Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier: AmjuA6hXgysg328oOcSwA8lI7NHLfkNbVsNbBIm8Xjc=
Subject key identifier: 95:F7:38:CB:63:55:88:97:91:29:B1:2D:C8:62:41:D4:D7:0C:66:59
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 01A0CA4743A42EB212A979D6C6AC82F33310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:02 +0000
Manifest this update: Tue 22 Sep 2026 18:01:02 +0000
Manifest next update: Wed 23 Sep 2026 18:01:02 +0000
Files and hashes: 1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: iy0ls/1zDC80vDxPsqpc07VNJ47kBiZmJRstrZcQuFw=)
3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:43:a4:2e:b2:12:a9:79:d6:c6:ac:82:f3:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Sep 22 18:01:02 2026 GMT
Not After : Sep 23 18:01:02 2026 GMT
Subject: CN=95f738cb635588979129b12dc86241d4d70c6659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:c7:c5:86:15:ce:10:1e:a5:4e:57:bc:28:
64:9d:0d:94:35:1c:f3:fa:a3:b6:48:ee:a1:fc:e4:
da:5e:c2:90:fa:d8:6a:6e:e7:02:12:0d:26:79:6b:
64:44:63:ac:8e:8e:d7:52:81:28:a1:76:7c:5f:da:
e9:11:e2:9b:15:3c:ed:21:b3:57:79:8f:44:8e:f6:
97:c1:9d:82:42:f2:c0:36:3f:26:4a:aa:95:b6:16:
0b:7f:4b:46:f9:07:87:70:55:3f:06:ac:ac:87:56:
b8:e6:81:9c:8f:56:12:01:42:86:eb:ec:57:d9:72:
4b:6c:ba:74:26:f7:28:b7:eb:b4:67:37:e6:71:89:
fd:2b:5a:ce:88:28:f2:2f:ed:48:68:70:80:42:19:
05:55:29:c2:4e:ca:f7:a7:e4:52:05:a8:3b:9b:57:
5b:65:93:5f:59:da:4b:06:26:52:ed:02:7b:26:ab:
95:7b:e7:b7:38:b9:14:a7:b8:ee:d5:83:b5:25:ee:
ca:41:b5:93:74:60:6f:9b:63:01:8b:c9:08:a6:63:
ac:84:87:c1:ec:24:de:09:37:35:c1:ef:c3:97:f2:
be:bc:92:e3:1b:71:8b:b3:91:65:dd:3a:5f:97:a1:
44:3e:06:45:50:0c:9d:b9:4a:96:f9:28:bd:f3:b5:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:38:CB:63:55:88:97:91:29:B1:2D:C8:62:41:D4:D7:0C:66:59
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:23:98:7e:19:d2:ba:d6:3c:7f:c7:27:6b:69:ec:5c:ee:
bd:3b:48:15:73:db:85:cb:77:3a:af:72:86:e5:d4:3f:b9:f2:
8c:d6:c4:94:86:cd:bc:d4:56:ed:9b:e2:63:76:a5:56:04:00:
33:fa:3a:20:e1:d9:f6:bd:4d:17:8a:86:6a:5d:76:62:3f:4b:
c9:53:b7:f6:27:eb:5c:69:50:32:5c:d9:26:c1:af:a2:e2:53:
b0:a4:26:5b:63:ea:21:fa:0d:3b:c9:65:40:6f:af:e9:a3:22:
aa:56:15:47:50:2a:7b:c2:d9:14:d0:d8:70:30:45:8c:03:63:
30:8e:df:92:56:2d:e1:cb:7f:d4:9f:e4:f9:9e:11:70:de:41:
46:e1:db:48:5a:eb:7f:a0:c1:59:51:cb:b1:c7:74:c2:d2:b0:
69:dd:4a:ef:84:8c:cf:06:1a:6f:b6:ba:27:3c:29:01:96:8f:
ae:bf:aa:3b:f0:1a:1e:bf:0a:a0:23:be:bf:cd:ed:a9:47:b7:
2a:f1:58:64:c9:4e:e5:5b:aa:4a:3f:46:a7:c3:b3:55:a7:2a:
b2:55:dc:ea:90:4c:02:85:b9:ea:22:a3:28:66:ec:eb:3b:aa:
9b:78:aa:78:9c:72:2e:6a:37:1c:d3:38:85:40:a6:54:94:2d:
65:03:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:20:12 2026 by rpki-client