
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: Q4H8JV7yGllEd6QhcDqfcJqqfszp8Imusmu0TszxOSc=
Subject key identifier: D2:14:7C:86:B0:FA:59:3F:E6:81:AD:7C:99:68:08:FD:E8:9B:47:A5
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01A08B9FB9DE05F35CD2D72AA2162B2AA692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 14:01:35 +0000
Manifest this update: Thu 10 Sep 2026 14:01:35 +0000
Manifest next update: Fri 11 Sep 2026 14:01:35 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: E9P/Y5Enc+b65PujLjVY8PXVMC2eYL9wClY+sNnnsU8=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:b9:de:05:f3:5c:d2:d7:2a:a2:16:2b:2a:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Sep 10 14:01:35 2026 GMT
Not After : Sep 11 14:01:35 2026 GMT
Subject: CN=d2147c86b0fa593fe681ad7c996808fde89b47a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:a8:03:94:83:0b:70:82:e9:d4:9e:54:72:
63:73:3f:51:10:19:01:09:08:dc:0d:e9:ad:19:eb:
d7:31:9a:67:2d:ce:8b:61:cc:71:df:d2:69:d1:e0:
ef:48:60:07:22:e2:7f:23:09:f0:b0:b0:35:9d:35:
c6:d4:fc:d2:a7:04:d1:e9:1a:3f:08:b8:5d:9e:63:
93:99:e4:00:2c:68:58:b6:ef:4c:47:bb:42:04:fa:
34:97:89:34:44:60:7a:5e:69:43:a1:3a:87:a5:20:
12:d3:7c:55:89:8d:e9:9f:d9:74:88:dc:ec:3c:51:
10:15:b3:80:41:e0:9c:d2:ec:e6:7a:55:6d:24:02:
76:86:cc:54:d2:dc:13:c2:37:68:49:d9:88:a7:eb:
e4:11:39:88:49:62:56:9a:99:85:2d:86:3a:3d:e4:
7f:27:c4:a4:a4:bc:31:9a:0e:76:86:21:74:bd:05:
66:b5:b9:c2:fc:fb:9c:c6:e9:b1:f1:01:5b:d4:54:
5a:ae:95:a3:8b:e3:4b:0a:9f:4e:62:fd:73:63:29:
f7:2e:72:ab:51:5c:d2:47:f8:87:4b:92:45:a7:27:
52:9a:4f:f2:4c:19:e9:5f:8c:a2:6d:6c:54:fd:70:
ef:c8:98:9b:df:9b:f7:75:de:53:f9:de:ad:83:83:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:7C:86:B0:FA:59:3F:E6:81:AD:7C:99:68:08:FD:E8:9B:47:A5
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:70:fa:af:da:4e:33:68:3f:da:1d:58:84:ba:1a:3f:85:43:
44:19:b7:4f:ed:b2:4a:e9:02:e9:46:9f:b8:57:a9:a6:c2:56:
72:79:39:ce:af:d9:38:e2:0c:c6:94:1b:f2:30:4d:01:89:4f:
f9:36:19:3b:11:68:3f:65:69:68:26:18:a8:6e:17:9e:5e:78:
f2:4f:f7:ed:50:a2:a3:4b:c4:2c:41:a2:c2:1f:2a:51:1c:7f:
9a:89:e5:fe:af:b7:6e:41:8e:f6:7b:a9:60:59:4b:10:2a:99:
16:79:78:ea:db:cf:19:8c:28:a0:e2:20:30:15:be:55:1a:94:
c4:63:9c:b7:eb:1c:43:a3:35:19:05:40:df:2f:fd:40:33:e3:
04:1d:17:d4:26:f1:c0:e7:7c:89:de:b0:db:f0:69:43:1a:20:
20:e6:d4:cf:90:d3:5d:d7:ea:37:42:63:5d:f5:59:94:54:f6:
1d:8f:d8:e0:73:6a:20:46:89:80:d9:9b:51:14:68:b0:45:46:
7e:7d:ec:eb:3d:e5:64:cc:cd:bc:b2:12:02:92:0b:d9:38:47:
8d:f2:47:97:7f:03:66:97:28:8a:79:23:57:23:4e:c5:c9:3b:
77:6c:f0:7c:f2:f4:de:52:2e:a9:e2:db:dc:ae:78:f0:66:e0:
ad:20:06:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLn7neBfNc0tcqohYrKqaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm
OTQyZTkwHhcNMjYwOTEwMTQwMTM1WhcNMjYwOTExMTQwMTM1WjAzMTEwLwYDVQQD
EyhkMjE0N2M4NmIwZmE1OTNmZTY4MWFkN2M5OTY4MDhmZGU4OWI0N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyImoA5SDC3CC6dSeVHJjcz9REBkB
CQjcDemtGevXMZpnLc6LYcxx39Jp0eDvSGAHIuJ/IwnwsLA1nTXG1PzSpwTR6Ro/
CLhdnmOTmeQALGhYtu9MR7tCBPo0l4k0RGB6XmlDoTqHpSAS03xViY3pn9l0iNzs
PFEQFbOAQeCc0uzmelVtJAJ2hsxU0twTwjdoSdmIp+vkETmISWJWmpmFLYY6PeR/
J8SkpLwxmg52hiF0vQVmtbnC/Pucxumx8QFb1FRarpWji+NLCp9OYv1zYyn3LnKr
UVzSR/iHS5JFpydSmk/yTBnpX4yibWxU/XDvyJib35v3dd5T+d6tg4OVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIUfIaw+lk/5oGtfJloCP3om0elMB8GA1UdIwQY
MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt
M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj
LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnD6r9pO
M2g/2h1YhLoaP4VDRBm3T+2ySukC6UafuFeppsJWcnk5zq/ZOOIMxpQb8jBNAYlP
+TYZOxFoP2VpaCYYqG4Xnl548k/37VCio0vELEGiwh8qURx/monl/q+3bkGO9nup
YFlLECqZFnl46tvPGYwooOIgMBW+VRqUxGOct+scQ6M1GQVA3y/9QDPjBB0X1Cbx
wOd8id6w2/BpQxogIObUz5DTXdfqN0JjXfVZlFT2HY/Y4HNqIEaJgNmbURRosEVG
fn3s6z3lZMzNvLISApIL2ThHjfJHl38DZpcoinkjVyNOxck7d2zwfPL03lIuqeLb
3K548GbgrSAG2A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:22 2026 by rpki-client