
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier: l2eoiYGUFw1NQW7tnLd/ItDcW77IAtB+xCrIc5vcX3o=
Subject key identifier: A9:FE:E4:FF:50:D8:F0:6D:85:33:98:EC:74:F0:7A:36:3B:B6:2D:CB
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial: 01A1781553D0C762453E30125B9498405452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number: 0423
Signing time: Mon 26 Oct 2026 12:00:25 +0000
Manifest this update: Mon 26 Oct 2026 12:00:25 +0000
Manifest next update: Tue 27 Oct 2026 12:00:25 +0000
Files and hashes: 1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 3HvdMKkfsVFhNMUL2WmKF4Q4uM6fj7c4UKKgHY7/q4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:53:d0:c7:62:45:3e:30:12:5b:94:98:40:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Validity
Not Before: Oct 26 12:00:25 2026 GMT
Not After : Oct 27 12:00:25 2026 GMT
Subject: CN=a9fee4ff50d8f06d853398ec74f07a363bb62dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:a0:92:87:15:ff:5e:e5:a2:8d:f2:a7:da:
6f:e0:a6:3c:82:41:54:82:e6:33:fa:8a:ab:3f:73:
b0:b8:0b:92:c7:e1:35:b5:85:5b:98:ae:a9:32:28:
a3:99:c0:b9:1c:aa:18:56:73:b9:f4:2e:8f:9a:67:
cf:f6:70:e7:8b:65:57:c3:f2:7d:ad:55:8d:39:e9:
ea:6f:6b:28:cc:c4:4e:93:4b:b9:34:19:29:7f:81:
72:26:9b:d1:19:f7:e7:c2:11:54:30:db:3a:d8:b5:
32:52:b1:8f:9f:70:db:4f:f0:7e:ae:21:68:2c:46:
dd:99:20:21:84:4d:e7:e0:d2:64:5f:14:c6:a1:cf:
a1:27:dd:e3:da:ad:07:f4:11:d9:91:e7:7f:31:c7:
62:17:61:be:2c:9b:22:47:36:72:55:e2:91:8f:5a:
35:d8:45:63:17:0d:a4:87:3e:d7:ae:ed:31:9a:c7:
87:98:a1:bf:da:4e:3d:e6:6e:b5:e5:e4:52:ea:8a:
85:e2:92:08:45:ed:05:68:6d:ae:9a:e4:76:8f:a6:
00:a7:ed:eb:e0:3d:31:ee:35:f4:ad:c0:6e:17:ce:
91:b9:75:56:96:52:fc:1e:8e:f5:b3:3f:b8:9f:d4:
a2:07:0f:88:d2:53:f7:07:5f:f8:07:30:0e:72:aa:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:E4:FF:50:D8:F0:6D:85:33:98:EC:74:F0:7A:36:3B:B6:2D:CB
X509v3 Authority Key Identifier:
keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:22:46:7f:98:36:4f:06:5e:5f:c7:18:fb:f9:04:36:41:5a:
6a:03:d3:79:19:dd:cb:76:0b:08:89:2d:0b:66:40:9b:47:78:
ec:ef:c9:93:af:36:de:40:74:18:88:df:36:81:f1:7f:3e:2a:
33:c1:62:d7:e8:c7:fe:4a:23:54:a3:02:22:c7:e2:88:da:24:
dd:19:d6:34:43:79:47:f6:b6:6e:2d:e1:89:8c:00:d5:a5:b1:
bf:d6:55:62:7f:47:97:d8:48:11:b1:f6:eb:d4:b7:95:e5:21:
de:33:30:36:95:cb:03:ea:9c:5d:49:7d:23:68:e4:d5:b9:c3:
4e:6c:fa:17:e4:c9:3b:71:57:31:ae:13:2b:1e:09:4e:37:13:
94:8d:9e:61:6e:57:70:38:c0:f4:c5:48:b9:8d:cf:41:4a:2e:
44:b1:b9:70:81:2e:7f:2b:0b:ea:c7:64:56:f4:b7:ff:34:7b:
d5:69:9b:02:69:33:4a:7b:da:95:e3:4e:dc:78:3f:1e:04:33:
8b:11:5e:e5:8a:19:af:6f:ea:ef:27:f2:93:dc:78:b1:5f:41:
92:04:85:b6:6a:92:9e:84:80:17:f0:80:19:a9:91:2c:6a:52:
50:71:32:0a:da:59:e3:34:f5:74:46:59:8e:02:13:42:9d:6a:
a2:31:1d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4FVPQx2JFPjASW5SYQFRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzBiMTRjZTc0ZjYwYThlYTRhYmI2ZWFhNjBlZTQ0NzBm
NDNhN2YwHhcNMjYxMDI2MTIwMDI1WhcNMjYxMDI3MTIwMDI1WjAzMTEwLwYDVQQD
EyhhOWZlZTRmZjUwZDhmMDZkODUzMzk4ZWM3NGYwN2EzNjNiYjYyZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS2gkocV/17loo3yp9pv4KY8gkFU
guYz+oqrP3OwuAuSx+E1tYVbmK6pMiijmcC5HKoYVnO59C6PmmfP9nDni2VXw/J9
rVWNOenqb2sozMROk0u5NBkpf4FyJpvRGffnwhFUMNs62LUyUrGPn3DbT/B+riFo
LEbdmSAhhE3n4NJkXxTGoc+hJ93j2q0H9BHZked/McdiF2G+LJsiRzZyVeKRj1o1
2EVjFw2khz7Xru0xmseHmKG/2k495m615eRS6oqF4pIIRe0FaG2umuR2j6YAp+3r
4D0x7jX0rcBuF86RuXVWllL8Ho71sz+4n9SiBw+I0lP3B1/4BzAOcqo/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn+5P9Q2PBthTOY7HTwejY7ti3LMB8GA1UdIwQY
MBaAFGMwsUznT2Co6kq7bqpg7kRw9Dp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMt
ZjEwYWQ4MmM4NTU3LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMtZjEwYWQ4MmM4NTU3
LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiJGf5g2
TwZeX8cY+/kENkFaagPTeRndy3YLCIktC2ZAm0d47O/Jk6823kB0GIjfNoHxfz4q
M8Fi1+jH/kojVKMCIsfiiNok3RnWNEN5R/a2bi3hiYwA1aWxv9ZVYn9Hl9hIEbH2
69S3leUh3jMwNpXLA+qcXUl9I2jk1bnDTmz6F+TJO3FXMa4TKx4JTjcTlI2eYW5X
cDjA9MVIuY3PQUouRLG5cIEufysL6sdkVvS3/zR71WmbAmkzSnvaleNO3Hg/HgQz
ixFe5YoZr2/q7yfyk9x4sV9BkgSFtmqSnoSAF/CAGamRLGpSUHEyCtpZ4zT1dEZZ
jgITQp1qojEd0g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:38 2026 by rpki-client