Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
File: Y56u7x9LomYtRYnGlhfCIjT8f9U.mft (raw, json)
Hash identifier: 6vR8x+Qj6y2vshMXxypGbww6EqWQs8HNit9JfB6F5zc=
Subject key identifier: 37:0C:9D:88:A0:8F:5E:D4:5D:B6:93:27:A0:E8:50:48:C4:71:06:F0
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 01A0C77D4DEB3BE0059EBEAAA60836513FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
Manifest number: AF
Signing time: Tue 22 Sep 2026 05:01:12 +0000
Manifest this update: Tue 22 Sep 2026 05:01:12 +0000
Manifest next update: Wed 23 Sep 2026 05:01:12 +0000
Files and hashes: 1: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (hash: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=)
2: Y56u7x9LomYtRYnGlhfCIjT8f9U.crl (hash: 09gqmrOlcAjRXS721dCBi6EFEbSmuEluE3wHqv6cSU0=)
3: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (hash: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:4d:eb:3b:e0:05:9e:be:aa:a6:08:36:51:3f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Sep 22 05:01:12 2026 GMT
Not After : Sep 23 05:01:12 2026 GMT
Subject: CN=370c9d88a08f5ed45db69327a0e85048c47106f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:7c:6f:89:26:b6:10:b6:ea:88:47:78:f0:
f0:5e:bb:f3:93:01:3d:bd:ed:64:f9:27:3a:0e:25:
67:22:a3:a2:f2:76:ec:d1:3e:be:85:f9:68:e5:e8:
cc:cb:e7:65:60:34:44:3d:7f:1c:6d:ab:8c:85:d9:
ba:61:96:04:46:37:f2:ff:b0:71:69:e3:40:2f:62:
b8:18:24:a3:96:a1:ce:4c:0b:da:86:27:2d:6e:e8:
d8:95:46:31:0b:d9:ad:9d:2a:80:ad:44:ed:02:c2:
4c:93:96:9b:96:dc:c7:7c:e5:ad:11:ee:ef:86:dc:
21:44:5c:15:fc:de:5d:5d:c1:6d:ae:d8:0a:69:37:
1e:7b:e4:32:69:b9:b3:f9:a1:21:87:9a:4d:1a:b2:
63:92:bd:14:43:72:77:e2:85:82:d1:e0:aa:89:8e:
5a:52:17:4e:dd:30:e6:4c:13:4d:6e:2e:77:b0:39:
ef:97:f4:18:3a:9f:e1:e5:30:8c:20:e7:19:26:0f:
fe:ab:e5:7c:47:af:9b:c9:66:40:8f:54:e2:59:4d:
28:1d:71:76:e2:79:67:ae:50:dd:ee:3c:2e:9b:09:
de:d1:8f:87:22:6a:31:71:69:26:e4:81:6a:1b:0c:
13:7a:05:f6:d3:84:43:ed:74:fb:3b:71:44:c5:2f:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:9D:88:A0:8F:5E:D4:5D:B6:93:27:A0:E8:50:48:C4:71:06:F0
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:00:e1:4e:c5:08:14:68:fa:46:23:2f:a2:d9:ee:98:87:20:
c4:c0:08:01:9d:93:53:ee:b6:22:b4:cc:c6:b1:df:1e:c4:83:
8a:b3:6c:f7:bb:e9:93:55:8e:10:2c:53:e5:37:25:7a:c1:9a:
a0:24:c7:0c:a0:eb:fd:27:99:9b:52:0d:83:a6:2b:b7:e3:94:
a5:f1:fb:f2:18:d7:53:66:4d:dd:9f:07:36:74:b5:54:82:8a:
17:ad:b9:03:13:2e:83:01:6a:31:47:a6:76:ce:21:5c:b8:6b:
de:b4:a7:b0:46:89:3c:ea:36:0e:53:15:f4:62:86:fc:44:25:
f6:63:13:5d:af:cb:d0:96:37:51:0e:9c:ff:8b:fc:74:0e:2d:
0d:3f:3e:06:fc:68:f3:94:13:4d:1e:64:4d:f5:47:47:74:24:
d4:75:3c:90:8d:d4:5d:22:c5:a0:b1:90:f6:92:fc:b4:b7:6c:
1e:6e:cb:d1:d5:9f:a2:1c:37:8f:9a:e3:67:99:fe:02:f9:ba:
ef:61:19:9e:64:48:4a:34:19:a9:28:88:98:06:28:5d:33:82:
3b:23:a7:5a:2a:c0:47:d7:5d:64:ae:c8:f9:a2:0b:15:ba:25:
65:59:fe:4f:c5:17:68:e3:44:85:93:44:57:76:44:1f:76:ba:
76:35:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:44 2026 by rpki-client