Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: mgppwdIKEWp/dG6s5om0cZat2yPoE+ohrhzRFVzhyOA=
Subject key identifier: 1B:E4:60:3E:D1:5D:AA:34:46:C2:C0:68:26:B8:00:3C:9A:BD:56:E8
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01A1A8953252E33E384869D546AF306DB638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1462
Signing time: Wed 04 Nov 2026 22:01:52 +0000
Manifest this update: Wed 04 Nov 2026 22:01:52 +0000
Manifest next update: Thu 05 Nov 2026 22:01:52 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: VGkFkDKPAqDnUxXi26Zfge7DkkP9WKOOX1la9QyR+r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:95:32:52:e3:3e:38:48:69:d5:46:af:30:6d:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Nov 4 22:01:52 2026 GMT
Not After : Nov 5 22:01:52 2026 GMT
Subject: CN=1be4603ed15daa3446c2c06826b8003c9abd56e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:a2:5e:78:4e:70:f4:ed:93:62:38:90:dd:
5f:5c:8f:cf:aa:66:f6:41:2d:cd:a4:6f:47:c3:31:
92:ec:51:a7:6b:42:14:8a:91:dd:b1:5c:56:ed:b7:
6e:a1:96:18:6d:eb:63:de:95:e6:4f:60:51:3c:02:
c8:3c:b4:32:ba:17:92:de:be:66:40:03:19:62:43:
e6:fd:92:90:2c:d4:00:e6:40:bd:0c:e4:34:fc:ba:
24:af:fd:f1:1b:29:5a:e8:b2:9e:57:a4:8c:11:b8:
55:82:8c:d0:11:c0:61:7f:11:4c:9c:3a:25:b9:7a:
3a:4b:8a:28:62:59:a9:dc:50:93:0c:ad:4a:e9:a3:
ad:6d:ec:ca:22:e0:b2:ec:2c:bf:79:89:2b:0d:fb:
23:30:36:f3:e6:33:c0:f4:96:81:2a:78:96:ed:fa:
96:84:e6:21:62:18:3a:c4:57:34:53:21:ed:3c:81:
ae:7f:20:54:63:cf:72:98:9a:6a:88:3f:cf:46:1c:
93:d6:e4:c2:bc:b8:5e:df:6e:fd:a6:cf:ab:30:e7:
d1:4c:7c:c9:94:83:85:3b:6f:2f:80:cd:5d:81:c1:
06:70:27:0b:43:2d:75:a3:82:4d:b0:5c:37:0d:4a:
fe:57:f2:fe:59:2f:f5:97:2e:18:9c:4a:d2:36:b2:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:60:3E:D1:5D:AA:34:46:C2:C0:68:26:B8:00:3C:9A:BD:56:E8
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:1d:96:06:9f:5f:3b:93:a7:6a:b9:87:09:95:b8:5d:fe:
ef:1d:af:c7:c1:14:d5:18:4f:56:40:54:21:83:74:11:e8:d0:
68:77:f6:2d:66:7e:31:54:9f:32:4c:43:7d:41:50:5c:02:af:
0d:a3:c3:cc:54:4c:64:3f:6f:61:28:3b:8a:4b:57:e7:04:1b:
78:84:6a:d8:4d:5b:b6:97:eb:9c:96:1f:50:26:04:11:49:92:
8c:37:55:86:0f:d1:6a:04:7f:2b:53:86:dc:ef:fb:1e:ad:4d:
cd:ef:a8:b8:34:53:8d:c7:22:d8:5a:47:06:f0:ec:22:26:fe:
f2:ff:b5:ae:da:c2:e4:26:2b:bf:1b:90:0a:96:e0:de:5f:e2:
5d:7b:84:79:61:ab:5a:6d:d3:79:e3:7b:e4:0b:16:52:db:ef:
19:35:70:31:bb:53:30:a4:9b:43:fb:34:0a:75:ce:6e:dd:11:
d3:c3:25:7a:d5:de:b9:c3:1c:cd:b2:66:32:76:2e:ad:05:9b:
79:bb:7f:f9:b0:b2:a1:dc:1e:29:3e:c5:d7:a8:a0:6d:45:a4:
1c:19:a7:36:b1:80:31:81:6e:5e:b8:9c:0a:12:a5:f4:d8:1f:
7a:ca:90:64:cf:c5:44:75:6e:24:e1:c3:d7:f4:6a:b5:56:4f:
f9:9d:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:37:40 2026 by rpki-client