Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: cmc3dV70koTtj9OxqFX/glkJme3LtcrRIBtSfnw1u5Q=
Subject key identifier: 88:A3:98:B0:D2:9A:F8:41:CB:F2:82:2B:C9:AE:1C:09:0E:E7:FB:12
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A165346EE812B5446790D43127E0B17104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: 010F
Signing time: Thu 22 Oct 2026 20:01:37 +0000
Manifest this update: Thu 22 Oct 2026 20:01:37 +0000
Manifest next update: Fri 23 Oct 2026 20:01:37 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: 7X+RoG2hufPyn2Wus5uQPhmAws7cNfaiQV0zKi1+CEM=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:6e:e8:12:b5:44:67:90:d4:31:27:e0:b1:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Oct 22 20:01:37 2026 GMT
Not After : Oct 23 20:01:37 2026 GMT
Subject: CN=88a398b0d29af841cbf2822bc9ae1c090ee7fb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:63:cb:82:95:58:aa:01:29:11:bd:e6:42:
1e:5c:87:65:f3:21:2e:19:d5:ee:fa:ec:e2:99:33:
ff:23:aa:84:93:bf:b4:9d:ca:69:b7:3f:bb:06:8b:
3a:f4:a0:45:00:77:1f:ed:29:84:95:5a:53:8e:c4:
74:df:2a:7c:2e:a8:a0:39:09:53:cd:1f:96:fd:5e:
7a:49:ee:ec:c1:52:bc:14:8e:dd:6b:b2:cb:4f:77:
a6:2f:b1:86:f2:97:5b:55:38:cb:c2:b8:17:50:c1:
e0:9b:3f:10:8e:27:18:c8:69:e8:05:31:8b:38:c5:
97:59:da:86:a1:b8:2c:f0:d2:52:26:e5:63:7c:c0:
07:09:a0:8f:1d:00:bb:2d:e1:21:41:58:2f:93:61:
51:eb:2a:bd:ba:a4:4a:54:97:d1:75:66:ee:fe:22:
04:dc:1c:0d:be:bc:35:38:57:81:d3:cc:0d:bf:0f:
f2:f7:fe:c6:22:14:37:ac:4b:30:9b:df:27:35:e7:
84:57:ee:eb:05:35:dc:d0:7e:da:dd:40:0e:ff:33:
bb:80:01:84:6d:79:94:09:49:5f:fa:85:5d:29:7b:
a1:5f:ff:fb:63:b1:f8:d1:d3:fa:cb:52:cb:70:ac:
bf:51:c8:fb:41:5c:39:fe:cd:00:7b:d2:ba:f8:a6:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:98:B0:D2:9A:F8:41:CB:F2:82:2B:C9:AE:1C:09:0E:E7:FB:12
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:fd:03:aa:ac:18:93:c8:ea:10:3a:b4:68:d5:a7:b5:73:
69:92:c4:de:9e:4c:ee:1c:00:c3:4f:67:70:ab:ab:a7:6b:fc:
29:ba:c3:61:27:48:82:89:13:97:a4:33:e6:07:02:2e:cc:cc:
dd:5a:59:08:9c:90:1e:be:d4:be:7e:85:cb:48:55:b4:7e:f0:
74:35:f5:c3:0e:f6:82:17:c2:2e:3a:63:7d:13:e3:24:3b:63:
52:bb:03:be:42:19:85:29:4d:57:41:57:9f:47:4f:7d:6c:76:
2a:55:73:e3:90:06:a2:0b:19:17:e9:75:09:af:cf:dd:a7:d3:
ae:9b:73:8a:18:aa:64:e9:9f:de:87:53:2e:c3:2d:da:0b:ef:
3a:71:dd:f9:ac:5d:39:92:af:a4:c4:01:af:1a:a5:b5:66:ef:
eb:86:de:9e:68:2d:eb:83:8e:e6:16:a7:e6:7a:e5:40:80:e7:
23:2b:33:87:f6:0b:cf:a8:d5:92:fc:a2:3a:4a:b5:ca:03:09:
c7:3c:cf:70:db:ad:61:9a:02:97:ba:d1:e9:83:55:d1:3f:09:
a8:5f:50:1f:f1:a3:ad:f5:68:20:13:b3:be:63:d1:e6:bc:93:
63:a4:ea:f8:5f:b1:d9:fd:b5:fa:98:dd:49:bd:74:fb:b2:77:
3c:5e:d3:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFlNG7oErVEZ5DUMSfgsXEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNmE5ZWY4MTBlZGFhZjUyNDUzZDI4MzczZWYwZjc5YjA5
YmQ2M2QwHhcNMjYxMDIyMjAwMTM3WhcNMjYxMDIzMjAwMTM3WjAzMTEwLwYDVQQD
Eyg4OGEzOThiMGQyOWFmODQxY2JmMjgyMmJjOWFlMWMwOTBlZTdmYjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rxjy4KVWKoBKRG95kIeXIdl8yEu
GdXu+uzimTP/I6qEk7+0ncpptz+7Bos69KBFAHcf7SmElVpTjsR03yp8LqigOQlT
zR+W/V56Se7swVK8FI7da7LLT3emL7GG8pdbVTjLwrgXUMHgmz8QjicYyGnoBTGL
OMWXWdqGobgs8NJSJuVjfMAHCaCPHQC7LeEhQVgvk2FR6yq9uqRKVJfRdWbu/iIE
3BwNvrw1OFeB08wNvw/y9/7GIhQ3rEswm98nNeeEV+7rBTXc0H7a3UAO/zO7gAGE
bXmUCUlf+oVdKXuhX//7Y7H40dP6y1LLcKy/Ucj7QVw5/s0Ae9K6+KY8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIijmLDSmvhBy/KCK8muHAkO5/sSMB8GA1UdIwQY
MBaAFMtqnvgQ7ar1JFPSg3PvD3mwm9Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgt
NGEzZTFmYjlhYWU5LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NmRjZDYtMGE4Yy00ZTU0LWFiZTgtNGEzZTFmYjlhYWU5
LzEveTJxZS1CRHRxdlVrVTlLRGMtOFBlYkNiMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEH9A6qs
GJPI6hA6tGjVp7VzaZLE3p5M7hwAw09ncKurp2v8KbrDYSdIgokTl6Qz5gcCLszM
3VpZCJyQHr7Uvn6Fy0hVtH7wdDX1ww72ghfCLjpjfRPjJDtjUrsDvkIZhSlNV0FX
n0dPfWx2KlVz45AGogsZF+l1Ca/P3afTrptzihiqZOmf3odTLsMt2gvvOnHd+axd
OZKvpMQBrxqltWbv64benmgt64OO5han5nrlQIDnIyszh/YLz6jVkvyiOkq1ygMJ
xzzPcNutYZoCl7rR6YNV0T8JqF9QH/GjrfVoIBOzvmPR5ryTY6Tq+F+x2f21+pjd
Sb10+7J3PF7THg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:23 2026 by rpki-client