Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: +1zAPdoNqf8PwrWp/WlDXVtm6YDInEHXTvY8ulO6VLk=
Subject key identifier: 2A:4F:1A:C5:BF:9D:85:40:34:6E:70:5A:B0:05:6E:BC:1A:04:2C:61
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 01A1250C79FAFEFFDEEA4A8C8C9F05E36BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:02:16 +0000
Manifest this update: Sat 10 Oct 2026 09:02:16 +0000
Manifest next update: Sun 11 Oct 2026 09:02:16 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: AnULjtEdf3qrgYbtzDo/lIFr9HfRBGjL0Ky3fCRV7PM=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:79:fa:fe:ff:de:ea:4a:8c:8c:9f:05:e3:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Oct 10 09:02:16 2026 GMT
Not After : Oct 11 09:02:16 2026 GMT
Subject: CN=2a4f1ac5bf9d8540346e705ab0056ebc1a042c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:23:80:ef:8d:93:d2:5c:cc:c9:94:2a:f6:
dd:8b:dc:f0:fc:c4:b9:cd:e0:26:2d:0d:57:d7:e1:
e6:3a:02:55:ec:6f:0f:15:1e:f4:ad:f0:0b:8e:c8:
fa:31:9b:1f:f0:88:34:13:b0:1f:a3:3c:6c:f7:4f:
d4:8e:df:b2:f0:b2:ac:26:02:46:cc:0f:b1:27:f2:
bc:62:9f:dc:72:fd:e7:2d:7f:76:3e:6f:8d:08:9f:
02:2f:01:3c:7e:74:a4:5c:bf:79:c2:ab:89:f6:3a:
94:10:3a:72:7f:77:62:ad:04:9b:19:b2:0f:58:47:
7e:60:10:ac:22:ab:33:28:44:6d:8a:a3:d4:0f:b9:
ce:ed:b5:93:4a:0d:72:79:89:d6:8a:3a:67:88:4c:
45:9d:64:90:1d:ff:52:e0:e7:7f:c1:a8:c6:06:81:
2a:f9:34:81:0a:b1:e7:f5:a2:20:48:d2:76:bb:9a:
c9:d2:c6:f3:4a:f3:c2:f3:f9:49:4c:38:96:e0:1e:
7f:4a:c3:0f:8e:23:d3:8e:e8:6b:ed:7f:11:87:3b:
c2:08:f7:8b:76:27:4b:76:4b:78:5a:31:39:b8:c7:
ac:27:18:8f:25:c3:e1:84:80:ec:0c:29:ab:a5:fb:
91:f0:ef:39:49:57:98:93:9c:38:1c:e9:12:75:4c:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:1A:C5:BF:9D:85:40:34:6E:70:5A:B0:05:6E:BC:1A:04:2C:61
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e2:db:7d:51:64:ba:c2:78:0a:44:19:db:1d:b8:21:2f:d8:
df:a3:56:b2:1c:a5:26:17:d5:80:1b:66:df:e7:62:a9:b7:26:
c2:7a:fe:f7:1e:93:97:64:a2:09:11:6c:1f:48:ab:3e:02:47:
fd:ca:e3:4e:c0:05:d2:4f:d9:25:95:46:ca:86:01:f4:cd:f8:
dd:b3:46:a1:d6:79:34:24:3a:7c:6f:d3:4e:67:64:ea:a6:9d:
4f:a3:03:1d:6d:b9:fa:9f:0e:48:a3:bd:84:53:de:d5:29:0a:
f1:45:dc:e3:10:13:d5:72:94:49:ce:c7:2d:f1:7f:6d:c5:3a:
2a:d8:1b:84:0d:0a:24:de:40:73:13:0f:46:17:a3:9e:85:c2:
ac:61:2d:09:2a:d7:84:a8:4d:d3:13:97:55:54:ee:f6:6f:18:
9e:d4:5a:ec:c2:b2:0a:f7:b4:44:c3:df:18:a0:25:d1:ce:3b:
4e:5b:1c:c6:61:d2:b2:bf:0e:13:7b:c9:8d:a5:d0:db:5e:5e:
03:da:98:df:3a:da:30:8a:50:d9:fd:a6:d2:47:7e:40:ec:96:
c9:87:b6:5f:a7:80:41:0f:66:4a:c1:32:23:51:37:e3:47:c9:
0d:d5:02:f1:d1:b5:0a:1c:51:cf:1d:ab:1a:43:17:eb:e2:19:
3c:d0:39:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElDHn6/v/e6kqMjJ8F42uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGU5YjA2ZjUyYzI1MmZlNGI5OTJkZjZhNjBhZmJhMWUy
YTY1MDQwHhcNMjYxMDEwMDkwMjE2WhcNMjYxMDExMDkwMjE2WjAzMTEwLwYDVQQD
EygyYTRmMWFjNWJmOWQ4NTQwMzQ2ZTcwNWFiMDA1NmViYzFhMDQyYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tYjgO+Nk9JczMmUKvbdi9zw/MS5
zeAmLQ1X1+HmOgJV7G8PFR70rfALjsj6MZsf8Ig0E7Afozxs90/Ujt+y8LKsJgJG
zA+xJ/K8Yp/ccv3nLX92Pm+NCJ8CLwE8fnSkXL95wquJ9jqUEDpyf3dirQSbGbIP
WEd+YBCsIqszKERtiqPUD7nO7bWTSg1yeYnWijpniExFnWSQHf9S4Od/wajGBoEq
+TSBCrHn9aIgSNJ2u5rJ0sbzSvPC8/lJTDiW4B5/SsMPjiPTjuhr7X8RhzvCCPeL
didLdkt4WjE5uMesJxiPJcPhhIDsDCmrpfuR8O85SVeYk5w4HOkSdUwKqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpPGsW/nYVANG5wWrAFbrwaBCxhMB8GA1UdIwQY
MBaAFD2Omwb1LCUv5LmS32pgr7oeKmUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFk2YkJ2VXNKU19rdVpMZmFtQ3Z1aDRxWlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMt
ZDgwOGIxYWZhODgxLzEvUFk2YkJ2VXNKU19rdVpMZmFtQ3Z1aDRxWlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMtZDgwOGIxYWZhODgx
LzEvUFk2YkJ2VXNKU19rdVpMZmFtQ3Z1aDRxWlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuLbfVFk
usJ4CkQZ2x24IS/Y36NWshylJhfVgBtm3+diqbcmwnr+9x6Tl2SiCRFsH0irPgJH
/crjTsAF0k/ZJZVGyoYB9M343bNGodZ5NCQ6fG/TTmdk6qadT6MDHW25+p8OSKO9
hFPe1SkK8UXc4xAT1XKUSc7HLfF/bcU6KtgbhA0KJN5AcxMPRhejnoXCrGEtCSrX
hKhN0xOXVVTu9m8YntRa7MKyCve0RMPfGKAl0c47TlscxmHSsr8OE3vJjaXQ215e
A9qY3zraMIpQ2f2m0kd+QOyWyYe2X6eAQQ9mSsEyI1E340fJDdUC8dG1ChxRzx2r
GkMX6+IZPNA5OA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:24:13 2026 by rpki-client