Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: JelV9WctvUFxnuj7FeTnOedMgGrncWrIdQ2N5DKgS3A=
Subject key identifier: D0:CD:B5:F6:38:B2:19:86:85:7D:B8:C2:59:7E:18:39:E2:73:C6:41
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 01A0C8583436E71F58908FBA71BD8B9694AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:18 +0000
Manifest this update: Tue 22 Sep 2026 09:00:18 +0000
Manifest next update: Wed 23 Sep 2026 09:00:18 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: rXpq4U1GZ+EMYyHdqpSeCwdOKEKc4Ifb9G9aZsmTtPA=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:34:36:e7:1f:58:90:8f:ba:71:bd:8b:96:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Sep 22 09:00:18 2026 GMT
Not After : Sep 23 09:00:18 2026 GMT
Subject: CN=d0cdb5f638b21986857db8c2597e1839e273c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:0e:75:3a:06:40:eb:18:03:47:84:f7:1a:
62:e4:13:c4:08:6b:04:97:ff:07:01:6e:49:12:3d:
ba:6a:6c:16:2b:97:a8:40:bb:7b:8e:6c:3a:db:24:
e8:5b:09:de:af:7e:34:01:13:ef:dc:ad:d0:23:d5:
ce:36:c6:5e:99:f0:67:c8:80:fe:44:48:9e:7f:3e:
6b:b4:2c:92:be:39:60:74:4e:18:76:92:0f:e0:62:
4a:c8:f7:52:fa:50:c2:e9:9d:74:60:4f:73:fd:93:
aa:2d:cc:d6:9e:08:50:e7:49:dd:e6:5e:12:42:1e:
b2:37:84:37:25:4c:b8:fa:34:2b:6c:64:62:54:26:
6b:a5:86:7c:19:50:68:9e:e9:96:b6:7a:91:65:4a:
3d:11:80:46:34:ad:49:29:13:04:31:d6:bb:9e:2e:
7d:10:ad:1a:2d:c0:37:e0:80:d0:af:a8:44:96:d3:
47:e0:a8:4f:88:f1:e6:86:51:38:c3:8f:c7:db:9b:
2a:da:a1:2a:78:fa:a0:94:f8:ab:e1:d3:85:7c:f8:
5d:7c:ea:aa:1a:d1:ab:53:ae:01:11:49:b1:c4:f6:
d5:0b:48:5e:3a:5a:a7:bf:27:24:a8:00:3a:4f:79:
2a:d6:ed:de:d7:71:df:dd:71:5a:33:6a:7e:26:77:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:B5:F6:38:B2:19:86:85:7D:B8:C2:59:7E:18:39:E2:73:C6:41
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:e5:2a:3a:7b:b0:c8:ea:53:ff:02:0f:6e:06:27:8a:7c:
c4:61:45:7f:11:e2:8a:31:ce:f6:d9:2c:40:e5:8d:b8:42:72:
41:d8:d8:1f:b5:d8:78:5a:6f:fd:4a:80:b2:bf:73:48:80:85:
05:14:42:fd:4e:ae:af:92:c5:7a:38:13:4b:c6:78:0c:4b:f7:
0b:0d:8d:45:08:47:7f:78:e1:83:fa:cd:43:50:02:eb:0f:c1:
82:20:18:d5:bb:a2:c6:c5:b2:3d:d0:cf:fe:c3:c8:b4:3a:ba:
b7:eb:38:50:70:54:89:c8:f6:a4:13:3e:ca:90:f8:5c:b1:8b:
4d:ce:02:e5:3d:57:1f:55:fc:b4:ef:75:7f:52:b3:11:e7:f1:
70:cf:7d:f5:17:04:30:29:95:01:d1:c3:cf:00:89:bd:3f:86:
03:3b:98:1b:e3:f9:ea:6f:63:b4:4c:75:6d:d0:bd:83:4e:9d:
67:80:c0:8b:1e:76:8f:b1:b2:62:24:95:43:97:15:85:f2:93:
3c:b6:3f:a8:61:18:dd:fa:cf:01:cf:cc:7e:33:a0:e3:1d:06:
e2:c0:34:61:51:9a:b5:87:d0:9b:40:4c:c2:44:d6:b7:ce:2c:
5b:37:4c:31:c8:27:96:58:d2:c7:e8:54:29:a5:28:5f:49:cc:
4a:ab:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:47 2026 by rpki-client