Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: tnwFtzg8QDx6OtF+rDMJ7hopyz1NgDu9vTfUm3kFtMs=
Subject key identifier: 7F:59:E1:7E:F2:48:A3:97:7B:1D:04:46:4B:D7:67:D2:19:7F:57:7F
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 01A0BF55815BC5AE7EBBEE438C02F9092775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: 0138
Signing time: Sun 20 Sep 2026 15:00:46 +0000
Manifest this update: Sun 20 Sep 2026 15:00:46 +0000
Manifest next update: Mon 21 Sep 2026 15:00:46 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: fNLz6w87I8iUwSZH9Yjykjxu5u15OL6rqsOWi1HS9yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:81:5b:c5:ae:7e:bb:ee:43:8c:02:f9:09:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Sep 20 15:00:46 2026 GMT
Not After : Sep 21 15:00:46 2026 GMT
Subject: CN=7f59e17ef248a3977b1d04464bd767d2197f577f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:29:68:9a:4d:8b:39:e1:f4:87:9a:1a:de:
fc:d6:5a:78:26:c4:e8:5e:bc:e6:3c:a9:e2:6a:b6:
b2:0b:7b:75:2d:ce:be:bf:48:2f:83:b9:e0:25:10:
3e:f7:f1:35:dc:b5:1f:84:00:60:df:f7:65:52:8c:
45:f7:75:d2:4e:df:1d:77:33:1d:7a:26:7c:74:89:
be:77:25:14:d9:05:2e:4f:8d:97:b9:be:74:b4:69:
51:f6:d6:b0:6d:15:cb:34:39:68:a8:1a:91:9a:80:
54:05:9d:5e:b1:1f:b4:50:1a:24:d9:be:23:81:45:
89:4b:70:62:11:d1:f8:0d:ba:00:a1:6a:dc:a7:cd:
cf:8c:45:87:e8:dd:1f:8d:f3:f4:bc:98:ad:cd:3b:
4e:27:ee:c4:11:40:98:ac:b7:5a:a3:fc:00:cf:7f:
90:ce:59:d4:b2:6c:64:b0:b8:61:25:28:77:fe:3d:
48:8c:16:0d:a2:8b:e2:87:07:72:43:6a:e4:7e:8b:
c0:a8:79:a2:88:aa:89:9d:ab:46:4d:5c:01:86:b8:
b2:fa:6f:54:ff:4f:b5:f9:67:d3:fd:63:5a:a4:50:
1a:01:ab:8c:c5:31:a3:73:ad:0d:de:7c:6c:48:7b:
7d:c4:23:76:cc:81:ff:a3:a5:2f:c9:45:0b:c1:ec:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:E1:7E:F2:48:A3:97:7B:1D:04:46:4B:D7:67:D2:19:7F:57:7F
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:93:ad:39:9a:70:f1:c2:56:1c:f2:01:d9:66:17:b9:27:
77:0a:c8:6d:0d:ef:1e:b1:ff:c4:9d:23:16:83:59:3c:3b:b1:
bc:41:7d:7e:be:83:29:7b:f4:8c:72:d1:f3:73:55:7b:02:51:
ef:73:d8:ad:bf:a2:32:0f:b9:f9:75:0d:d4:af:cf:ee:e3:ab:
a6:3f:42:b6:d1:0b:61:6b:0a:cb:86:19:f4:d7:31:e3:52:64:
e3:41:4a:77:45:22:05:77:64:2d:1e:0f:ac:ad:a2:f2:f8:38:
52:00:67:31:1d:a2:31:7a:51:0a:a0:d8:0d:af:f9:90:ac:12:
7d:36:d3:f9:de:eb:3b:b2:93:13:58:ec:68:df:9b:f1:7d:e3:
8d:4e:89:58:99:ee:e2:84:04:bd:45:64:a0:31:4e:ce:85:0c:
4d:ac:93:0b:2b:09:ce:3a:ea:4c:f4:9d:c6:6d:2c:ca:8d:63:
a9:84:2b:25:e2:ac:09:a9:c7:bd:c5:0a:c0:a2:dd:09:90:51:
c9:69:7f:96:87:89:4f:dd:ac:58:a0:dc:42:eb:b5:0b:98:29:
08:de:61:aa:4d:6e:2a:43:60:dd:4e:68:20:1d:77:69:3e:36:
3c:88:60:63:10:36:d2:7b:36:d6:d7:d4:1a:8c:49:97:f5:15:
c8:31:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:51:25 2026 by rpki-client