Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: wU29gZAXXBa6ak9hdQQvlOvII7Sg3tndjNJzhOn2KcQ=
Subject key identifier: BC:56:FC:A5:64:72:12:E8:A5:B8:B5:84:A9:75:31:BB:53:7E:EB:A2
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 01A0E7AED07086B487E02933DC5E74586FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1ADB
Signing time: Mon 28 Sep 2026 11:03:08 +0000
Manifest this update: Mon 28 Sep 2026 11:03:08 +0000
Manifest next update: Tue 29 Sep 2026 11:03:08 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: U4dO6Eu64nh7I8CsYbJeeDCtZSe0fkSyc5GPjY5vTL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:d0:70:86:b4:87:e0:29:33:dc:5e:74:58:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Sep 28 11:03:08 2026 GMT
Not After : Sep 29 11:03:08 2026 GMT
Subject: CN=bc56fca5647212e8a5b8b584a97531bb537eeba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:97:19:0d:7d:19:ee:bb:25:0e:20:8f:23:
ff:5a:b6:e8:c8:10:eb:7e:94:f7:f0:c1:80:46:79:
19:f4:91:57:ac:de:ff:07:9d:13:ba:b8:10:ba:a6:
5f:ce:97:82:a0:06:09:c2:64:7d:a2:df:76:3e:b9:
89:70:fb:a8:9d:3d:7c:ed:9c:26:aa:9b:b9:a1:ff:
bc:83:ae:85:d3:be:5d:6e:ff:3c:b6:47:66:7e:52:
d4:fa:e3:e7:4b:00:cf:26:eb:a0:18:6e:36:a2:fd:
7a:b4:0a:29:a6:5e:3a:95:01:bf:fe:68:c2:b5:2b:
8e:46:7b:5e:07:a9:4d:80:74:86:30:23:90:77:bd:
cf:b0:46:a2:a3:86:ba:f8:d5:ff:ad:51:6b:bd:99:
ea:6a:4c:5a:3a:de:d4:ae:04:fe:94:e3:1a:cd:4a:
84:69:1e:15:00:19:56:f2:bc:fe:f3:ca:d4:2c:32:
49:ee:06:1e:29:3b:d6:3f:f6:a6:45:60:3b:39:81:
ab:8a:eb:ae:c4:43:eb:75:45:11:3e:a2:c8:3a:39:
27:3e:95:cc:52:23:16:be:6b:25:94:6d:70:2b:25:
ff:b5:be:89:c7:11:b2:6b:87:68:07:62:f3:b7:cd:
40:f4:12:0a:ff:0a:13:8b:88:06:4c:f1:b0:e7:2a:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:FC:A5:64:72:12:E8:A5:B8:B5:84:A9:75:31:BB:53:7E:EB:A2
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:5c:ca:99:76:1b:6c:02:87:eb:eb:1c:a7:b3:26:a2:d9:
06:49:63:be:ee:21:31:1b:33:53:a4:c4:55:e2:25:af:9c:6d:
f7:58:e2:91:5c:01:34:f4:62:31:71:68:98:77:46:86:c1:23:
a8:5a:f9:d9:3c:7c:d3:a3:fb:4c:bd:4a:56:26:29:28:36:cd:
e3:be:b8:f8:fd:f4:d2:de:89:e0:f1:b4:c2:ad:c8:b1:ea:19:
3b:fc:6d:72:4e:d3:e2:d4:fc:7c:c0:d4:20:19:b7:44:22:39:
05:95:fb:86:17:fe:53:86:ed:c5:f3:95:a3:f2:ee:ed:20:6c:
15:7f:f7:3e:21:ba:e3:66:44:f3:bf:67:e6:4f:20:26:d7:b3:
47:91:d9:03:bf:09:95:1a:60:78:ba:34:39:65:08:1d:ff:8e:
bf:a3:11:17:f7:54:f8:1d:ef:aa:b6:46:22:05:f8:48:9a:4e:
68:48:65:34:a7:99:62:b6:a9:54:01:7e:b3:67:2e:cc:83:34:
11:9c:d5:ee:f4:03:bd:53:6b:37:4a:45:83:b7:64:86:43:a8:
6a:9e:09:76:7f:d6:6e:93:6c:e7:11:10:03:d6:3d:fb:a7:c8:
4e:f5:d0:4f:9e:c0:80:82:12:ad:49:8c:05:d1:1b:e7:c2:d0:
eb:f5:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:22:10 2026 by rpki-client