Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File: ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier: 89t9zXuO1oGp7a8HwJiEyGf5R4uAaY3tVKsdWEOOF3E=
Subject key identifier: 67:06:9B:03:84:23:2C:CB:26:82:B9:2F:F7:9F:F0:21:3D:42:95:E9
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 01A0E709CC228136A8567B8E9106A8BD9D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number: 0946
Signing time: Mon 28 Sep 2026 08:02:53 +0000
Manifest this update: Mon 28 Sep 2026 08:02:53 +0000
Manifest next update: Tue 29 Sep 2026 08:02:53 +0000
Files and hashes: 1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=)
2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=)
3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=)
4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: xfIyVQIzbw3ivG9kqrf0tsVOmHNHSLt+HK23GOrXBy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:cc:22:81:36:a8:56:7b:8e:91:06:a8:bd:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Sep 28 08:02:53 2026 GMT
Not After : Sep 29 08:02:53 2026 GMT
Subject: CN=67069b0384232ccb2682b92ff79ff0213d4295e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:eb:29:1b:32:bb:f8:e7:24:c8:da:1e:b0:
c0:6d:31:fd:8f:f9:4e:f6:eb:b6:61:fa:79:77:53:
33:8c:81:29:63:72:c6:8e:92:1c:b9:71:b7:08:49:
c4:d7:f2:91:e0:7e:2c:c9:2e:08:2f:6d:dd:44:d7:
4f:6f:77:72:86:7d:b0:f6:cc:b0:2d:94:de:f1:a4:
fa:55:2b:0c:46:26:c9:a0:81:ec:61:b1:7d:5b:fe:
8b:2d:47:e5:5d:03:13:f6:d0:bd:04:78:87:79:9d:
b8:a7:af:d5:e9:25:cf:d1:95:54:7b:30:f9:2e:dc:
86:8e:14:d1:d6:e3:15:e3:31:9c:e4:09:e2:0c:5c:
53:22:4b:09:2a:11:41:c4:d4:3b:58:42:0c:31:79:
91:59:13:ad:3c:99:b3:48:fb:8f:b7:a9:0e:09:00:
28:be:37:14:0a:a5:98:da:33:f6:85:c4:3c:e0:9f:
38:11:0c:39:d2:bd:4e:b1:0f:65:4b:5f:49:43:8d:
e4:cb:16:c6:61:a3:d4:a3:99:ab:c0:2a:4f:2c:ba:
b7:a8:23:18:c3:6a:18:b8:c7:39:25:fa:12:b0:52:
2d:01:e5:53:3f:fe:01:f7:f4:78:7c:3f:8f:e4:12:
6a:85:72:ba:42:93:6e:85:22:e0:31:6a:aa:ec:90:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:9B:03:84:23:2C:CB:26:82:B9:2F:F7:9F:F0:21:3D:42:95:E9
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e5:ba:97:a7:63:cb:e7:79:f7:b0:cc:61:59:f0:e3:9f:36:
2c:11:98:73:ad:42:61:58:48:d4:97:76:c2:43:ab:ac:08:87:
48:d3:2c:8d:36:76:da:48:8b:70:7c:d3:cf:79:1a:2d:aa:f0:
85:37:0f:13:50:a8:84:a0:c1:12:62:c9:0e:84:63:a4:20:a3:
80:ba:08:f8:d3:4e:54:a2:74:df:db:d9:71:ea:37:2a:fe:08:
7d:69:69:93:8f:11:12:e9:5e:0a:8e:d4:96:97:53:bb:85:1f:
4d:4d:1d:fd:1e:38:57:0c:16:58:c2:9e:b4:ba:fa:52:74:da:
91:ce:d9:09:a5:55:30:9d:3a:67:fd:e5:66:16:59:aa:8d:0b:
c7:9b:3f:aa:76:94:39:81:e7:6b:7e:79:bc:40:59:ec:ae:dc:
01:20:42:53:58:f7:c7:fa:07:46:73:40:5a:d2:86:f4:55:8c:
a7:a9:c4:cc:dd:87:6b:7b:53:dd:12:90:e0:1b:f5:6d:2c:be:
b8:b6:f5:6e:fc:50:39:1a:8c:9d:50:7c:46:34:f1:95:cf:58:
b6:d2:aa:f7:af:48:a6:74:c5:48:d8:ff:91:7f:c5:f8:d0:f2:
ac:58:81:23:3a:71:31:a7:c4:75:75:a9:36:d8:bf:38:0e:ae:
7d:10:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:34:43 2026 by rpki-client