Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: WzkJPIkxcoaylJ5PynfhunY2BPrOg8iiKiFtqyTfDWI=
Subject key identifier: 7F:A2:3E:19:83:D8:72:88:B5:6F:F9:62:03:44:F2:5E:F4:24:1F:15
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 01A0D8DE7D8300B04BCF330B7A2582E720F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 043D
Signing time: Fri 25 Sep 2026 14:00:54 +0000
Manifest this update: Fri 25 Sep 2026 14:00:54 +0000
Manifest next update: Sat 26 Sep 2026 14:00:54 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: I8l3UyHP0JkWZhrc7ElCLWkahObg55opf/LXe99UqZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:7d:83:00:b0:4b:cf:33:0b:7a:25:82:e7:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Sep 25 14:00:54 2026 GMT
Not After : Sep 26 14:00:54 2026 GMT
Subject: CN=7fa23e1983d87288b56ff9620344f25ef4241f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:c1:6b:11:63:00:ac:fb:26:70:e6:1c:f6:
e3:78:3d:08:7b:ba:06:7d:5a:10:20:81:5b:b5:9a:
0e:0c:30:8b:78:57:22:a1:17:92:3c:c0:25:33:9f:
81:22:f8:58:19:7b:86:2e:79:67:d9:79:f9:5c:b4:
96:1f:dc:4b:99:55:6f:06:50:e8:c6:44:60:3f:46:
88:c5:e0:44:f1:06:89:5e:c1:77:49:96:11:ae:5e:
1f:32:16:8b:b9:68:bb:2e:cf:32:cc:3e:b6:60:ae:
4b:e1:5c:16:82:7e:64:85:15:f8:d8:0c:13:70:88:
e3:a7:d5:07:01:5b:28:3b:b3:7c:10:92:bd:8d:6c:
d2:44:75:22:10:4d:6c:a0:4d:d0:e8:53:54:9c:19:
2c:ed:2a:74:89:bd:36:16:75:f0:5b:f7:c2:cf:99:
b2:8c:00:41:b2:d0:84:26:5e:36:8c:c7:13:1a:50:
78:1f:e1:90:7c:8e:4c:d8:70:29:7d:16:bd:ac:89:
96:a5:f3:4f:6b:1f:68:4b:34:c4:32:87:45:90:31:
fe:a4:ed:e2:86:9e:ec:bf:3e:27:1e:b3:9d:11:88:
39:50:1a:f1:9e:e0:19:fb:45:7d:ff:cf:37:dd:c8:
a1:5f:00:d1:0d:a9:a0:f0:2f:89:4b:61:8d:e0:3b:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:3E:19:83:D8:72:88:B5:6F:F9:62:03:44:F2:5E:F4:24:1F:15
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a4:9e:bc:28:99:e2:59:69:41:1c:63:b8:93:09:86:a1:08:
8f:f5:b5:09:e4:3c:76:49:ba:bd:ba:4d:28:48:5b:b0:64:0b:
f3:e1:99:5a:d7:26:6b:98:02:f5:ab:dc:e1:6c:e8:b0:27:75:
28:fc:3a:23:0d:61:d7:f8:da:00:0e:3a:0f:68:7e:d4:11:63:
2a:80:ec:c0:65:7c:27:5f:80:1a:a3:44:c8:20:b9:b0:9c:09:
95:00:c6:d2:a6:0a:74:84:09:6e:5a:ef:ca:2c:c6:b9:6a:50:
d5:7c:1a:b3:ed:4e:92:f9:83:d0:7e:72:7c:b7:f3:16:90:a9:
89:dd:af:b5:d0:85:c5:69:b8:d7:ae:33:e3:92:7e:39:ec:b4:
ae:dc:49:54:bb:21:7d:f3:a8:6c:7a:79:de:98:c3:8f:0f:a3:
f8:3f:be:dd:a7:52:dd:e0:d8:8d:6a:b6:62:ff:09:5b:a1:f1:
59:f1:97:da:30:39:7c:db:ec:f4:00:fc:82:96:8a:19:6b:1e:
fc:41:5b:49:23:2f:6f:29:3b:b0:ad:9c:2c:55:8d:41:46:16:
f0:25:3e:dd:fd:89:da:d1:69:be:f1:1b:84:f6:86:a4:29:bc:
eb:07:b1:12:4f:89:b3:c0:aa:12:d8:63:b7:93:5d:28:9b:3a:
b8:f3:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:24:23 2026 by rpki-client