Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: oIdeJ1KCX7c3uOQI0IMi4omA7a1UCmt1SBR3QlCgbSk=
Subject key identifier: E1:6E:E0:80:34:D5:5F:63:E5:61:29:3D:D4:6C:EF:05:6F:10:02:D0
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01A12B44766C025DED3B6DAB6773B6312EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0DAA
Signing time: Sun 11 Oct 2026 14:01:09 +0000
Manifest this update: Sun 11 Oct 2026 14:01:09 +0000
Manifest next update: Mon 12 Oct 2026 14:01:09 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: aqKOBhp9GLGahQ2vk5HyDivvWJtXpYquYzBiQIwwT6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:76:6c:02:5d:ed:3b:6d:ab:67:73:b6:31:2e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Oct 11 14:01:09 2026 GMT
Not After : Oct 12 14:01:09 2026 GMT
Subject: CN=e16ee08034d55f63e561293dd46cef056f1002d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:9c:d1:69:07:7f:1c:ef:11:6c:ad:43:67:
1a:b7:10:99:2d:84:ed:4e:eb:d7:8e:4e:dc:23:59:
45:79:d5:6c:58:b9:3c:bd:66:81:6d:b7:dd:60:3f:
f2:7d:00:3d:1e:78:37:e7:ac:80:6d:5a:9b:d3:1a:
5f:75:5d:ac:08:af:6b:77:4e:a7:c7:79:1b:8a:d0:
1f:28:fd:89:63:d1:e8:5c:03:0f:90:b1:f7:4d:db:
90:18:84:78:a3:5c:e3:c3:31:1f:20:5d:aa:6b:b4:
69:28:6b:06:bd:a7:46:be:0c:f9:1d:34:d9:d7:fc:
e7:f2:54:7e:7f:05:ad:d6:5d:61:f5:17:88:f7:60:
8d:d9:65:c8:52:c5:6b:31:0f:db:12:fd:b8:8f:fb:
d2:de:c7:66:6d:0c:0d:35:e9:0d:3d:76:1b:4c:13:
cc:9c:59:38:1b:ef:c0:08:32:ac:e0:8b:5a:76:e4:
3b:d0:68:6e:b8:5e:ee:c3:37:c7:f8:92:62:09:c9:
ba:db:30:f5:0b:39:a3:92:67:06:09:0a:64:e8:e3:
cd:98:f8:2a:4a:6f:9e:c8:56:59:e1:37:87:00:30:
23:89:7c:fb:2f:96:18:7a:f5:f8:e3:97:18:cc:01:
85:12:53:3f:04:47:e0:aa:c3:71:6d:aa:93:3e:1e:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:E0:80:34:D5:5F:63:E5:61:29:3D:D4:6C:EF:05:6F:10:02:D0
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:6c:49:28:2b:82:ed:ad:a8:4c:49:99:09:07:a2:48:b5:
d2:1e:7e:2f:3a:06:c7:39:5b:cc:cc:75:e0:bc:85:67:b2:60:
58:1e:30:92:28:9d:51:25:c7:aa:d8:63:1f:63:a4:80:a0:a0:
5f:1f:d0:ef:e6:c8:66:85:3c:ea:97:1a:18:10:83:d3:7a:c3:
61:20:3d:4f:7d:5f:3d:4f:17:9f:42:9e:4c:71:b2:a3:b6:6e:
8c:6c:43:f0:24:8b:70:d9:63:46:8e:cb:f1:5b:d8:36:c1:1f:
90:15:33:19:16:29:de:78:e6:06:8c:52:15:a7:ff:4a:bd:98:
51:ed:db:1d:e5:e3:9f:8e:e9:d3:7e:4a:47:d8:67:91:0a:4a:
a5:77:30:55:e9:96:13:50:6c:b4:ce:04:61:ae:23:91:ed:5c:
b6:c7:b2:04:97:de:fc:73:24:7e:9d:ce:ff:9c:e7:b2:6e:58:
08:c1:f9:d5:c2:d5:90:64:58:4f:27:2f:57:44:15:8e:e5:ec:
bf:4a:69:4d:c2:7d:17:38:b3:76:0b:30:99:56:d1:78:8c:ff:
88:7d:3d:78:47:1a:8c:5f:fe:3f:1f:20:86:ba:30:ae:e1:09:
fc:7a:ac:fb:ef:9b:2c:22:b6:e2:2c:8e:1e:8c:6f:7c:53:d0:
06:c0:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:11:48 2026 by rpki-client