B2160B2FB83A6001C7A1175D5C975F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 09:01:01 +0000
Manifest this update: Thu 01 Oct 2026 09:01:01 +0000
Manifest next update: Fri 02 Oct 2026 09:01:01 +0000
Files and hashes: 1: Y2csMhGSVoEc_v9efDYpEZNlxBk.crl (hash: ytt6YsmDaae43XWV2oGZgzZl1RtgDHJ9yET+RJbuzcs=)
2: dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa (hash: 7negqj+cXGDnJClvB1tA9Ds9JK3g22g19iEuLC7d5hM=)
3: zo2qx61yORuCWKZTMikpC0Y_XdA.asa (hash: htZ7XNkenFrj9WSytSLvWOuP7M7LeldRqaDXaKNxolY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:16:0b:2f:b8:3a:60:01:c7:a1:17:5d:5c:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
Validity
Not Before: Oct 1 09:01:01 2026 GMT
Not After : Oct 2 09:01:01 2026 GMT
Subject: CN=bc98c8cef17ee9ba3c8053629e39c08cfac719a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:6e:c3:08:57:4b:80:50:b7:88:e6:db:6c:
62:f5:9c:1b:f7:fc:16:3d:6d:64:89:83:b3:24:10:
ba:55:8b:9c:ab:23:f4:fb:c5:55:8f:0b:e4:b5:3b:
e4:89:22:83:00:cd:59:7d:1a:12:59:64:8e:64:fb:
58:af:6c:96:32:c0:d7:a5:8e:ad:a1:57:4a:36:65:
2f:01:cf:86:4e:ba:8f:97:1c:3d:c1:37:15:bc:cb:
7f:2a:8d:39:9b:e6:31:05:1a:f8:81:de:7b:96:e7:
18:db:cd:bf:e3:50:d4:9c:5f:88:9b:ca:00:9d:c3:
64:ea:e9:77:4f:81:83:78:f8:33:98:84:4c:4f:88:
46:09:d0:28:6b:96:3d:33:26:ac:2d:02:97:6f:ed:
dd:7f:fe:f4:ac:5b:0e:15:cf:4a:87:cf:cb:ea:f7:
d1:5a:a8:1e:41:d7:59:59:97:a5:e6:52:ed:c8:19:
9b:1d:c2:12:f6:3f:68:8f:d8:e9:b4:ac:98:f0:41:
e5:30:9c:45:15:24:0f:68:61:2f:cf:ba:9b:54:08:
b0:a1:72:73:da:c9:ba:29:7d:9c:e6:47:2d:73:bf:
56:e9:d6:31:e5:05:a0:c9:1f:bb:ee:5b:60:ea:f1:
09:90:2e:4a:0d:74:f0:c9:84:0c:47:2f:a7:71:07:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:C8:CE:F1:7E:E9:BA:3C:80:53:62:9E:39:C0:8C:FA:C7:19:A4
X509v3 Authority Key Identifier:
keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:a6:9c:1b:09:f1:d3:2f:65:7d:62:27:a9:c6:3f:74:5b:
42:cf:f2:90:26:dd:d0:d6:2e:42:1f:9f:9f:08:fc:b1:e6:f0:
2b:c3:56:de:de:86:3e:bc:87:8b:69:9a:95:be:c1:be:48:4c:
41:0c:31:d2:f6:50:75:17:1a:a7:fd:08:21:bd:fc:a8:45:95:
fc:e3:eb:95:75:64:90:ab:53:31:28:3f:68:d6:68:a0:b9:15:
39:a6:81:33:cd:5e:c3:1b:e3:0a:88:c5:bf:e9:8a:fd:53:2d:
01:39:04:ba:08:d6:c6:9b:f7:d1:9e:03:25:af:2c:fb:7d:2a:
2a:99:1a:26:04:fb:f8:90:8d:8b:50:55:9c:10:f5:2f:42:5b:
13:91:90:79:f4:19:0b:10:89:13:a5:d7:55:68:73:e2:fb:9b:
71:b9:29:29:85:5e:f6:07:c4:35:b2:9f:2c:92:0a:9e:6d:ab:
2d:75:fc:9b:66:0f:3a:3a:69:d6:78:2c:39:5b:6a:6e:96:cd:
c1:fc:39:80:9d:be:29:cf:94:2b:f2:8e:e4:13:42:57:fe:2a:
52:30:27:13:b9:40:3f:ce:49:52:d5:e4:70:05:0d:6e:47:22:
b2:f6:c9:7a:c2:38:eb:da:9b:18:b0:a6:75:fe:81:28:4b:3e:
b8:7a:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:25:52 2026 by rpki-client