Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: VEFPAiJbZHhQ0G9JfiUBgNAnpN2BIuT99CDgCYopI88=
Subject key identifier: E0:B8:78:78:93:5F:47:E8:7D:36:44:27:ED:7B:C8:AA:8C:E6:8C:59
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01A10248EC470F0C3C4D8614C6F6AC190579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1529
Signing time: Sat 03 Oct 2026 15:01:35 +0000
Manifest this update: Sat 03 Oct 2026 15:01:35 +0000
Manifest next update: Sun 04 Oct 2026 15:01:35 +0000
Files and hashes: 1: 2pUPqV7OgxFjRiMhnV8NKkzdRtw.roa (hash: JlZOYlUa3gvPfLbDGilMzkwg5yfZLlY9/knETwZ36LQ=)
2: OmwNfCKC8hHidejU-asojVKNj98.roa (hash: lP2QFHvm89jjoRCHcJXZrSC9EVy0+CArnpUR4XyCNpo=)
3: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: dUwZmzRiS52DCpaIsJAvfbLvDGzhUpgWS+3A5VjU8fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:ec:47:0f:0c:3c:4d:86:14:c6:f6:ac:19:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Oct 3 15:01:35 2026 GMT
Not After : Oct 4 15:01:35 2026 GMT
Subject: CN=e0b87878935f47e87d364427ed7bc8aa8ce68c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:59:d4:7f:94:e7:b7:86:7d:b6:19:8a:db:
2c:91:60:28:68:11:ff:38:b4:ee:ea:10:90:cc:59:
49:82:17:59:95:66:d4:e7:a5:79:9b:85:e5:e4:3f:
a8:9d:54:d7:45:52:db:24:a9:6a:be:4f:b3:7d:c9:
32:b9:bd:16:09:ee:8b:c3:bf:da:59:34:65:64:97:
b5:71:02:75:f0:8b:4c:d3:14:92:36:a6:ce:2f:5d:
86:a8:92:e6:c8:81:08:8d:66:5f:8b:b2:a1:6c:c5:
64:f6:29:1b:de:ff:e8:ba:a9:b7:0b:84:dc:b7:86:
28:5e:c2:cd:91:1b:dd:30:90:36:71:18:58:f1:ca:
4c:8e:c4:66:91:7d:ec:df:78:7c:68:85:c0:d8:0c:
14:8c:b5:d3:ce:d1:83:a6:e3:cf:87:1c:a7:bd:9b:
3a:83:d5:5a:a1:c8:d2:08:21:2f:b6:25:4f:99:bd:
3a:83:0e:30:78:5b:48:25:16:26:bb:5a:bd:5c:2f:
4f:b1:3c:ed:40:45:d8:88:16:ce:67:6f:c9:be:80:
5e:53:91:0c:aa:2f:ca:e8:31:ad:7c:96:69:18:c8:
29:e9:96:08:3c:3e:e0:56:51:bf:d1:49:36:1f:5d:
03:b5:37:a0:68:04:8e:55:9c:ff:69:d9:85:68:39:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:78:78:93:5F:47:E8:7D:36:44:27:ED:7B:C8:AA:8C:E6:8C:59
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:47:94:8b:34:fd:fb:c9:1b:78:6c:a6:82:f8:f8:e2:56:
a6:ac:29:8b:30:62:27:44:92:a5:25:60:ee:83:45:63:76:63:
02:a0:23:f0:cc:b7:1b:bd:fa:34:79:9b:ff:d5:5d:4d:7a:f4:
2b:a5:c4:32:d2:85:56:b4:b5:3f:9a:d0:d0:24:3a:97:56:22:
53:94:86:30:4c:0d:f3:6d:22:e5:02:47:40:f9:d0:23:74:46:
0d:ed:ed:3c:94:23:f4:77:86:e6:b7:61:25:58:f9:07:9e:63:
98:96:56:6a:1b:cf:46:fa:15:b0:44:1e:6e:57:22:5e:b8:35:
69:f4:cb:55:a5:1c:d1:b3:d8:d5:23:d9:2c:5a:ca:f8:e6:a1:
80:13:44:6f:45:1c:c4:f7:32:d4:98:a7:55:3d:da:0d:b5:57:
9f:6c:7f:c2:84:64:70:fd:92:bf:89:58:c9:69:8f:fc:0b:a7:
91:d7:52:f6:3a:22:f4:9b:c6:fb:ef:42:ee:81:34:05:09:ec:
d1:81:b7:d2:23:08:47:85:00:60:87:54:fd:83:e5:73:27:c7:
58:0b:91:7a:88:20:38:e9:84:3b:57:58:34:05:aa:ae:ce:30:
78:c1:44:89:ca:00:56:56:98:ec:d1:ec:3b:4f:f9:73:84:50:
6f:3f:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:16:43 2026 by rpki-client