Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: G888mfMmNBEzq7z2oqGE4A3B+UfFlx8krFY7o0zXy7Q=
Subject key identifier: 5F:C6:0F:B7:F3:95:55:37:2E:94:FE:F5:40:64:E1:4D:46:03:1A:EB
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01A0C846A226190453FCC30CF2DCAAD2E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 1594
Signing time: Tue 22 Sep 2026 08:41:07 +0000
Manifest this update: Tue 22 Sep 2026 08:41:07 +0000
Manifest next update: Wed 23 Sep 2026 08:41:07 +0000
Files and hashes: 1: 5Nv5ZvX-dgvlECGfA772vvi7Pu8.roa (hash: ARwb8cKZO4IVM6e8qrKxoaRFCxWeYFfWShniGC6fqog=)
2: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: z5pFAmrIS4HEkWWwSEXYxe0Ai6L9zNnsqPUHsImN8xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:46:a2:26:19:04:53:fc:c3:0c:f2:dc:aa:d2:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Sep 22 08:41:07 2026 GMT
Not After : Sep 23 08:41:07 2026 GMT
Subject: CN=5fc60fb7f39555372e94fef54064e14d46031aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:17:96:d5:6a:9d:9f:0d:51:1b:07:4b:23:
cb:2d:28:02:1a:b9:d0:9a:a5:d0:03:ea:b7:c5:54:
f2:4a:8c:9d:b8:56:d3:fd:b1:2c:26:72:81:0a:f6:
41:cb:5f:32:f7:d8:53:7c:28:6f:5e:3c:91:10:fe:
0e:c7:76:9e:0b:0b:99:f2:f2:4c:ca:cc:02:b4:15:
90:c2:b0:33:18:ab:e6:b0:3b:d8:ea:96:d7:50:38:
41:73:a6:ff:0c:ec:ee:c1:fa:bf:4f:55:7a:3b:9a:
88:91:a2:14:cb:02:21:54:b0:2a:1e:f6:56:04:4f:
ee:18:e5:71:91:08:46:c8:19:a2:87:4d:0a:30:8e:
4f:49:37:c2:a5:57:bb:f1:6a:f3:b5:67:f8:a9:c2:
af:5f:0c:88:df:54:bc:a1:54:e9:23:90:e9:a8:89:
3b:cf:64:c5:bd:fa:ca:62:eb:79:dc:cc:a6:c2:07:
07:8b:48:ae:ad:54:05:4f:18:d6:7d:bc:2f:48:27:
96:a8:9c:ce:61:d5:5d:e4:6a:9c:87:8a:ee:03:f3:
d5:6c:72:17:a8:70:9b:6e:7d:2f:be:0e:98:9e:73:
0e:e6:0e:75:d8:57:e6:97:05:8c:54:9a:8b:b3:aa:
0c:0c:74:e8:2e:16:ca:b5:ff:d4:7e:f7:c4:8c:5a:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:0F:B7:F3:95:55:37:2E:94:FE:F5:40:64:E1:4D:46:03:1A:EB
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:93:11:82:f3:4a:43:99:8c:57:00:63:7f:ab:35:4d:0a:59:
bf:c6:74:dc:7a:c8:d5:05:28:e5:0d:26:f1:17:84:0b:d2:42:
28:83:4d:d2:fb:55:bb:6d:23:2f:5c:01:86:39:e9:b2:c0:02:
2b:33:ad:c3:89:94:51:96:e8:d9:22:2a:ba:21:ac:62:0e:27:
4b:15:7a:56:1c:08:29:49:0b:f7:0d:9c:fe:3c:73:81:65:62:
dc:25:f4:5c:1d:7d:93:c0:48:4d:95:fd:9c:45:c1:1f:96:b2:
f9:e6:e4:1f:b7:96:00:87:2f:3f:31:d8:23:01:f3:a7:1f:5e:
7e:79:3a:90:37:ac:2d:8f:00:a4:5a:7f:68:17:f8:c2:e6:cd:
5e:bb:e9:b7:db:59:12:4d:93:f0:23:68:8c:84:32:e7:22:95:
26:97:c7:db:8a:fb:d8:d3:9c:04:67:37:b7:83:a0:3b:5a:c4:
98:79:84:b0:fb:fa:df:35:db:d6:86:b4:95:5e:8e:5c:28:f9:
eb:be:05:ec:ce:94:79:eb:66:7b:66:5e:c3:57:6d:68:1b:c6:
f5:09:53:55:53:21:63:01:9e:3b:e0:57:0f:5b:98:11:d1:77:
e5:14:a8:58:e2:92:5d:ae:d9:86:d2:fe:70:7f:dd:86:39:d9:
a0:b7:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:43:55 2026 by rpki-client