Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: mXtwSMnnjGp2G5i1GMsu7g0zyCaVgNMIkUYqTevJ3kY=
Subject key identifier: EA:DD:27:F5:9D:35:48:C6:28:0A:D0:42:DB:78:4E:83:07:32:40:95
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 01A0BF8C98EB3CC30485A3CECFA32C88CFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 027B
Signing time: Sun 20 Sep 2026 16:00:57 +0000
Manifest this update: Sun 20 Sep 2026 16:00:57 +0000
Manifest next update: Mon 21 Sep 2026 16:00:57 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: 8gGIjSXjRAKslKoBjcT+dLROfKrfaVfeALnGPkUsR0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:98:eb:3c:c3:04:85:a3:ce:cf:a3:2c:88:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Sep 20 16:00:57 2026 GMT
Not After : Sep 21 16:00:57 2026 GMT
Subject: CN=eadd27f59d3548c6280ad042db784e8307324095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:66:52:16:9f:3b:f3:ad:a9:e3:2b:0a:c3:
f2:65:4f:23:02:3e:45:e2:20:27:76:13:88:fb:06:
38:8c:4d:5d:42:5d:df:39:00:b9:aa:b6:0e:6e:4a:
10:30:52:ed:5b:01:b8:97:f8:a9:95:20:be:33:5e:
76:35:99:f7:6d:b2:04:fb:85:78:49:ef:76:59:45:
9b:10:57:6b:9c:8c:10:ca:56:b6:15:a7:d1:9b:44:
dd:68:cd:60:b6:5c:da:49:f3:6c:12:d2:75:13:dd:
fb:01:df:0b:00:4d:7b:c9:78:1f:2d:49:68:c8:72:
12:82:e7:d0:9c:eb:b3:08:f0:f1:01:10:21:60:4f:
3c:67:bf:ae:84:fb:fd:00:1f:ed:e3:2c:f4:b7:be:
25:66:c1:ed:db:51:29:7b:a3:91:a3:8a:53:e3:1f:
75:e7:d5:0c:7c:d2:c0:be:1d:e3:19:41:23:6f:1d:
ca:fd:ce:97:ca:95:14:ea:1e:af:2a:48:58:68:8f:
1b:6c:32:19:47:e2:ee:88:80:d2:3d:a2:4d:cb:46:
b6:20:d4:cf:c8:0b:95:33:fa:09:1c:fe:65:fb:d7:
f3:bf:80:be:84:2d:da:a4:2a:7c:0a:24:81:3b:5c:
a4:39:bd:7b:6f:0b:76:84:12:e4:83:71:79:4d:40:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DD:27:F5:9D:35:48:C6:28:0A:D0:42:DB:78:4E:83:07:32:40:95
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:53:77:fb:ca:b0:ab:3c:e2:3c:35:08:ec:6f:29:a6:48:
c9:f7:ed:8a:e2:35:55:3b:b3:b8:e8:89:1b:ed:a2:51:8b:4a:
7e:81:b3:44:e7:9a:a3:97:79:15:82:f7:43:e6:30:37:8a:b4:
58:65:dc:c4:a3:3b:f3:98:01:91:08:82:b6:6c:4a:73:d1:d9:
67:fb:d5:25:4b:f7:ae:42:1b:c5:09:4a:f0:3a:b5:2e:e4:e8:
0c:73:b1:e9:9e:10:99:76:6e:10:a5:f9:7d:a7:80:ce:1b:b2:
d4:25:f4:d0:4c:2f:f6:1d:e5:2c:ae:de:38:4b:36:9d:13:96:
b5:f3:5e:fa:90:aa:da:51:63:9f:f8:c3:4b:c3:5d:9e:32:10:
69:9f:0f:a1:08:d1:90:21:2f:97:92:1d:22:22:f5:8c:eb:7d:
80:6e:4f:d5:22:b3:0c:34:fb:50:71:fe:b5:51:12:a6:a0:9b:
f4:ec:d8:2c:d6:5c:da:96:29:ac:7e:97:10:df:6e:7b:eb:06:
fd:db:cf:5f:83:13:2c:0d:1a:92:9d:54:a6:0b:3f:01:cf:bf:
d0:c8:94:93:a7:f8:e1:c9:dd:09:39:44:46:07:7b:77:bd:13:
10:ac:9b:bb:92:b5:21:fa:f3:df:99:d0:eb:b4:35:c6:86:16:
ba:d0:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:37:20 2026 by rpki-client