Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
File: y5wD7KhOW9naXuCQanPrLGs1kyU.mft (raw, json)
Hash identifier: BZ2Xaj+ZhAikfjvzTXp5xDqTNYBZyhpSBUdsFpo782I=
Subject key identifier: 47:5F:8C:D0:61:3A:8F:0C:01:58:F7:7A:C4:74:8F:8F:C8:42:EA:D6
Authority key identifier: CB:9C:03:EC:A8:4E:5B:D9:DA:5E:E0:90:6A:73:EB:2C:6B:35:93:25
Certificate issuer: /CN=cb9c03eca84e5bd9da5ee0906a73eb2c6b359325
Certificate serial: 01A0CA0FD99676D235154D05A617716D1012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
Manifest number: 51
Signing time: Tue 22 Sep 2026 17:00:31 +0000
Manifest this update: Tue 22 Sep 2026 17:00:31 +0000
Manifest next update: Wed 23 Sep 2026 17:00:31 +0000
Files and hashes: 1: 0YhgZsUvuxV_mLI2mTWHcqI8PL0.asa (hash: sYwzwg//tE8CUQS+J/mQKfL8idtwX9Re2o46nUuoFwM=)
2: y5wD7KhOW9naXuCQanPrLGs1kyU.crl (hash: QW8wk9SIgOUS8UCs81uelt1A+kpF+q3tX4JNMsegW6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:d9:96:76:d2:35:15:4d:05:a6:17:71:6d:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9c03eca84e5bd9da5ee0906a73eb2c6b359325
Validity
Not Before: Sep 22 17:00:31 2026 GMT
Not After : Sep 23 17:00:31 2026 GMT
Subject: CN=475f8cd0613a8f0c0158f77ac4748f8fc842ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:d1:88:b1:df:27:fd:c8:c4:5a:99:9d:bd:
be:8e:33:ae:b9:77:5c:db:48:37:2c:1b:f0:25:76:
df:98:c4:3d:43:f3:e2:dc:cf:1e:aa:be:bc:be:36:
8c:76:b1:db:15:67:1d:9f:24:87:71:66:e6:09:85:
22:5e:d2:a4:2a:72:14:82:45:ab:d2:0d:45:9f:28:
73:64:36:ba:a7:8b:81:df:4c:c9:1e:df:be:a0:fa:
62:18:ad:f2:05:dd:17:be:6b:84:32:12:f4:41:cd:
f9:f7:50:49:4d:a6:c9:d1:a7:c5:6e:a1:cd:4a:ff:
1b:08:d5:46:e8:24:24:1c:d9:43:fe:5c:19:34:08:
98:4a:50:6f:04:e5:88:2d:e7:0a:f2:21:fd:7d:25:
dc:69:7c:14:63:66:c6:c3:4d:c7:60:94:44:63:b7:
1c:31:6c:0c:39:f6:b4:54:57:1b:5f:cf:33:b5:5a:
7c:db:6e:5e:c1:70:e7:51:6a:5b:d8:93:ab:dd:b7:
1a:1f:f1:45:b4:d5:03:b9:9a:8d:9c:ea:19:89:cb:
3d:2c:fa:e8:6c:bc:31:16:36:99:c6:fc:a2:26:dd:
da:1d:30:52:41:b6:e9:b0:ed:b3:06:30:99:2a:39:
14:48:e9:6a:75:0c:88:99:68:ad:cd:46:4a:52:7b:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:8C:D0:61:3A:8F:0C:01:58:F7:7A:C4:74:8F:8F:C8:42:EA:D6
X509v3 Authority Key Identifier:
keyid:CB:9C:03:EC:A8:4E:5B:D9:DA:5E:E0:90:6A:73:EB:2C:6B:35:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ef:9e:ce:0f:5f:38:06:20:83:56:17:09:ba:14:dc:2e:06:
63:4d:20:8c:ed:2b:cb:b7:87:69:d3:45:36:8a:7a:e2:96:f0:
79:27:a6:a2:05:66:d3:3b:a9:62:ec:a7:42:f6:7f:ee:55:a6:
b3:3f:3a:be:c0:1c:ee:75:a3:ac:29:4e:12:63:7c:a9:e0:2d:
19:85:49:c1:4c:88:09:f2:d6:d5:56:71:64:88:2d:59:85:6c:
fb:60:a5:0c:b5:53:80:67:85:36:cb:ef:38:db:ef:46:17:1a:
c2:b3:06:b0:e0:5f:2c:29:d1:d4:d9:da:39:f5:06:fb:e4:7c:
1d:70:7f:35:20:2b:f4:2f:ef:6a:01:cd:cb:02:70:0d:54:ab:
a0:6e:fa:77:44:8d:36:8d:1e:6a:ca:e5:01:c3:cd:b5:7b:88:
5c:c2:df:18:3c:7e:21:10:91:d4:36:5f:c7:12:dc:09:26:f0:
a9:45:2a:5e:a3:2c:13:13:3d:6e:2f:10:53:45:84:0f:72:61:
f6:38:b7:32:1e:ad:d7:7e:13:4f:6f:2f:7c:32:26:ec:2b:6c:
3a:3f:b3:13:9a:d8:ba:ce:09:72:c8:99:41:4b:b1:27:16:f6:
72:1e:ef:78:1d:45:67:a5:98:60:4f:3c:0c:78:47:3f:cc:57:
16:81:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:47 2026 by rpki-client