Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: R/w5lafw4qkN3t287HHQDQ76iWgjXKTkDXZgw9RP5a8=
Subject key identifier: 46:89:CF:A2:37:31:1E:58:21:81:E0:E5:CB:A1:22:7B:DA:CD:8B:84
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 01A0BE0B78DE5B35B50FFD3116C849F3DC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 09F8
Signing time: Sun 20 Sep 2026 09:00:17 +0000
Manifest this update: Sun 20 Sep 2026 09:00:17 +0000
Manifest next update: Mon 21 Sep 2026 09:00:17 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: QxL2ujlsEc7fHm4g2zLQQlOyMcI4b2mxQ1KYfEtmpc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:78:de:5b:35:b5:0f:fd:31:16:c8:49:f3:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Sep 20 09:00:17 2026 GMT
Not After : Sep 21 09:00:17 2026 GMT
Subject: CN=4689cfa237311e582181e0e5cba1227bdacd8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:80:6a:53:7d:f2:b5:b0:4b:22:bd:87:4d:
45:71:b3:7c:7d:61:16:ac:f7:b4:3e:d2:99:b1:8b:
be:6e:44:a2:5f:29:2c:3d:f7:2b:4a:54:83:66:05:
40:6a:f8:63:67:eb:73:c0:f7:57:d1:b2:a3:67:dd:
13:17:26:90:8b:d2:7b:bb:c8:cc:ed:3e:ea:0e:b5:
4a:b5:6c:a9:6d:9d:84:13:71:21:e1:5c:98:de:f9:
b8:28:dc:c0:3c:96:1a:ad:c6:01:cb:4c:bb:ba:dc:
53:eb:b0:19:8e:45:ed:69:94:fe:e1:fb:86:86:81:
47:7f:06:2d:ec:5d:2c:f0:02:db:cf:03:0e:1b:13:
34:24:e5:e7:d0:66:d2:0d:df:27:67:7f:c3:16:48:
39:d3:b3:e5:09:e6:92:95:da:18:c8:13:aa:32:19:
f2:53:37:37:3a:b1:a9:89:38:33:03:a0:39:1d:18:
b3:7e:d8:ae:77:75:cb:b1:58:8c:f7:96:f2:bc:0a:
30:ee:0b:e0:d6:be:8d:bd:28:80:dd:a4:d0:7c:5c:
d2:4d:c4:a2:ae:1e:e0:bb:6e:3c:68:03:f7:23:1f:
74:81:fb:ea:85:28:62:52:79:3b:4b:9d:55:8e:5c:
93:89:a7:63:40:d6:26:42:6d:ee:09:c4:39:e3:53:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:CF:A2:37:31:1E:58:21:81:E0:E5:CB:A1:22:7B:DA:CD:8B:84
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:00:09:47:5e:f0:47:5d:19:e3:0e:f9:f6:0b:91:80:d7:a4:
bc:33:05:43:89:b4:80:16:68:77:51:50:13:17:c5:96:0a:d1:
9a:90:bb:e3:90:5f:0c:56:6b:77:b5:bc:79:65:4f:ea:01:e9:
e7:58:00:ff:6c:b8:6b:7d:a8:4f:7e:aa:72:bc:9b:3b:74:3f:
e7:48:98:10:0f:de:f4:bd:c1:f3:2a:53:fe:00:f0:8c:c2:12:
2a:7b:40:98:d6:8e:81:69:26:45:ad:66:a3:a7:d6:7b:53:ad:
32:21:a3:c5:84:29:f3:c4:03:b5:4d:10:ea:2c:1d:c4:21:1f:
ae:3b:76:6f:f0:fa:50:c6:70:f4:82:97:ab:98:d6:ec:3c:24:
38:ed:f3:ab:ad:77:c6:bc:55:f6:39:d1:89:b0:aa:ca:80:8a:
ed:85:3b:0e:88:cf:85:ce:37:ba:a0:f2:5d:bc:5b:38:99:9d:
f3:c6:33:27:6b:51:16:d0:f8:bc:ec:95:49:57:2f:5b:a7:77:
43:97:08:3d:ec:20:e3:40:dd:13:eb:fd:68:96:14:66:6d:2f:
30:e9:f2:60:96:68:ab:ce:17:cb:65:9f:c7:1b:87:cd:bd:e1:
a9:ee:b8:c3:98:33:59:62:28:58:55:d5:c4:c4:33:f0:0b:9a:
15:70:73:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:50:12 2026 by rpki-client