Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: x0EwIqlAQ44KQ+qCkIpN+zxCIp0zrR6xDtCQ9aOvFXI=
Subject key identifier: 21:7F:2E:2C:79:08:29:E9:B6:C9:FF:39:50:31:17:54:51:FB:29:EA
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01A1A6A6202B9F4C4D97948FD9449C6AB6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 068E
Signing time: Wed 04 Nov 2026 13:01:07 +0000
Manifest this update: Wed 04 Nov 2026 13:01:07 +0000
Manifest next update: Thu 05 Nov 2026 13:01:07 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: u7ab091Rjsj4xNP9M2o12LuMDpWAFsNMa18pAWHpr2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:20:2b:9f:4c:4d:97:94:8f:d9:44:9c:6a:b6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Nov 4 13:01:07 2026 GMT
Not After : Nov 5 13:01:07 2026 GMT
Subject: CN=217f2e2c790829e9b6c9ff395031175451fb29ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:26:e9:61:f7:c9:da:e8:80:58:1c:1c:f8:
d8:85:9d:94:05:98:d1:ca:8a:8d:4f:73:7e:94:4b:
e0:fa:cd:45:f4:1b:d8:ce:c4:9d:a3:44:1f:f7:22:
1b:62:51:d1:15:dd:3e:a1:cb:ec:19:e5:d2:c5:75:
5f:cd:c6:55:87:90:c6:39:40:fa:15:05:08:fb:5f:
2c:e7:6e:d3:2e:ba:77:a2:ad:e5:43:de:dd:76:6c:
3d:12:5e:a0:da:d2:2b:f5:18:c4:6f:01:b9:99:6e:
04:2f:42:f9:de:74:46:9f:fa:64:7e:ee:ec:9a:53:
40:4a:89:df:79:21:e1:3d:d7:ac:a4:c5:6b:ed:57:
97:79:76:b9:92:4f:4b:38:8e:3c:3e:ff:1d:61:b4:
f4:b9:8c:19:62:77:9b:36:f0:02:b5:cf:e1:6f:93:
91:76:86:0f:97:86:26:c2:59:1a:05:c2:49:32:b5:
ac:6a:40:f3:9f:c3:cf:be:41:a2:14:f5:97:21:d1:
ac:b1:40:3a:d4:29:a3:a2:d3:2a:38:89:29:64:3e:
cf:8d:d9:87:d1:cc:a6:44:d6:58:82:17:4c:ec:f4:
5f:ce:df:41:67:f9:51:d9:be:11:c3:ab:b0:d1:cf:
d2:cd:d2:20:52:27:3d:ef:15:d1:ea:0b:32:22:c5:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:2E:2C:79:08:29:E9:B6:C9:FF:39:50:31:17:54:51:FB:29:EA
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f9:a4:1e:e7:39:89:d1:d5:19:8e:f2:4a:c2:28:14:80:9d:
78:83:9b:82:d5:3a:3f:ba:0b:a1:6b:0e:c0:2e:9f:c2:b6:4e:
2e:74:5c:0b:67:c5:05:2a:8b:8c:7c:09:3e:94:ae:cd:6e:dd:
86:0a:8f:0b:41:dc:7b:61:0a:c4:7b:15:70:d7:c2:04:ec:ea:
6a:cc:1a:cb:fc:18:82:44:44:58:b5:fd:cc:7c:25:3c:ec:cd:
bc:dc:9d:5a:ae:dc:ba:1c:e2:d8:a2:f2:65:65:28:d6:54:0a:
78:75:98:49:2f:9d:fe:e2:cc:f8:5b:a7:ee:c5:b1:04:aa:d8:
1b:84:88:43:88:24:81:e9:85:b0:c6:e8:87:55:ca:71:e7:4c:
67:82:0e:68:25:16:b8:17:2e:4d:95:08:6f:16:60:58:45:e4:
2e:7c:f4:f8:38:5d:06:e6:01:aa:2f:5c:8e:1a:01:cf:b8:51:
19:8f:77:05:6d:fe:f7:02:f5:5e:62:62:8e:69:97:55:b5:07:
38:d5:8c:e5:9e:e2:1f:60:16:4d:ae:dd:36:6c:5f:f6:f6:a5:
e7:49:4c:a4:a4:aa:76:9b:9e:ed:38:e5:a2:a3:1e:cd:cb:3b:
4a:31:27:52:74:4d:5b:27:cb:a0:ed:b0:35:ae:25:e5:26:5a:
6b:8d:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:30:45 2026 by rpki-client