Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: FXHWL2CbHgEOTAH4JA94EUip5UvO+MyGM90wuVhvZPo=
Subject key identifier: DF:1F:D7:62:04:DE:EB:C0:5D:D3:84:77:09:5B:B0:32:04:94:A7:AD
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 01A12B44D3E78DD686B05B10F76FD134037D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 14:01:33 +0000
Manifest this update: Sun 11 Oct 2026 14:01:33 +0000
Manifest next update: Mon 12 Oct 2026 14:01:33 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: FHpOx+YqrvshCcpSlz3CXvaPLW1gEiKn6mo9o4STJMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:d3:e7:8d:d6:86:b0:5b:10:f7:6f:d1:34:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Oct 11 14:01:33 2026 GMT
Not After : Oct 12 14:01:33 2026 GMT
Subject: CN=df1fd76204deebc05dd38477095bb0320494a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:1a:9d:a3:e4:44:69:21:44:98:a9:b2:40:
b6:28:b0:b3:ef:37:1f:10:ce:b2:a0:ab:38:f0:ae:
7d:37:a6:dc:bc:78:00:d9:06:9f:a6:49:3e:18:48:
5c:92:88:e2:15:dd:2d:b7:99:c4:eb:b3:58:b7:93:
15:ee:10:7a:38:a9:11:fa:c8:c2:96:a6:1f:a6:69:
a9:e5:e3:4f:2b:a5:38:d7:5d:6b:db:3b:73:99:0f:
48:8a:1b:08:2e:0a:06:37:05:4b:e1:69:0d:83:d1:
2a:3f:d1:40:d0:9a:a1:80:90:60:a5:e6:37:7e:57:
9c:63:d0:e4:67:ee:e7:b9:70:87:36:76:97:a0:22:
76:63:f7:d4:ea:01:1b:b2:8d:dc:1b:3f:38:e8:2e:
74:17:94:00:a7:70:04:a7:ff:55:da:fb:22:e1:3f:
a6:d2:bd:f2:a4:02:15:c8:06:75:d7:cb:1f:46:20:
52:97:2b:76:22:ab:54:e0:01:9b:b6:b2:65:b5:5a:
c7:0e:b4:a2:84:9e:c6:e0:5a:53:ff:b3:64:d6:ce:
3e:b6:c9:0f:1a:e9:7f:01:f1:dc:8d:00:d4:df:36:
40:94:38:a7:2b:b5:ef:8e:12:62:9b:99:60:34:75:
90:76:9e:d6:bd:0d:3a:9f:7f:d2:3f:53:c1:8a:aa:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:D7:62:04:DE:EB:C0:5D:D3:84:77:09:5B:B0:32:04:94:A7:AD
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:4f:14:46:23:13:27:1a:02:ba:88:c0:dd:4a:70:b9:10:
24:9f:fb:eb:fd:d3:40:46:58:e1:b1:3c:6f:c8:98:cc:2a:3e:
bf:97:cc:5f:fe:65:6d:31:6b:91:ad:e1:8b:83:13:c7:25:c7:
fe:db:96:f7:a0:91:b1:e7:af:50:d6:68:8c:01:6d:6a:09:b4:
ff:8e:4f:f4:4c:43:d7:b8:bd:d2:eb:41:82:c0:2a:4b:36:b8:
20:ae:47:80:a5:c2:a5:9a:c3:bd:87:32:67:f9:e2:84:60:bb:
f4:d0:98:45:fa:24:d1:85:04:fe:a6:c2:d7:99:a3:8a:a3:52:
71:1d:6a:57:53:f9:dd:f3:7b:1d:43:26:0f:1e:b7:16:9c:9f:
5d:9a:ac:15:73:99:d0:af:7e:4a:b2:75:88:de:56:87:44:53:
c0:4a:38:28:01:06:50:29:61:3d:11:88:f0:86:40:15:00:9c:
54:fd:5a:31:c0:42:57:e0:e1:5f:58:13:71:df:77:ed:40:d0:
fd:ae:f6:e0:14:0d:0a:73:5b:e7:ba:64:52:8e:0a:02:3f:1e:
75:b6:2a:11:e5:96:0a:3b:7a:c0:0c:af:c0:d1:14:20:d6:34:
18:b7:af:cd:a3:c3:46:d5:1e:80:e1:57:f1:24:a3:10:4b:61:
5b:90:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:51:31 2026 by rpki-client