Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
File: y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft (raw, json)
Hash identifier: 7FD6qLOqJiy3IS75V3ZL3S3t0BHk+s+1nTtOLZiH1yc=
Subject key identifier: DE:C2:CA:F7:78:53:9E:E8:4C:85:21:55:36:A6:58:EE:3B:26:9D:03
Authority key identifier: CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
Certificate issuer: /CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Certificate serial: 01A0C22036FD524DDF100CF6D34A47719BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
Manifest number: FB
Signing time: Mon 21 Sep 2026 04:01:26 +0000
Manifest this update: Mon 21 Sep 2026 04:01:26 +0000
Manifest next update: Tue 22 Sep 2026 04:01:26 +0000
Files and hashes: 1: y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl (hash: HOE03uS5dZ9RkhLz+HipcvHG08a94f3gp8VXkvz98NU=)
2: ypwoD8WNlujjLErobvoTdVgSnlM.asa (hash: mZSvKsEORYpPG2YuRUeELKK/DzjDDr8HvRa5KJ/AxkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:36:fd:52:4d:df:10:0c:f6:d3:4a:47:71:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Validity
Not Before: Sep 21 04:01:26 2026 GMT
Not After : Sep 22 04:01:26 2026 GMT
Subject: CN=dec2caf778539ee84c85215536a658ee3b269d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:b6:11:37:9c:0f:17:f6:b5:a7:bc:08:cd:
7a:7e:eb:db:8f:f8:e2:bb:54:8f:f9:08:36:5b:24:
22:91:79:e4:a1:26:24:76:1e:19:b4:25:99:03:3e:
2f:30:a4:9d:44:8d:12:97:78:f6:e9:73:f3:3d:54:
34:46:94:57:43:59:7e:96:7c:73:3e:58:4d:9d:3e:
bf:2f:d7:55:de:9b:a8:b9:a4:5a:d2:a3:f7:cc:e9:
e3:1b:8e:c7:30:6e:2e:db:e8:c7:5a:b9:54:4d:0d:
2a:f4:ae:60:54:d3:21:42:f6:0b:33:20:79:27:34:
38:1b:f0:5d:d8:f6:44:bd:b8:c7:7a:d2:34:82:b9:
e7:29:d5:28:ca:6e:e8:2e:8c:db:52:be:7b:1a:82:
f4:56:a2:6e:e9:0e:71:bf:97:0c:95:4e:ed:25:96:
b4:5c:dc:d4:0b:55:2f:f5:07:b2:f6:5b:f2:1d:1d:
7e:6f:c6:12:96:5f:ac:5a:e2:9f:d9:f1:24:e4:47:
80:98:35:aa:9c:d8:be:ea:f7:b7:32:19:84:37:2c:
4e:a8:fe:37:db:4b:3b:02:2d:3e:d7:c4:84:20:01:
38:17:ca:a7:f8:35:7c:6a:23:63:c2:31:79:18:eb:
cd:ce:ab:e0:64:d8:28:d3:8a:60:ed:37:3d:44:86:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:CA:F7:78:53:9E:E8:4C:85:21:55:36:A6:58:EE:3B:26:9D:03
X509v3 Authority Key Identifier:
keyid:CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:8f:68:40:20:10:fb:22:fa:2d:1e:26:d0:85:83:de:da:
83:99:96:98:d4:ce:81:ac:8d:8f:b3:c2:ae:19:f2:47:9c:81:
e2:57:1f:5d:cb:f9:b7:40:68:34:0a:13:48:57:3d:91:ec:1d:
87:0f:d8:5f:76:64:d9:39:0a:eb:5b:f6:11:41:59:d3:83:05:
e5:d8:5f:0b:d5:56:50:af:09:a8:7b:01:fe:35:ac:19:07:8c:
c2:2a:03:7e:91:74:6f:4a:04:12:68:74:20:80:e7:ee:c5:69:
e1:15:12:31:50:fd:78:d3:17:8a:91:d7:4c:d8:73:28:70:09:
c5:69:2c:40:bf:81:c0:5a:0d:89:37:08:b7:e1:9a:0f:b2:98:
ba:7a:75:9e:8d:58:9d:be:8d:31:5b:f0:c5:fa:38:b6:b3:64:
34:49:ed:13:9a:f7:93:76:9a:92:e1:2e:fd:3f:c7:56:59:92:
35:5d:88:3d:e1:92:a2:89:53:7b:df:0d:38:6b:e4:e3:22:5c:
63:b5:5c:7e:8b:56:2d:25:4e:07:10:7b:ca:81:b2:ac:61:e1:
a9:5a:82:9a:c6:5e:df:85:09:e9:a7:6f:32:56:66:17:8a:10:
7e:6a:b3:73:fc:4a:0f:79:1b:11:d8:31:43:a9:05:f9:d9:f6:
68:b8:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:41:06 2026 by rpki-client