Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: 8S13oyG9lI8ndUxolyX+T5FZSVnteVm5nqeEDEc4NZ0=
Subject key identifier: 2F:A7:89:63:C6:EF:6C:FB:95:19:21:42:7F:56:67:CE:D7:B2:C7:AC
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 01A16D5B7F0B495B2D60AC1913F00F5018D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0CCF
Signing time: Sat 24 Oct 2026 10:01:15 +0000
Manifest this update: Sat 24 Oct 2026 10:01:15 +0000
Manifest next update: Sun 25 Oct 2026 10:01:15 +0000
Files and hashes: 1: Ptns1aj1-mp6wXpfkNSnzIUQg2M.roa (hash: YJhTXg15y7lXDt6el4G9uRQ6GoxJANZucXloZAXI/Mc=)
2: SyLOIp0kgjoWQcew30ARcomgpA8.roa (hash: tw+paFoNwVB8IkQny5dTEcgX/0463MTe3dsdhAVbLtI=)
3: lSJi95jp0I1-ibaWMd_zn9diC_Y.roa (hash: ODHEc3bs//C5ArR+d/PUUYKnyXgjhKhyolbB69ZsTvE=)
4: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
5: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 8Ctl7C22mIo3GWJ2CnI/l4kqtPYGrTRqXud5N41iL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:7f:0b:49:5b:2d:60:ac:19:13:f0:0f:50:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Oct 24 10:01:15 2026 GMT
Not After : Oct 25 10:01:15 2026 GMT
Subject: CN=2fa78963c6ef6cfb951921427f5667ced7b2c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:c1:02:90:07:ec:af:80:64:80:7b:17:e5:
dd:c6:0e:2b:6a:ba:be:04:9c:c9:38:3c:40:b5:a2:
eb:5d:28:cf:20:69:cc:77:c9:c7:f9:4d:a4:0c:35:
e7:de:0d:46:f7:2b:f9:e1:b7:6d:0b:7b:6e:64:99:
46:38:79:31:bd:be:57:03:eb:04:7c:39:17:a4:9b:
38:9f:35:09:6b:3a:70:0f:e8:e6:a8:d6:af:17:f8:
f2:63:ad:ea:74:98:e9:65:d7:d4:66:c6:0a:87:45:
9e:3b:54:ea:59:29:be:15:f8:ef:f6:47:ea:8c:ba:
7b:7d:c5:8e:71:8b:41:42:0f:72:e0:a6:ef:59:e0:
d0:38:e9:30:de:cb:90:bb:14:51:60:68:2f:87:b7:
7f:e5:49:15:c1:83:f6:25:8b:91:6d:91:cc:f1:71:
af:4d:1a:ee:ee:66:9d:bb:44:c2:2e:0b:3a:7f:18:
08:c6:62:03:e6:c9:8a:dc:96:70:f1:a6:06:a2:f3:
c6:2b:2d:eb:08:1d:6a:a8:fa:37:a2:f9:3a:71:d4:
0c:23:0c:e7:b1:50:7a:f5:0c:4d:d7:50:23:c2:51:
f2:b7:54:73:20:50:16:93:8f:ad:86:f0:40:d3:e0:
23:15:ba:2d:3a:5f:60:11:7b:24:47:13:e7:00:92:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:89:63:C6:EF:6C:FB:95:19:21:42:7F:56:67:CE:D7:B2:C7:AC
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6b:25:7f:18:46:08:a8:02:dc:58:85:c5:37:4b:c3:ba:b9:
d6:7c:2f:25:37:d5:7e:bb:2c:5f:b1:02:f2:ec:3b:e8:62:c4:
63:b4:74:81:be:5e:fc:ef:8f:0d:b1:f0:0e:70:a8:cf:2d:55:
fc:9f:f6:fd:b6:47:d7:fe:0f:dc:ac:a6:c4:be:9c:68:4d:de:
bd:67:54:f7:cb:51:e9:81:44:56:b0:06:b9:44:0f:dc:5f:a8:
a4:6f:9b:e4:d1:95:d7:9c:3f:ce:29:34:38:d0:7c:27:99:09:
de:6c:19:91:9b:ae:15:c8:ab:80:98:92:68:bd:6e:4b:56:71:
dd:8e:ff:5e:e4:a0:4d:d0:10:a6:da:69:b7:9c:81:8d:e5:cf:
f2:ba:d0:b0:5a:f3:ab:da:a1:1f:7b:bd:72:3d:03:0e:27:e4:
9d:69:96:4c:59:59:ab:56:fd:27:81:87:da:54:c8:59:96:df:
7c:38:16:00:37:5d:80:e7:b7:f4:da:20:d5:53:58:17:7d:cb:
4c:58:75:40:c2:aa:13:ed:47:bf:dd:e4:4b:06:a5:98:1e:a8:
fa:d5:ef:ec:41:9c:67:91:d7:ea:64:5c:55:b5:ba:e0:69:6e:
4d:ee:0e:48:8b:c6:e5:d7:a3:18:e2:69:f1:c5:e7:6c:a4:a1:
fd:39:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:33:41 2026 by rpki-client