Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: zb4WUZumgoViak9RG+vISpgsYHY58S/w3Cedk6ytqdE=
Subject key identifier: AD:89:D8:FF:D4:5B:5E:00:31:73:32:D5:DC:0F:0E:04:71:2F:5E:DB
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01A06FBA3E5DF223B8D7310B7360FC7EBFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1A3A
Signing time: Sat 05 Sep 2026 04:01:11 +0000
Manifest this update: Sat 05 Sep 2026 04:01:11 +0000
Manifest next update: Sun 06 Sep 2026 04:01:11 +0000
Files and hashes: 1: 1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa (hash: uAnzzs6q7U6un+U0t3+PFFv4SIJ/S56dCg4WUcRKDUE=)
2: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
3: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: cS5pneqlhVtbW7LhHaifdVvMZmyuelXF1ETslK3Q8JI=)
4: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:3e:5d:f2:23:b8:d7:31:0b:73:60:fc:7e:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Sep 5 04:01:11 2026 GMT
Not After : Sep 6 04:01:11 2026 GMT
Subject: CN=ad89d8ffd45b5e00317332d5dc0f0e04712f5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:0a:58:2e:e3:bc:c4:77:0d:c7:81:f7:1d:
0c:53:6c:a0:ec:8a:8f:4e:8c:39:01:5b:a2:a4:73:
4d:36:79:d1:36:b4:af:e3:c1:51:7c:95:d0:8c:d3:
8d:22:67:31:07:be:7d:a3:55:aa:d6:53:c7:24:cd:
b5:3d:9a:f6:d5:be:5a:3b:76:cb:42:9e:e3:46:f8:
65:9b:c5:fd:bb:d8:a4:fb:c9:54:78:bd:35:3e:f9:
e6:13:38:02:e0:ef:b0:a6:4f:ae:0e:05:0c:bf:9a:
e1:dd:79:b3:38:b6:8f:a8:96:3a:84:d8:36:72:61:
0a:c3:9b:3d:40:84:8d:47:73:1c:c0:e3:03:05:1f:
be:a8:28:7b:59:f3:78:e8:15:c9:09:3a:de:3e:72:
05:18:01:32:d7:4c:29:d5:2d:8c:44:03:57:a2:83:
0f:80:75:de:ae:80:6b:58:69:a5:0e:20:b2:af:b9:
c0:df:ba:58:97:c0:fd:c8:17:f0:b0:2d:fe:a1:4a:
62:59:f6:50:88:ca:4d:1e:c0:fa:be:f8:29:a2:8f:
30:86:0d:71:42:cc:ed:a6:60:7b:a2:de:73:42:be:
78:57:ee:c7:40:af:72:58:8c:60:32:e9:eb:53:cf:
f9:a6:1a:56:0c:f3:1a:b8:a9:f7:87:ac:62:ed:b2:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:D8:FF:D4:5B:5E:00:31:73:32:D5:DC:0F:0E:04:71:2F:5E:DB
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:34:ef:72:93:e9:2b:4f:c7:2e:d7:aa:e2:30:11:7b:51:
fa:e7:08:34:a5:11:9e:f3:25:66:31:3f:7c:49:1b:ae:10:55:
17:67:68:10:17:63:fc:7b:ce:3e:77:85:dc:30:f6:02:0b:3b:
c9:6e:f1:16:90:fb:da:95:49:da:4e:47:a0:1f:b2:24:6f:39:
ff:16:7b:80:86:cd:eb:bd:35:d8:da:8a:46:4b:53:65:57:e8:
47:d2:f3:14:f3:43:cd:a2:f5:de:18:5e:f9:ec:93:35:d9:88:
e2:27:69:02:ca:40:ed:24:37:8e:7f:bd:01:cc:08:35:8c:96:
97:16:45:3a:0c:cb:1d:d1:30:c2:bd:3a:7c:d2:92:10:ac:6f:
32:10:0d:de:48:55:95:ba:18:35:06:cd:ef:65:91:e6:4d:c4:
9c:33:88:52:7b:e5:1f:75:b4:1c:b2:23:44:ac:f8:d1:6c:27:
b2:61:7c:e4:1e:74:8a:e2:68:70:ae:dc:9d:02:7d:d9:6b:e5:
1c:b2:27:dd:df:24:98:b3:4a:33:22:55:6c:bd:5a:11:d1:1b:
df:10:19:26:e5:0e:2d:ab:58:bf:aa:5f:aa:f5:0f:a1:84:5f:
c6:55:22:b3:2a:65:ce:0e:1f:11:ba:b5:5b:a0:c1:8f:d4:7f:
23:c6:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:45:25 2026 by rpki-client