Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: gKxRZPBpVaAMBePIyuPjlQIV/ohuxgH6O6/Lho41XsU=
Subject key identifier: B5:98:BB:70:80:72:C4:B0:43:BC:EB:E9:04:68:B3:94:52:C1:80:BA
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 01A0CE91732F1E94ACB7606C653C35DC8DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 14:00:33 +0000
Manifest this update: Wed 23 Sep 2026 14:00:33 +0000
Manifest next update: Thu 24 Sep 2026 14:00:33 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: Ja38kPtnpUznANfk0+J0/1LXN/CH0WR/JYrejDNvEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:73:2f:1e:94:ac:b7:60:6c:65:3c:35:dc:8d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Sep 23 14:00:33 2026 GMT
Not After : Sep 24 14:00:33 2026 GMT
Subject: CN=b598bb708072c4b043bcebe90468b39452c180ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:6d:9a:32:f2:3a:ca:fd:b6:10:ef:16:9d:
46:d2:dd:e5:ff:c8:85:ce:a9:f4:fc:4b:9a:a0:93:
3a:f2:08:f1:46:13:f2:f9:a8:e3:4d:c7:a6:18:22:
07:a9:16:8f:4b:0e:28:42:78:f3:50:9b:92:f8:98:
20:f2:31:81:01:fb:32:a7:7b:b3:74:83:71:a7:05:
f4:57:98:fa:f4:c4:82:85:56:6a:8e:f1:1c:25:28:
87:ba:79:4b:f3:c2:1e:b4:be:cf:d3:4e:26:32:24:
cd:65:bc:05:a6:98:4c:40:1b:17:d6:ce:f1:d6:c8:
47:d5:4d:50:04:31:29:24:47:08:17:53:a6:da:b3:
b7:d8:3e:98:17:57:c2:db:c6:5f:3d:f3:07:e5:66:
81:c7:3d:9c:ec:8e:fd:29:b9:13:6b:71:27:66:97:
71:60:ec:79:69:c4:56:05:e3:c3:6d:e2:3c:cc:88:
c0:97:c2:6f:ff:c3:ce:bf:54:ce:c7:2e:ce:6b:f9:
d3:e4:29:f2:9c:93:e0:9d:b4:54:38:3b:d8:cc:5f:
e7:fc:eb:c5:b0:6c:ac:31:64:6c:6d:28:75:c9:61:
75:48:80:5f:32:87:c0:22:f8:b8:ae:84:a2:bd:dd:
ff:97:cd:1f:59:45:b3:57:06:b9:d8:2d:f0:36:5d:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:98:BB:70:80:72:C4:B0:43:BC:EB:E9:04:68:B3:94:52:C1:80:BA
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:48:86:f2:ff:f7:a4:48:7e:22:f6:dd:63:bf:27:82:f4:
6a:bf:70:e0:6d:b6:ac:32:da:e4:37:77:ef:6a:d9:d7:a1:c3:
81:6b:2c:30:1a:ae:57:f5:4f:10:6c:47:1a:46:6c:bd:5c:ec:
e0:f0:ad:2f:0d:77:c8:6c:a7:c6:bd:37:f1:da:54:5e:7a:e2:
fc:fd:a7:30:aa:d3:7e:73:b7:9e:f3:3e:1b:d9:d3:e3:91:af:
40:dd:5f:fa:e8:44:72:3d:dd:02:77:31:eb:66:38:46:0a:fc:
26:56:a5:e3:47:9e:5a:02:61:dd:6f:7f:18:ac:e1:92:68:b9:
2f:be:44:f4:49:c5:20:54:16:7b:eb:9d:20:4b:9e:7b:17:28:
66:3c:07:2f:1d:6d:bc:f8:d7:d2:b7:4c:2f:ff:e5:a0:a8:58:
8c:41:0e:a3:e0:b0:0f:f4:76:0f:ee:28:17:97:e2:c1:57:41:
ce:e2:6e:3d:39:13:64:c6:3a:f0:20:ba:d6:e8:84:eb:30:5f:
5b:e4:a0:7e:68:ff:75:0c:47:70:59:05:28:34:df:4f:7c:64:
f4:a9:32:f3:8b:a3:53:6d:13:bd:e1:2c:53:a6:89:32:de:d1:
26:6a:e9:95:86:4d:b3:b5:d5:8b:c9:fe:2e:88:a4:0b:51:30:
18:b3:50:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:04:54 2026 by rpki-client