Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: jXv9CZNytap/GRWFcvsCzXv3KbaZFHWNCKWBPHhsaUA=
Subject key identifier: 17:CB:BA:88:E3:7A:82:0E:72:B8:53:AA:37:2A:D0:2B:17:53:3B:02
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01A0BEE7882B3098F6AF85B7257D9D59CE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 13E9
Signing time: Sun 20 Sep 2026 13:00:39 +0000
Manifest this update: Sun 20 Sep 2026 13:00:39 +0000
Manifest next update: Mon 21 Sep 2026 13:00:39 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: kWnE+AHIaEKnEa3ls0HCVYFMCCZmJ2/6dT7EPweS9Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:88:2b:30:98:f6:af:85:b7:25:7d:9d:59:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Sep 20 13:00:39 2026 GMT
Not After : Sep 21 13:00:39 2026 GMT
Subject: CN=17cbba88e37a820e72b853aa372ad02b17533b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:13:35:79:7f:f5:7b:66:37:64:36:75:88:
35:27:a4:de:a0:65:80:6f:f0:c3:b6:8f:b9:13:dd:
f1:df:d1:be:9b:03:22:97:a9:d8:d4:19:b6:5f:96:
dc:86:f6:31:bd:a2:93:50:bb:14:a0:3d:b8:20:00:
40:44:65:7d:d9:b0:38:4d:68:e9:48:85:3d:46:5a:
e2:cf:81:65:23:37:c7:6a:68:90:66:af:60:74:83:
9d:f5:4a:fe:5c:e7:25:ce:61:82:cd:4d:dd:79:bb:
ea:f9:05:8f:41:0b:46:85:7e:25:24:39:6b:26:6d:
9d:44:6a:75:7c:90:31:2f:41:dd:99:39:76:a9:eb:
c9:48:46:ba:28:60:0d:7b:46:ab:6d:99:45:4d:bf:
b3:18:66:ce:7e:a1:20:48:32:df:6c:70:77:17:aa:
26:e0:bf:aa:7b:65:22:6e:3b:14:e5:98:67:f6:94:
33:3b:ae:fb:04:45:4f:2a:0c:67:9a:31:3f:30:cb:
75:81:61:fc:1a:f8:07:ae:45:90:94:af:88:36:c7:
5a:95:45:df:cc:03:f9:5b:ff:39:03:ed:87:27:f3:
25:c6:f9:fc:d3:87:50:4f:69:ff:8c:62:47:d9:a5:
c3:39:4b:ad:eb:4e:0e:3b:fb:55:f7:e2:c1:ad:b5:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:BA:88:E3:7A:82:0E:72:B8:53:AA:37:2A:D0:2B:17:53:3B:02
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:de:5b:57:67:ae:af:bf:92:a1:ac:ad:39:02:4b:8c:f8:7a:
24:31:c2:20:8f:83:46:ff:7f:c5:1a:f6:86:06:a1:35:7f:bd:
93:3a:aa:e3:f3:51:8a:7e:06:d3:af:b0:eb:45:eb:9f:4e:69:
56:d8:17:e3:a9:a4:86:8c:0e:0c:c2:a8:85:bb:6c:c0:55:64:
bf:e0:fa:9a:a9:bd:02:94:c3:f9:37:d7:9b:2e:46:c8:0d:28:
37:b5:20:82:c4:4f:c9:56:97:71:e4:67:b6:70:58:76:18:be:
9c:a1:19:20:d4:a9:40:a5:b5:e0:a8:17:43:cc:cc:a2:12:ee:
8e:ce:89:b7:2a:cd:e7:bb:6b:61:fa:a0:ab:ca:f2:d1:22:d9:
5b:52:6c:59:10:c5:08:0f:8b:94:97:b4:7c:1f:df:5d:64:d4:
ac:34:4f:75:80:87:12:b3:73:6e:79:3a:b8:d2:bb:f6:b4:8e:
f6:3e:7c:ed:84:fa:cb:3d:09:42:0c:b1:b6:08:b6:f4:7a:43:
b5:ed:db:28:a2:3e:c9:60:03:c7:77:6f:77:b2:df:95:36:e7:
d3:4c:fa:79:33:33:11:7d:67:5b:0a:bd:0b:fd:61:54:94:e4:
a9:b7:da:b0:09:71:71:b3:3f:f8:b3:93:1d:45:61:3f:69:32:
22:d9:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:40:52 2026 by rpki-client