Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: 540OdTqjybugXJbSBJD3Z0BuNL7MtszJc5QebYP/agc=
Subject key identifier: 35:46:D6:EB:5D:FF:6E:6E:31:12:71:20:4A:BD:2A:E2:1E:1F:C5:82
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 019CAA217C38A11B35EC5BAA59C9149DF2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 07A1
Signing time: Sun 01 Mar 2026 16:00:47 +0000
Manifest this update: Sun 01 Mar 2026 16:00:47 +0000
Manifest next update: Mon 02 Mar 2026 16:00:47 +0000
Files and hashes: 1: blvAUQ_vYzlmQ7upxenWGMgFKTU.roa (hash: yNaiIOARrLN2kHH5nOuqLzuUV9KxxDnEpy1TNN43VTU=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: OutGv0QTkmVcU1iOuJWJiXJ/bMMmlPjk0lnXpP8OrQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:7c:38:a1:1b:35:ec:5b:aa:59:c9:14:9d:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Mar 1 16:00:47 2026 GMT
Not After : Mar 2 16:00:47 2026 GMT
Subject: CN=3546d6eb5dff6e6e311271204abd2ae21e1fc582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:44:41:fa:6e:0c:f6:cd:20:27:e7:5a:c6:
dc:f3:ea:9d:9d:32:69:e5:ce:a2:1d:ea:32:77:d5:
15:97:bc:bc:dd:26:1b:a1:b4:60:b5:0d:34:6d:0c:
1e:21:9c:08:2f:c5:da:ce:07:a3:13:eb:ad:5c:3c:
70:b2:dc:38:93:a8:2c:eb:be:a3:7d:fd:57:0c:bf:
06:58:ff:07:21:30:7f:17:6d:a1:a5:8b:5d:40:56:
04:c0:e1:e1:3d:d7:ca:20:e3:b3:86:e0:c9:ef:13:
8d:7d:44:8a:02:12:15:73:ab:58:ff:e7:5f:a3:84:
12:c4:70:1f:a0:ef:ea:31:e4:d4:47:6a:d7:5d:81:
21:ec:e5:4f:b5:c1:3b:6e:35:92:54:e4:1d:db:92:
9f:78:c2:21:c1:63:77:7c:fa:37:2a:bd:6f:ff:bb:
7d:c3:65:f3:ea:26:60:1e:82:6f:75:62:ba:cd:13:
a7:9a:6b:f9:60:3e:e4:fe:6e:4d:c8:07:74:80:0d:
9b:c8:11:50:11:87:57:3c:e0:66:79:d5:0c:35:86:
40:a4:62:e7:b9:94:23:79:d5:1e:38:29:de:4a:09:
a1:5f:25:fb:e1:2e:99:f9:f2:9c:af:24:22:35:7c:
9c:e3:4e:93:ed:e1:a8:c0:3a:1b:dd:8a:de:32:2c:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:D6:EB:5D:FF:6E:6E:31:12:71:20:4A:BD:2A:E2:1E:1F:C5:82
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:2d:24:f9:67:e7:88:de:9a:1e:7d:e0:0b:d7:42:9c:46:
48:26:be:5e:7b:b4:b2:07:23:82:9a:d9:c6:40:d5:c1:bc:65:
a1:be:1c:6f:29:e8:a3:7a:81:4b:f6:0f:bc:49:8c:f6:86:be:
2c:2d:81:45:7d:9c:94:e4:cb:aa:26:db:27:52:ea:5e:9d:13:
68:15:f8:ba:79:b2:63:88:07:3c:91:35:a9:0a:d6:2b:79:46:
f6:8e:65:8b:c1:bb:e3:8f:e1:8a:8b:80:06:fc:2d:92:59:ab:
ab:51:ab:9a:83:6d:4f:89:c4:56:01:e4:f8:24:98:f1:e3:5e:
af:8a:36:91:a9:c2:85:23:e5:4c:e5:7b:d6:7a:01:ff:99:a5:
6f:79:68:ce:21:eb:90:da:07:02:a8:94:29:88:31:df:52:f3:
2c:a2:b3:19:2f:fe:ff:cf:ad:60:b3:4c:00:79:f5:09:dc:f8:
1c:d1:91:de:a3:d4:a4:07:2a:bc:da:79:00:bf:7d:40:98:87:
2d:8c:0f:0e:ed:6c:eb:c0:11:0a:b8:0b:e6:ed:67:86:52:c6:
d4:dd:fd:33:d3:3f:d6:9f:28:b6:80:25:ca:fc:77:1f:2a:6c:
c2:ef:55:b1:f7:0a:6b:fd:80:c4:ee:a8:c8:59:86:4a:56:9c:
6c:6c:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:22 2026 by rpki-client