Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: XZJaAEyKvTqipLsBYuh5MfAY/8K5J9h63sXor7HxfgE=
Subject key identifier: BF:9C:DD:F7:E6:24:AE:25:5E:DE:AC:A7:E5:53:89:03:00:E6:B7:36
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01A0B53FD42202A2F0DDD9A0782098F889A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 0611
Signing time: Fri 18 Sep 2026 16:00:53 +0000
Manifest this update: Fri 18 Sep 2026 16:00:53 +0000
Manifest next update: Sat 19 Sep 2026 16:00:53 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: GKxMxJrZLoAW0THfftsen0nTZbiW/F8PPQ5BZ866zVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:3f:d4:22:02:a2:f0:dd:d9:a0:78:20:98:f8:89:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Sep 18 16:00:53 2026 GMT
Not After : Sep 19 16:00:53 2026 GMT
Subject: CN=bf9cddf7e624ae255edeaca7e553890300e6b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:52:e2:5f:37:1d:1e:2f:eb:73:d0:fa:5e:
ce:77:58:5a:d2:b2:3a:62:1e:ce:c8:04:54:73:24:
51:45:90:68:92:2d:7f:6f:9c:23:2f:e7:2a:42:f5:
73:ad:d0:51:25:b1:cb:16:b6:72:2d:ff:16:8a:78:
48:ad:6a:18:b9:58:c5:83:f3:4e:d7:86:01:78:79:
eb:07:dd:33:af:7b:85:19:78:a4:28:22:f2:21:e5:
85:95:20:c7:89:19:ef:ef:a3:3a:55:6c:f4:ea:90:
ec:ea:92:29:22:b1:f5:c5:e7:e7:ed:db:d8:5e:b7:
5e:12:c9:67:d9:a6:d9:59:ef:21:2b:5e:0b:41:fa:
59:87:77:1c:9d:a7:9b:95:57:78:0f:21:84:1b:96:
f4:76:25:38:f0:c1:f9:3d:1e:c2:6b:60:a3:ed:ea:
d6:e4:81:13:08:a8:0d:22:36:bb:eb:35:4f:79:62:
98:56:4e:1f:88:30:0d:5a:63:e3:af:87:c1:ba:6d:
77:e3:af:cd:55:d0:56:09:bf:b3:67:32:e9:ef:b1:
80:70:c0:30:1a:a7:5e:3c:78:52:46:dc:6c:f8:62:
a2:e3:73:91:af:3e:d1:d6:d1:02:1d:a9:34:47:f7:
57:c2:70:ea:69:99:36:41:69:c8:b5:8e:a0:bc:e2:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:DD:F7:E6:24:AE:25:5E:DE:AC:A7:E5:53:89:03:00:E6:B7:36
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:10:d5:24:7b:83:03:fa:35:16:ed:85:40:c8:11:aa:ff:
a2:00:f5:b4:90:10:02:4a:e5:5f:ea:69:28:34:c4:32:96:cc:
2e:63:a6:6f:b5:ac:31:6b:b1:a4:af:1c:3e:6b:fc:36:53:8c:
22:28:a8:54:c8:17:d9:3c:60:72:e9:77:ad:98:39:c7:c2:25:
b7:d9:38:26:a6:3d:cc:96:4a:44:bb:c9:69:99:60:d1:d5:29:
17:89:c9:93:1c:a8:a0:e0:5e:00:d0:3b:c5:5f:dd:87:aa:33:
64:ef:55:95:d4:6a:09:91:83:6a:5b:91:f2:99:47:9d:99:98:
95:58:40:92:f7:b6:1c:9a:9f:fa:78:20:f5:b1:01:cf:3a:83:
a9:14:e9:48:2f:23:b7:db:56:37:42:83:89:28:1b:4a:b3:d8:
9c:d2:ad:e9:46:da:3a:a8:d6:3c:08:37:59:43:85:9a:9c:52:
53:67:2a:32:61:f1:41:0d:e8:37:d3:36:f6:14:b4:58:6b:a1:
eb:51:99:e9:83:80:8e:d9:02:2e:fd:84:e6:02:6d:63:79:56:
0d:80:2e:e4:75:4b:4e:2c:cf:15:4c:46:bc:30:49:6f:d7:e9:
42:20:aa:25:36:9f:e5:b5:d3:a4:5b:db:b8:03:8f:43:35:23:
0a:3d:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:48:34 2026 by rpki-client