Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: zQldSClu8ZQomusnoBLoxyWqOU+7HvrbWH5zE+NQl0U=
Subject key identifier: 7D:2E:C8:FB:A4:FE:AF:B0:5C:A6:53:83:59:CC:5E:2C:F9:DA:68:6E
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 01A0D0B719A8AF089F39627934E6FD763896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0BA4
Signing time: Thu 24 Sep 2026 00:00:55 +0000
Manifest this update: Thu 24 Sep 2026 00:00:55 +0000
Manifest next update: Fri 25 Sep 2026 00:00:55 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: RXMZOmLGIQ3V34DGbjvyIoAjsNNEaA/c3YO3net+ZNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:19:a8:af:08:9f:39:62:79:34:e6:fd:76:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Sep 24 00:00:55 2026 GMT
Not After : Sep 25 00:00:55 2026 GMT
Subject: CN=7d2ec8fba4feafb05ca6538359cc5e2cf9da686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:fb:c7:a8:0a:8c:d9:fe:32:51:8a:22:36:
86:44:62:55:e3:c9:91:5e:d9:cb:ad:4e:dc:52:47:
8d:94:d7:6a:fe:b8:b1:59:d0:a6:a1:90:dc:ba:39:
a0:af:06:79:ef:c8:b0:2e:31:01:49:a7:25:b4:6a:
f3:b3:ac:52:4e:c3:12:e3:b3:33:79:65:9e:89:24:
a6:eb:01:60:46:c2:be:64:6b:6d:5b:cb:45:fb:50:
d8:24:63:61:46:41:32:5c:6e:85:8d:3c:c6:5e:8c:
7c:79:57:3f:ca:82:80:aa:fe:ea:1d:7d:0d:e0:f7:
98:c8:f6:1e:9f:9f:22:ab:e2:51:4b:ee:c2:1a:e4:
0e:e9:e6:8d:5b:86:b6:ba:f3:d7:9b:3a:4b:5c:fb:
27:e0:38:68:07:78:a0:20:35:21:e4:07:53:c8:25:
8e:27:ba:c7:5f:6c:7a:97:25:1f:6b:b2:39:9f:c1:
6d:ab:2f:e5:70:42:8d:3f:64:51:e4:91:96:c1:41:
15:31:cb:53:d7:aa:c4:bf:30:df:5a:89:38:9c:6f:
86:63:2c:cd:07:d9:14:dd:6e:ab:fa:f9:16:f3:73:
71:7f:00:e4:1d:69:c9:8d:5d:60:d1:ee:6c:03:58:
5e:06:7f:67:95:a5:84:3f:49:f4:96:f2:1d:94:2b:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2E:C8:FB:A4:FE:AF:B0:5C:A6:53:83:59:CC:5E:2C:F9:DA:68:6E
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:e9:ff:fb:fa:8c:95:3d:ee:7b:5a:ce:97:59:fe:f0:21:
de:ff:ab:6b:9f:c2:54:9a:be:7c:cf:55:1e:9f:e7:fd:64:65:
0c:04:8c:a5:0d:78:88:98:43:df:c1:3e:81:60:a7:c7:6b:8f:
0d:c4:88:b6:13:f9:9a:e1:61:0b:5d:ff:cf:34:0c:4a:cf:69:
92:a0:56:ab:bf:23:36:ce:2f:8c:9e:bb:ae:2c:ae:86:00:5e:
56:db:3b:1b:87:26:c7:4e:d6:16:7f:9f:19:ec:92:20:66:0f:
92:7f:51:d1:52:5c:6a:8c:c2:47:aa:f8:9c:55:b8:8f:e7:72:
8c:22:ba:75:13:93:ad:3f:32:a5:64:89:58:0c:03:24:0a:bc:
1c:e2:64:6a:98:76:be:71:33:e6:09:79:82:2e:af:96:f1:67:
3d:b6:3c:57:24:d0:91:ec:0d:3f:c1:ef:96:58:ef:48:41:ca:
12:d9:62:09:00:90:7f:73:e6:a9:a8:28:6a:c1:83:01:95:9b:
ee:0f:79:92:e1:3d:87:84:17:50:60:ab:f5:b5:d9:13:49:29:
f5:21:76:8a:5d:c8:69:ce:7f:1d:b1:2b:89:e2:76:29:a6:0a:
34:de:a3:d6:cb:c5:da:91:52:c7:60:ce:01:69:94:ae:94:b3:
60:5b:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:58 2026 by rpki-client