Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: 9Y3wVsfhyEJcWyo4vIJVhMbRi2pHmFS9ATd8VbWTO/8=
Subject key identifier: 9B:D8:F7:2D:D8:E7:BC:F8:3C:3E:26:F8:95:F1:6C:E4:DB:86:E9:22
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 01A110A8D96F29720C0F81BC9F2772A38218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1722
Signing time: Tue 06 Oct 2026 10:01:03 +0000
Manifest this update: Tue 06 Oct 2026 10:01:03 +0000
Manifest next update: Wed 07 Oct 2026 10:01:03 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: fQr7rnTV0560Nr43g0vCD+Wo01B4iprkjUyI2S986hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:d9:6f:29:72:0c:0f:81:bc:9f:27:72:a3:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Oct 6 10:01:03 2026 GMT
Not After : Oct 7 10:01:03 2026 GMT
Subject: CN=9bd8f72dd8e7bcf83c3e26f895f16ce4db86e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:9c:44:c9:7b:8c:68:61:ff:2b:4e:86:53:
8f:b7:73:eb:72:f0:4e:c4:49:46:2d:12:59:dd:03:
0f:18:1b:03:cb:cf:5d:7b:7b:d2:7d:89:72:07:96:
1c:99:9a:32:6a:6a:f3:35:0f:c3:40:90:6b:72:a2:
7a:51:f3:4c:3c:1a:ee:65:25:f5:6d:5e:0c:ad:47:
f6:19:a1:03:63:54:a0:ad:da:1a:d0:b9:7b:55:27:
9b:a2:61:db:6a:39:e3:6f:38:ae:95:b2:66:12:0e:
1e:2b:d2:a3:10:73:f0:1d:95:67:ec:c2:e2:74:82:
04:a1:05:93:62:5c:9b:ec:09:ff:e4:55:d5:03:d3:
ec:1e:7e:a2:35:ec:72:f3:70:f5:07:b0:05:31:83:
47:5a:55:4b:b0:7c:0d:59:bc:84:1e:d6:2f:cb:02:
5a:42:9f:cb:4d:e1:32:f6:60:bc:a8:3a:4c:a6:89:
71:f1:ea:f9:20:dc:c4:3f:22:58:97:cc:09:b9:87:
c3:84:bf:5e:99:33:cb:60:79:3e:22:19:b5:3d:82:
ae:5f:c0:2b:45:73:55:69:c9:8c:83:b9:bc:64:8a:
5f:36:10:4b:49:ff:8c:6e:ab:bb:ab:78:76:c9:55:
95:ba:ef:bd:7f:f2:cd:35:1b:36:49:42:e9:e4:45:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D8:F7:2D:D8:E7:BC:F8:3C:3E:26:F8:95:F1:6C:E4:DB:86:E9:22
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:eb:3a:21:4e:85:60:3b:53:89:49:58:16:09:14:8f:bf:1e:
da:72:81:e0:ac:aa:c1:ca:7e:30:f8:48:a3:5f:d7:53:57:80:
cd:b1:81:fe:db:ac:3c:59:45:8d:55:37:16:20:f3:bc:14:ac:
2e:ad:94:c6:80:ce:4d:c1:db:be:c0:dc:81:6e:d1:28:54:a2:
13:5d:ec:ee:66:c2:a6:dc:87:a2:8f:28:c2:c0:46:12:a6:65:
5f:62:d4:2c:a6:b2:75:82:4c:a7:02:c8:a2:a5:bf:6d:92:e4:
e6:ed:38:35:85:99:67:6b:42:27:10:a9:a3:21:df:00:73:fb:
3c:b1:2b:23:90:d9:05:28:12:c7:b5:1a:d8:79:5e:79:4c:2a:
20:11:1f:34:59:a8:ca:9b:51:59:a2:9a:bc:c9:15:b1:74:76:
71:9c:8d:11:ce:39:fd:56:d7:b5:c1:b4:e6:61:e7:b7:5a:12:
c4:0b:c5:66:c2:e0:b8:bf:2f:73:2c:6b:a8:67:20:b6:ae:fc:
25:56:6b:fc:62:2b:b5:bb:73:5e:f2:1e:57:7c:e0:57:94:f8:
36:c3:21:5f:74:04:fc:12:61:90:03:f3:d0:a8:60:6b:71:66:
18:f8:6c:88:17:1e:85:f2:b7:fd:09:73:d0:3a:d6:ff:80:3f:
ed:55:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:22:16 2026 by rpki-client