Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: ooMIi18jl6UYWR1SdBsTnAuGHAzl7f4nXzvvlPxoWd0=
Subject key identifier: 60:5B:79:76:0A:4A:54:4D:F6:1A:36:11:10:EB:27:D5:FA:21:5D:49
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019FACE43ADF2E2669B0301AC37FCCA38373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1A38
Signing time: Wed 29 Jul 2026 08:01:06 +0000
Manifest this update: Wed 29 Jul 2026 08:01:06 +0000
Manifest next update: Thu 30 Jul 2026 08:01:06 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: gjXt1PGA02FP2aTn+xBo2032jELRPhGJvXh4S6i2fXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:3a:df:2e:26:69:b0:30:1a:c3:7f:cc:a3:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jul 29 08:01:06 2026 GMT
Not After : Jul 30 08:01:06 2026 GMT
Subject: CN=605b79760a4a544df61a361110eb27d5fa215d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:ef:84:3e:ae:36:4b:e4:6f:84:e8:59:6a:
27:42:75:a7:db:26:7d:c8:7d:ad:92:f8:71:e3:f8:
92:54:f4:ea:93:58:3d:bd:cc:4c:fe:1f:0c:5f:73:
62:cb:36:b2:98:8b:51:b1:18:dd:d0:c1:79:1d:6c:
04:19:7a:c8:70:c9:32:c6:6d:f9:5d:d1:cd:9b:a4:
21:5d:cc:4b:02:68:1e:d1:45:1d:b2:ba:65:a5:75:
be:aa:df:70:dc:83:46:26:73:ef:29:06:dd:6b:62:
d8:52:14:14:29:03:24:db:ee:51:36:87:e4:47:84:
73:09:c6:97:dc:1c:40:4f:28:e3:68:b2:bb:67:0b:
cf:48:2f:29:2b:2a:01:23:4d:0a:5e:fa:d1:87:ca:
00:27:45:71:83:90:05:ef:e7:4b:d7:26:f9:79:0e:
7d:74:69:6f:e6:f0:6d:95:c7:8d:f8:d8:45:d5:e9:
4d:5b:ca:13:b6:62:0a:a7:b2:db:2d:2d:b0:12:17:
bb:87:ca:31:bb:c3:f8:b6:cf:99:fe:a0:59:67:bf:
32:9d:96:9e:16:14:87:e0:87:6e:2e:b0:c8:a7:47:
5f:e1:d2:56:22:40:15:61:e9:0b:02:99:f0:56:0e:
f9:61:a4:1b:68:64:d6:f8:e1:86:b1:cf:88:0e:fc:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:79:76:0A:4A:54:4D:F6:1A:36:11:10:EB:27:D5:FA:21:5D:49
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:74:0c:32:80:f1:d2:09:c7:19:3f:83:4c:ac:f7:82:f5:82:
b6:7b:eb:9c:66:51:ed:cd:25:5e:32:45:52:39:2c:aa:7b:6e:
84:ff:5c:1f:d8:4e:51:d5:2b:6e:78:4c:82:8f:82:ce:1c:4c:
d8:a9:04:bd:7b:dd:ba:8f:7d:85:6c:cd:6f:17:a1:98:45:e7:
ec:e0:42:89:8e:6a:cd:6b:eb:9f:6a:10:4e:6f:24:6b:c7:0d:
af:ae:3a:51:04:88:21:46:9e:be:38:e3:40:dd:a6:b5:16:d2:
4d:61:c0:48:dc:f5:22:0d:f9:5a:3f:71:74:2f:c3:81:fa:6c:
62:ea:8a:3d:ad:7e:cc:5f:69:6b:cc:6b:be:81:9b:0e:b9:2f:
d6:ca:b4:c2:af:41:5b:40:b4:11:a0:6f:9a:1b:db:b8:ea:c5:
f0:ed:10:d2:64:f5:d2:ea:3b:59:d5:3b:ac:93:7d:c3:c9:aa:
8d:6f:56:49:3d:e4:60:2f:b7:f8:9c:89:c2:ad:1f:13:e7:50:
80:24:88:da:1f:3f:69:2e:0a:14:54:6f:31:f1:9f:a9:2a:84:
4b:c6:79:a8:b1:a0:74:69:a9:7d:42:7a:c3:6c:97:91:a5:fa:
93:90:3c:3e:f6:79:d0:30:d5:a8:b7:73:cc:fc:b5:04:2c:88:
6a:1e:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:52 2026 by rpki-client