Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: V9SqJE4zRfYcm0r+3/bKSkVGjTDK6D0TRK/w5uhVqfU=
Subject key identifier: 7E:88:74:D8:6F:0F:AA:1C:32:9A:BE:53:F4:5C:B8:26:BF:69:26:1F
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01A0D5DD72D846A931CB269A31291C837AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 00:00:54 +0000
Manifest this update: Fri 25 Sep 2026 00:00:54 +0000
Manifest next update: Sat 26 Sep 2026 00:00:54 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: sH/Tn185IBkjsVT2NxkqCubfkXBiuuxZTo3wSzhQNsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:72:d8:46:a9:31:cb:26:9a:31:29:1c:83:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Sep 25 00:00:54 2026 GMT
Not After : Sep 26 00:00:54 2026 GMT
Subject: CN=7e8874d86f0faa1c329abe53f45cb826bf69261f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:f5:06:53:a7:16:cb:56:e9:57:70:f7:11:
7b:6d:52:93:3b:54:bb:f8:69:88:a5:93:d8:87:ee:
51:93:09:1d:f9:45:97:b5:e9:fb:ba:c8:8b:fe:c7:
50:d7:87:21:e5:eb:5f:a4:f5:1e:9c:56:67:33:fa:
17:78:7e:10:7b:fa:69:84:55:b0:a2:45:0a:c6:48:
2c:f1:11:a2:40:71:a6:27:2e:c5:f5:ae:c3:92:a7:
5d:f1:13:3c:48:9a:ed:8e:a8:3a:ff:bf:61:cb:2e:
35:2d:a3:15:24:46:80:b8:54:9a:7a:61:c4:d1:4e:
82:07:8b:87:8e:84:6b:fa:1f:c8:90:d5:d3:4f:27:
5c:73:a3:e0:3a:e1:b5:9d:9d:94:f9:8c:fd:ef:8d:
97:35:ff:01:be:dd:cc:ae:7c:73:62:5d:fd:bd:a4:
70:19:70:03:1e:43:af:84:f5:00:6a:49:cc:13:28:
e6:8b:60:84:65:65:a6:e1:a7:ef:02:a7:09:79:57:
d4:20:83:50:b1:05:0a:0e:60:72:21:27:34:06:ac:
e8:b4:1f:ce:a3:e3:6c:9f:6f:cd:e4:52:91:ac:e8:
cc:a4:02:f9:e2:8e:30:63:7a:88:4a:fd:00:8a:9e:
0d:d4:8d:d5:1c:f1:0c:e1:ef:ca:a1:ce:41:e6:83:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:74:D8:6F:0F:AA:1C:32:9A:BE:53:F4:5C:B8:26:BF:69:26:1F
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1d:dc:91:92:13:8c:21:32:29:62:ca:8b:cf:fe:d3:33:1b:
21:6f:ac:af:85:39:06:49:b8:d8:7a:71:e8:97:dc:1e:6a:6c:
1c:59:90:3b:5b:18:11:6e:6e:47:af:1a:4f:e3:8a:7b:58:0e:
d8:24:07:10:e9:48:38:e6:8a:e6:11:84:d5:81:e2:46:21:48:
65:54:0c:9c:6c:c0:ab:0f:80:6c:08:6a:55:59:04:fb:3f:bf:
17:f9:e7:c7:a3:ac:e8:f3:9d:0d:6c:3b:47:f8:29:e2:22:b9:
a6:ca:18:84:b7:19:db:38:ed:d8:7c:da:19:55:50:1b:78:ec:
f2:65:6b:8f:47:55:e8:d6:94:ae:e8:a2:d9:2d:22:f7:c5:7f:
2f:f5:b4:18:46:1b:8e:e1:a8:11:00:40:fc:2b:f0:3d:88:dd:
8b:b5:c5:f8:28:24:5e:b7:7f:69:26:c7:31:c7:83:e1:0f:be:
9a:89:a4:8c:c1:99:70:d2:65:28:6e:04:58:a9:5d:0c:97:f6:
d1:f9:8b:81:99:33:db:3d:8c:8d:00:1a:d6:81:b2:ba:cf:d6:
f2:7a:c4:14:5b:49:d6:80:de:aa:6f:8f:4f:76:6a:b3:d6:36:
0b:86:da:55:14:6e:17:bb:82:97:ce:3b:89:bb:83:30:da:b2:
b4:0f:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:42:35 2026 by rpki-client