Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: V1PLOhcLuQI3psVqL6q0vBEVMIeTk1wPKkVop9PkHRE=
Subject key identifier: 38:3F:E6:28:2F:18:CA:0A:E5:A9:7D:B9:FB:54:66:E7:25:1C:03:CA
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01A1306AE89CD393A5C4D63E9871FE7E7247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0AEC
Signing time: Mon 12 Oct 2026 14:01:14 +0000
Manifest this update: Mon 12 Oct 2026 14:01:14 +0000
Manifest next update: Tue 13 Oct 2026 14:01:14 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: etEiD3tTs/fVMJh7SbhUUIh4TF6PKbFHsfb3mQM/h6g=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:e8:9c:d3:93:a5:c4:d6:3e:98:71:fe:7e:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Oct 12 14:01:14 2026 GMT
Not After : Oct 13 14:01:14 2026 GMT
Subject: CN=383fe6282f18ca0ae5a97db9fb5466e7251c03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:54:a0:b5:fc:a7:ac:1f:41:c2:eb:df:6e:
25:51:50:af:25:35:fd:1f:81:d3:bd:5e:72:e4:18:
90:6f:06:f7:0f:ea:ac:78:c6:14:57:65:8a:09:85:
32:0f:42:4b:f2:06:95:61:20:3e:06:bc:42:1d:3c:
66:e7:79:35:15:c4:2d:13:73:6f:6c:2a:aa:b2:ac:
36:30:48:3b:7e:78:90:48:a9:47:fa:2d:16:5c:27:
6a:f2:de:67:63:4d:b1:1e:a1:04:a4:5c:e7:df:6f:
f0:85:af:42:49:25:1f:f5:54:f5:fd:3f:3c:4a:81:
5a:b2:3e:ab:4e:84:dc:54:1c:fb:ff:d8:b6:c9:9b:
aa:ab:1c:9d:b4:c6:12:59:b4:69:8e:e7:a8:de:5c:
8f:9a:20:d9:f9:51:4c:68:ba:fe:de:95:af:9a:cb:
cc:73:f1:55:88:7b:ed:f6:de:85:3e:da:c3:5d:05:
e7:54:5c:fd:55:e1:da:ca:f7:b2:c3:07:26:e9:a3:
d7:eb:1f:a3:9d:97:68:a3:42:fd:28:9a:0c:ed:cf:
da:c6:1b:b1:8b:eb:c8:10:d0:14:7b:1c:f0:d4:80:
ee:f3:bc:34:12:73:48:c1:7a:8e:ea:d8:44:2d:b3:
96:3f:dd:f3:3c:2b:88:32:be:3c:18:52:9c:6b:eb:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:E6:28:2F:18:CA:0A:E5:A9:7D:B9:FB:54:66:E7:25:1C:03:CA
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:50:9a:bc:30:6b:a7:12:50:d5:b8:a9:d9:6b:c6:f7:32:e6:
1f:b8:13:ca:e8:7a:13:46:d5:74:e7:89:2a:df:77:f0:e3:b8:
da:b8:91:fe:0e:7a:1a:f8:d6:ea:28:e2:89:ed:dd:21:e8:e7:
0e:2f:6b:5b:fe:6a:0b:97:86:da:a1:ce:34:54:2d:53:09:9f:
fa:93:cd:ff:2e:1d:d5:0a:81:af:0a:e0:26:b2:cb:f8:0e:a9:
e3:6b:58:4b:bb:c5:82:6e:75:eb:5e:15:38:ac:f3:0a:08:aa:
8a:56:e6:2a:18:22:a3:ea:db:89:80:fc:35:d0:ec:b1:d5:50:
cf:b7:fc:5a:18:15:dc:17:8a:ed:05:08:b6:c1:65:0d:ae:85:
12:ae:31:a2:5b:2a:46:da:3c:e3:f2:8b:88:31:51:55:9d:73:
87:ef:73:55:d4:65:e1:2a:bb:9c:f2:8d:d6:d4:45:23:c0:83:
61:31:80:92:b2:cd:7f:a5:66:51:b5:b4:a0:40:a8:fa:66:c8:
86:86:ce:5d:c4:de:68:cf:a2:8a:88:65:c2:55:b8:4f:7d:15:
50:2a:a2:c6:97:5f:59:d8:1f:af:51:a7:dd:08:18:11:63:93:
a9:18:b2:16:0e:66:9e:43:a7:9c:6a:14:de:7a:ff:ba:ae:5b:
bd:f6:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:12:12 2026 by rpki-client