Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: uruHF4UPh0fWSaebkYR4LmawFDMIdhRN9CilJ4/CdrM=
Subject key identifier: D1:06:A4:20:D5:41:43:F8:C3:63:86:1B:FD:13:6A:0F:21:87:9F:1E
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 01A0D237487C54A0BA3BFBB8E90E3713A4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 0228
Signing time: Thu 24 Sep 2026 07:00:33 +0000
Manifest this update: Thu 24 Sep 2026 07:00:33 +0000
Manifest next update: Fri 25 Sep 2026 07:00:33 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: pn+72eC8MHUn75rRQj5JEkqIcvVO23C9jcEY2F9bZsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:48:7c:54:a0:ba:3b:fb:b8:e9:0e:37:13:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Sep 24 07:00:33 2026 GMT
Not After : Sep 25 07:00:33 2026 GMT
Subject: CN=d106a420d54143f8c363861bfd136a0f21879f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:a9:26:74:95:25:a7:60:91:2f:af:a7:07:
28:d8:32:aa:ec:1c:fa:82:7e:4a:a5:75:98:49:18:
74:0e:2a:22:1c:19:0b:8f:25:2c:4d:7e:f9:49:2c:
45:38:ed:d9:f0:e9:b3:2d:53:8f:cf:94:68:dc:cb:
e1:44:0a:1e:4a:f9:2c:8e:87:e5:07:f8:be:45:74:
6d:6c:b5:72:8b:0f:74:ee:64:a4:cc:24:b7:33:5e:
d1:a8:80:3b:e9:db:02:41:53:9c:14:cc:2d:72:9e:
be:45:e8:6d:20:2c:c8:6c:ce:92:20:be:15:c2:d9:
78:2e:be:23:9d:61:60:e1:f2:05:ab:51:3b:b1:81:
86:d4:1a:0a:b9:9d:82:91:71:13:86:2f:c5:5d:ca:
8d:e6:02:a3:d9:83:2b:36:1a:fb:a5:03:86:b5:93:
cd:b6:92:6a:0d:25:ba:3c:9c:62:b7:a0:53:4f:e9:
72:14:3c:e3:c5:70:c1:0f:d9:ef:c0:f3:2f:a4:08:
62:61:06:56:79:80:44:d6:77:07:43:83:42:04:b6:
d6:94:eb:cf:91:22:6b:82:3c:16:f1:2c:f7:cb:36:
66:6f:1a:cd:19:f6:bc:63:3c:a6:f0:02:7c:55:0c:
86:51:2f:71:01:18:72:35:76:7e:e4:91:c0:76:2d:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:A4:20:D5:41:43:F8:C3:63:86:1B:FD:13:6A:0F:21:87:9F:1E
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1f:99:ac:24:0e:ea:d9:40:2c:24:79:24:7a:a6:bc:4b:3f:
f0:54:40:ff:73:ed:b3:ac:56:0a:63:a6:22:a5:2c:17:3b:aa:
d2:c2:69:a0:bc:47:a6:98:50:d5:f4:dd:da:39:01:43:14:e4:
72:37:ef:c7:c7:12:39:ca:5e:8a:20:d8:f8:46:64:13:d2:4f:
6b:ca:73:41:ab:26:a6:3c:16:74:e3:1e:88:97:f8:a9:9f:60:
39:64:02:34:62:42:f8:b6:69:1d:2c:7c:6a:e4:2a:9b:d9:07:
b2:4b:61:3e:0c:ff:01:d2:b6:f8:66:b1:2c:71:8d:55:05:28:
ee:9d:a4:50:bc:96:48:68:6b:b6:84:96:f6:5f:82:d1:6a:b0:
08:91:48:44:cf:fa:f4:0b:cb:1e:a2:ab:96:ff:b9:3a:1b:32:
43:3d:f4:b1:97:ca:23:fa:9a:07:2a:6d:bb:4e:21:6c:28:2c:
b1:d0:47:9e:d8:5a:9b:05:6e:6f:09:9f:3e:7e:de:db:f5:f7:
99:68:53:7a:d5:c9:20:db:98:57:b9:8b:f7:db:fa:60:61:f0:
0f:0e:df:b4:d0:bc:38:b6:8f:3f:4a:09:24:7c:77:5b:16:15:
f9:cf:7e:47:5c:af:26:a7:6e:c7:cc:7e:8a:40:17:60:8e:57:
80:d1:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:20 2026 by rpki-client