Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: frXJIrY3pbQaJqegczI23btgc9c7lHMDPLr6SUBmk2Q=
Subject key identifier: B7:A8:1A:17:7B:36:33:FA:B0:E8:2B:EE:80:6B:BC:56:0B:98:9A:02
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A0C3A01962CE48C86672F34D366DB246F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 093E
Signing time: Mon 21 Sep 2026 11:00:44 +0000
Manifest this update: Mon 21 Sep 2026 11:00:44 +0000
Manifest next update: Tue 22 Sep 2026 11:00:44 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: A6VwlqZ8GMs1aYGJ6cZ7+KnJC++U2goLvy2t5yopDro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:19:62:ce:48:c8:66:72:f3:4d:36:6d:b2:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Sep 21 11:00:44 2026 GMT
Not After : Sep 22 11:00:44 2026 GMT
Subject: CN=b7a81a177b3633fab0e82bee806bbc560b989a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:d3:09:73:9e:2b:c8:83:67:25:ca:01:4f:
bc:67:7c:19:e7:3f:a0:d4:b7:df:41:f9:c4:d9:c5:
97:a3:14:7b:53:b1:b1:71:c1:ad:d5:cd:a3:d7:4b:
92:ef:29:66:a4:2b:53:9d:d8:e1:66:84:2e:e6:d9:
79:4c:89:4c:49:0f:fe:fc:25:fd:87:a8:2b:ff:b8:
f0:d1:43:67:5f:18:49:89:a1:a8:2b:4f:45:e9:67:
e7:f4:1d:91:75:66:37:54:e0:a7:39:2c:03:ab:a8:
69:4e:29:0c:fe:25:53:59:9d:59:c9:a1:9e:e0:21:
c2:77:06:f5:1a:cc:b1:61:55:a9:e9:97:7a:1d:90:
65:11:cb:49:4c:23:64:84:91:9b:b7:ca:d6:14:89:
bd:a2:5c:f7:b2:24:86:db:d9:47:cd:cb:ac:33:87:
b6:e2:89:1a:e3:c0:4b:0f:e3:10:8a:5a:74:4a:24:
60:31:a9:e7:7b:05:ca:9b:f8:d0:cd:74:a6:50:ee:
88:13:fe:b8:d5:36:ff:a0:78:d8:84:38:1d:ab:41:
45:69:a1:7c:82:3f:fa:09:11:90:4b:76:79:d3:13:
3a:2a:86:83:d4:d5:28:22:14:f4:a6:10:a6:0d:98:
b4:f8:68:43:7e:a0:2e:da:87:64:db:7a:2e:17:d1:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:1A:17:7B:36:33:FA:B0:E8:2B:EE:80:6B:BC:56:0B:98:9A:02
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:b4:90:60:a8:c1:65:08:0a:ed:72:3c:f1:d1:63:5f:c7:
58:dd:8b:a1:e6:48:9d:cf:20:d5:07:84:e1:a2:f7:b6:1a:49:
45:b3:9d:92:aa:9f:ab:91:5c:c1:9d:7d:17:00:0d:77:24:56:
6b:a2:08:33:6e:c7:44:5a:e6:29:ca:b4:13:27:34:37:4b:b6:
98:06:3d:ac:5a:64:30:73:8a:cd:32:fb:10:49:a6:36:bd:ce:
bf:f4:5c:8c:54:37:c5:88:e7:d8:af:cb:14:25:0a:ff:dd:6e:
b3:b7:58:3b:0a:7e:fd:f8:12:0f:3e:3c:75:b1:76:d1:66:5f:
ec:09:f9:8d:be:15:2f:5e:cf:f0:89:a1:a9:f0:fc:e1:75:7b:
90:e6:fe:9a:77:25:9b:0a:85:c3:98:38:1f:ea:4c:40:0c:76:
f1:99:12:fc:a8:1c:e8:79:00:24:de:a5:2d:04:bb:09:a0:0b:
d0:0e:c5:07:6c:6b:e9:e8:b1:87:95:5c:75:ac:42:92:54:4d:
a8:ff:c5:c9:34:51:84:c9:40:87:aa:bb:5a:b5:12:e0:0d:3a:
b9:d1:cd:5d:40:25:31:7b:b9:27:39:ae:4b:0c:96:16:da:d5:
ea:75:54:0f:ed:d4:83:0a:a6:f6:a4:07:3e:19:1b:e3:d9:57:
d6:5b:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:21 2026 by rpki-client