Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: oeYCZ/mKthpODgDalBKHmSmfgbOlASsoNLE31SYG7z8=
Subject key identifier: 7E:27:28:BA:F2:B4:4B:1E:18:91:79:4C:4C:49:5D:0E:C1:5E:46:5B
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 01A0CE247F69B268C75B2D7BD582D96089F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: 0154
Signing time: Wed 23 Sep 2026 12:01:33 +0000
Manifest this update: Wed 23 Sep 2026 12:01:33 +0000
Manifest next update: Thu 24 Sep 2026 12:01:33 +0000
Files and hashes: 1: 8cev6T1zaLrh6Jk14ObD9NyakTQ.roa (hash: to4V+vWxwt5dlu/ctWHIBNuLYFM8RdFNyqXTXudedwM=)
2: Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa (hash: OsSZawzfUresZMVh8cgGQhsAKGK/Kk+rAbkVCPwwXCQ=)
3: P28NAR-gwo3DWhrCfUDsje3yy5M.roa (hash: Rg/sbFjmtTahpzYygmbXRtVR2XC/RUmlzbY7QG8k+LY=)
4: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: AG6z9eZvCbhtxbDwNhKtPprXULZaGqh/EAvoMK6chlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:7f:69:b2:68:c7:5b:2d:7b:d5:82:d9:60:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Sep 23 12:01:33 2026 GMT
Not After : Sep 24 12:01:33 2026 GMT
Subject: CN=7e2728baf2b44b1e1891794c4c495d0ec15e465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:b9:ec:fd:11:05:2c:cd:9b:81:6f:1a:5e:
ee:a0:01:cb:20:c2:79:9d:e4:ac:cc:cc:c3:4d:0d:
72:80:05:33:28:d4:37:6f:4e:44:7b:a4:26:cf:bd:
76:2f:bc:8b:08:e7:81:95:b3:d5:1e:bd:f2:79:8a:
a2:65:e7:db:69:4d:27:23:f1:48:ad:79:fa:b2:41:
a8:56:db:50:d0:9d:a4:b1:d1:12:f0:39:8c:90:8c:
06:c4:31:19:25:71:9d:53:e8:58:27:c9:87:37:dd:
39:9a:5d:0e:ad:53:da:79:13:ac:b2:0c:99:b9:f1:
7c:7d:c2:31:3a:07:26:a2:5a:77:27:6d:53:d5:92:
ba:25:ab:1d:3e:2d:bb:01:cb:c8:2b:67:6d:05:28:
f6:d6:cb:75:37:b9:54:48:71:32:17:97:47:6a:ad:
09:33:d8:2f:9e:fe:e4:7b:20:7e:23:dd:60:a1:04:
4c:e3:23:6d:e2:46:1b:cb:6b:8b:43:95:9c:10:55:
0b:42:2b:c2:8a:ee:5b:f2:ca:ca:60:ec:a3:71:e6:
99:cf:10:82:a4:c4:83:38:89:8d:62:50:02:68:a7:
b7:c8:04:0f:1a:dc:50:61:eb:9e:d2:ca:47:1b:eb:
90:8c:81:5c:28:6c:9a:e1:63:ea:fb:14:96:5a:03:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:28:BA:F2:B4:4B:1E:18:91:79:4C:4C:49:5D:0E:C1:5E:46:5B
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5c:e6:f4:91:a0:90:7b:f8:17:2c:f5:87:7b:c9:45:c0:ba:
67:4d:c0:de:f4:79:53:bd:26:dc:b4:ee:69:21:8c:69:e0:5e:
23:ec:39:a3:1c:12:a7:70:f1:46:dd:a5:dc:6a:63:c9:f4:52:
c3:ec:67:1c:58:04:1c:08:45:a4:a1:33:dd:8d:e1:ff:dd:49:
65:04:d9:18:11:61:61:0e:14:1a:1b:6d:b7:2a:92:ee:77:7a:
98:a3:5d:d7:62:b5:60:75:03:ca:8a:36:d1:c0:6a:fc:f9:a7:
21:1c:05:f6:0e:66:79:df:c3:c0:c1:3c:3f:fe:a1:f6:09:33:
e0:70:25:af:c4:4d:08:cf:61:f5:f0:90:c1:b2:fc:ac:06:63:
2f:6f:a7:87:04:8c:2e:58:00:52:7e:f4:f0:06:05:ab:66:f1:
84:86:fe:d3:64:fa:a2:51:f4:ca:e5:0a:c8:29:eb:1e:db:a6:
59:ab:8b:8d:8b:d6:1b:5f:36:d6:f2:88:25:39:a5:c5:57:00:
30:5e:43:3d:bc:60:74:43:a3:21:71:35:cc:a5:02:fb:2e:cb:
2f:3b:3b:d2:32:da:b4:0e:d7:e2:dc:50:ed:f2:f8:bf:38:d3:
5e:ae:e9:65:2c:9d:bf:9f:11:21:a7:24:8f:7e:e9:fa:90:c0:
03:9c:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:59:11 2026 by rpki-client