Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: kiJSYDYkFeCwzk7RMLLX8nevjpBYZNgdTaNoYVC3CaA=
Subject key identifier: 08:F5:4C:E3:5C:CF:0B:A0:4B:C2:79:0D:26:93:4A:94:ED:63:2D:91
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 01A0C332031617C3F22AA9E5F36649D5A316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 09:00:29 +0000
Manifest this update: Mon 21 Sep 2026 09:00:29 +0000
Manifest next update: Tue 22 Sep 2026 09:00:29 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: Tep7ZPuvgqs3r8O+I0qN97A3/t+KZGPRXxyoxm3gFcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:03:16:17:c3:f2:2a:a9:e5:f3:66:49:d5:a3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Sep 21 09:00:29 2026 GMT
Not After : Sep 22 09:00:29 2026 GMT
Subject: CN=08f54ce35ccf0ba04bc2790d26934a94ed632d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:6e:00:47:ae:cf:71:53:4e:e2:58:c1:35:
a7:64:36:41:d4:4d:07:84:7f:ac:44:c0:2e:5d:03:
b9:4a:e7:0a:d2:5b:38:39:e2:94:00:5d:79:34:dd:
b0:84:e4:95:aa:be:e0:6a:ce:94:21:ae:2b:2d:01:
01:b3:2a:9c:aa:a1:d7:c7:90:31:0e:eb:1b:18:c4:
80:34:c9:c5:ee:87:7d:ef:1e:92:0e:20:02:4f:84:
2a:a0:c6:4e:8c:f7:27:9a:2f:d6:0e:28:8c:46:21:
43:5a:8b:ca:59:87:91:48:71:88:42:d3:b5:bd:11:
fc:3e:a9:dd:00:b7:bf:1e:22:69:2a:8c:b0:ec:da:
5d:96:5c:68:e0:fc:53:65:36:4c:ff:60:46:f6:0a:
04:d3:02:82:a4:8f:ef:d2:a7:e7:d1:09:55:1f:2a:
c1:fb:ec:ff:e9:a5:b6:29:93:a6:3e:97:bb:ba:9a:
cb:3f:43:25:11:ca:23:ad:51:e8:b4:dc:c3:c6:9a:
60:5b:42:7c:dd:01:78:e3:8f:b3:1c:a5:8b:33:cd:
9a:85:a9:52:99:ca:6c:6e:7d:85:36:ee:51:d9:f0:
f8:60:34:6c:41:e4:a9:b3:36:eb:37:04:70:b6:0a:
63:9d:65:52:a0:d1:0f:58:14:c8:d8:11:ed:c3:3b:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:4C:E3:5C:CF:0B:A0:4B:C2:79:0D:26:93:4A:94:ED:63:2D:91
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:33:d3:cf:c6:51:13:aa:e2:47:b4:97:2a:71:fb:ac:11:
bc:65:ce:62:4d:ec:57:3d:1f:2e:d3:ad:f2:d0:bd:8a:99:40:
15:10:f1:cf:a9:41:92:74:bb:a6:a9:b0:6b:09:a3:56:f7:43:
6d:04:9e:59:e0:c7:30:f0:3a:b7:14:fd:fb:a6:1d:cc:fe:aa:
9b:0c:39:e1:2d:a3:42:04:b5:e9:a0:32:1c:1c:49:4b:8c:aa:
83:f5:7d:77:1b:4a:d3:c4:e6:a1:f6:4b:2d:54:73:88:d2:1d:
c1:81:f7:15:08:a8:2d:40:a5:47:38:e8:bb:d8:16:e6:76:08:
a4:d9:42:e8:47:2f:ff:52:6d:ed:90:1a:bc:c7:37:1a:9e:6d:
5c:13:bb:e1:d2:b4:0d:84:30:67:30:90:61:52:d7:21:41:4b:
81:fe:51:a7:49:4c:63:fe:d8:6f:51:c0:a9:f5:42:1f:a8:55:
36:a4:0f:87:47:85:41:91:38:89:51:5a:81:46:1c:c5:f4:03:
61:f0:5a:d9:f8:b1:b6:b8:03:f1:f8:6d:cb:bb:10:1e:19:71:
13:0c:c6:22:f1:b6:c9:8b:9b:e9:07:1d:c4:ac:ae:32:31:6b:
05:dc:ff:d4:ba:0e:31:fc:eb:df:57:9c:9b:f6:05:7a:87:6f:
5a:6b:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:35:36 2026 by rpki-client