Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: znPrOeYibwaZaDi+tOJyAMR4D2FdbkdCrPuKLKkXNgE=
Subject key identifier: F4:07:A0:B2:0E:C7:61:14:CD:DA:0F:BB:24:A8:E1:41:69:DE:54:84
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 01A0D011FFA154A74CF241D4E6FC0A167404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1A64
Signing time: Wed 23 Sep 2026 21:00:35 +0000
Manifest this update: Wed 23 Sep 2026 21:00:35 +0000
Manifest next update: Thu 24 Sep 2026 21:00:35 +0000
Files and hashes: 1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: A6sG8kUOdKBObhpu1FZLQj4uubPy8RuY9kPWQf2mx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:ff:a1:54:a7:4c:f2:41:d4:e6:fc:0a:16:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Sep 23 21:00:35 2026 GMT
Not After : Sep 24 21:00:35 2026 GMT
Subject: CN=f407a0b20ec76114cdda0fbb24a8e14169de5484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:7d:57:84:3b:c4:17:fa:69:d3:35:6b:0f:
22:3b:a2:f5:34:31:3b:77:21:64:9c:6d:f6:06:a8:
4b:48:5b:d9:c0:ba:08:01:83:0b:ee:71:37:e6:ae:
5e:29:dd:95:9b:c6:11:43:cf:20:9d:6c:c6:49:dc:
2f:f9:4a:4f:a4:e2:8b:3a:c3:85:15:28:63:03:92:
50:39:a8:ba:02:38:e5:1c:27:c9:ef:ab:77:3a:aa:
0d:10:bd:bc:90:38:47:70:92:be:fc:a7:1c:bf:be:
49:cd:0e:c6:61:5e:03:12:24:0b:9c:89:63:b5:d9:
70:27:7c:8a:9f:ae:0b:81:0a:57:7c:64:10:13:2c:
06:9c:62:8c:87:11:0a:f3:35:67:05:e2:a0:3c:cb:
38:2a:1a:c4:8a:ca:4c:45:40:ad:4b:e4:78:2f:66:
ef:6a:db:8f:24:58:30:c4:88:0a:a2:d1:23:e5:af:
fa:97:b4:c3:33:c2:6e:75:bb:7c:7f:bb:6d:41:11:
67:3c:c6:57:5a:a9:52:02:b8:9f:ce:fb:de:11:e5:
0e:d5:6c:d4:40:dc:e7:aa:d7:0b:85:84:04:ac:26:
e7:15:cc:4a:f4:31:a2:fb:36:d8:25:da:5d:69:55:
a9:09:0f:5c:20:26:ea:b3:eb:24:dc:ab:ba:74:1d:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:A0:B2:0E:C7:61:14:CD:DA:0F:BB:24:A8:E1:41:69:DE:54:84
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cc:36:f0:d8:8c:2a:d3:2e:24:54:74:fb:66:9f:70:cb:1a:
14:3a:ad:55:e8:22:57:14:53:e3:fa:12:9c:64:3b:80:e7:95:
8a:94:ca:1b:94:1a:0d:c4:57:31:73:7e:88:60:87:72:0f:df:
c5:b0:ea:c2:0d:b2:c8:a1:d9:05:24:ce:79:ee:b5:5c:54:7e:
35:3d:da:d7:4c:8e:3a:d3:b9:79:e5:5e:87:6b:99:ac:89:62:
24:ac:72:2d:3b:b7:e7:b5:e0:30:70:9d:59:db:66:24:86:44:
14:b6:03:33:12:a0:0e:c6:a4:1f:c9:40:c3:ea:35:2a:ca:63:
8f:3e:0e:89:ba:c7:a1:8e:d1:e8:97:af:33:7e:6b:26:cc:e7:
e3:a4:d2:75:9a:92:2d:28:a2:4e:56:75:d6:c8:eb:bf:76:d7:
95:6d:8f:b4:6f:10:18:3b:19:8c:a7:f8:cb:f7:32:65:b3:67:
1e:73:55:51:55:91:e2:b5:1b:44:b1:0c:d5:58:1b:99:17:06:
2e:39:4b:99:7f:8f:d4:94:b5:bc:7c:b2:b9:71:21:dd:3b:65:
89:45:16:fa:58:3f:e5:5c:11:56:13:81:9f:9a:68:42:1a:06:
23:4d:c0:e7:bd:10:9a:54:e4:ff:35:f7:f6:82:ce:5f:eb:20:
a1:9c:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:30 2026 by rpki-client