Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
File: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft (raw, json)
Hash identifier: Quwo4vxdiaUbkWclcEgszIllnvjWXsGsDb9bOqCcHDM=
Subject key identifier: 57:26:4C:2B:C6:9D:67:D7:99:AE:14:62:C8:3C:83:03:E0:22:BD:AF
Authority key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Certificate issuer: /CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Certificate serial: 01A0C6D870E7A066571E6DFD403E6FB9AF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
Manifest number: 3D
Signing time: Tue 22 Sep 2026 02:01:08 +0000
Manifest this update: Tue 22 Sep 2026 02:01:08 +0000
Manifest next update: Wed 23 Sep 2026 02:01:08 +0000
Files and hashes: 1: 4Ymkv_Ino49ll3TxCeRrFSB03b8.roa (hash: EC6epXR7lNi/qPuSWHGUkvfRI6ulV/puQ8edzleZuv8=)
2: b8i9m0axPxDDGMlomU5lSF5dPuA.asa (hash: KBEJeBNE2I2oG4USPi911JF+fPhQ4JykHrbwTuwUzCM=)
3: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl (hash: Nen1tnw0MxmHmsJTW0WLGPwVjRlJAArkt4idCZBmctQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:70:e7:a0:66:57:1e:6d:fd:40:3e:6f:b9:af:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Validity
Not Before: Sep 22 02:01:08 2026 GMT
Not After : Sep 23 02:01:08 2026 GMT
Subject: CN=57264c2bc69d67d799ae1462c83c8303e022bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:74:5a:f4:89:23:2b:0f:21:ef:7a:71:a8:
5c:1b:1a:e5:d1:df:81:86:a9:21:10:0a:19:34:e3:
cf:36:a3:67:8a:e9:4d:51:a6:08:2f:ee:68:37:b7:
d2:c3:de:ff:a3:25:d1:00:45:39:28:15:22:c6:82:
06:d8:ed:99:d9:9c:19:43:57:c6:71:55:7b:bd:d5:
1c:75:de:b1:a7:26:31:c6:09:e5:6d:8e:69:de:b2:
77:3f:4d:11:63:e9:7b:12:60:ef:d0:77:78:d3:9b:
8e:d8:c4:2f:4f:cd:0b:66:d4:c3:58:13:a6:05:26:
1e:f7:94:a5:19:37:50:c7:35:1e:12:ef:65:f1:52:
11:69:0f:df:37:19:25:87:10:b9:78:91:d7:f3:13:
36:9e:a5:f6:32:02:ad:c0:4f:fa:73:63:3a:f7:0a:
51:c6:6a:eb:e4:8d:ac:ca:b3:72:dd:40:75:56:c8:
15:7e:3c:57:9a:4f:71:b2:c7:b5:e3:0b:75:06:40:
2d:af:8d:f5:4b:7c:df:da:05:5a:8a:ec:b4:c0:4b:
90:5d:3a:36:40:63:47:84:97:d5:ef:14:82:31:f1:
51:e0:ef:f0:b3:26:07:cf:72:70:fe:1d:ca:02:3f:
c8:0b:6b:74:9d:8c:f0:4b:27:5d:b6:75:55:4d:aa:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:26:4C:2B:C6:9D:67:D7:99:AE:14:62:C8:3C:83:03:E0:22:BD:AF
X509v3 Authority Key Identifier:
keyid:71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:58:b2:ff:09:4c:97:e8:b2:9e:05:c3:7f:92:08:dc:e7:
03:71:97:5a:3d:87:89:70:3a:1a:22:07:b2:33:5c:12:82:7b:
ae:71:29:4b:39:c4:e0:9e:73:91:5e:d0:62:79:d7:cf:8f:21:
c7:ed:ee:de:42:8f:57:a6:1f:4a:09:f3:f8:85:fd:5a:18:57:
60:24:76:3a:1a:3c:bc:78:82:01:68:48:62:5f:43:f8:28:65:
51:0c:8b:a1:d2:ad:91:ee:35:99:23:ea:22:85:c2:b1:e9:70:
37:b4:97:a1:91:a5:21:b9:1a:bf:fa:58:09:c4:9f:10:b2:50:
f0:b0:60:3f:03:1f:6d:fa:8a:ce:86:19:41:24:1e:14:08:8e:
2f:43:47:a3:6d:62:81:f6:bc:d6:39:03:02:1e:9e:7f:3f:95:
80:1b:01:1c:11:c5:c9:dd:f4:3e:2c:70:52:24:66:ad:e4:4a:
3f:d6:90:ed:1f:47:c1:82:69:be:ee:c0:06:b3:36:d9:ac:b5:
a0:b6:5a:cc:9f:7d:66:70:10:69:1e:eb:f0:4a:b5:9d:00:3a:
9b:17:6d:ef:63:90:90:d4:f1:9a:01:ba:ba:47:57:a5:9d:fd:
cb:13:f7:f8:7a:86:b1:3b:05:92:5b:14:74:6d:6c:7c:5d:6d:
51:84:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:37:44 2026 by rpki-client