Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: ePNMoN9PXnHu+UH2W+NWYLH+QicdyEBZqQbaU2At0T8=
Subject key identifier: 49:20:8A:01:BA:C4:42:3A:AF:15:1F:2B:29:3B:04:9B:2D:7E:A3:D4
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01A08AFAAC0C6F89F11BF95919B1EB139F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 11:01:18 +0000
Manifest this update: Thu 10 Sep 2026 11:01:18 +0000
Manifest next update: Fri 11 Sep 2026 11:01:18 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: O/Xfif0xqwaEslMp1KaLto4FOdUOMF2f/1sOqpnji68=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ac:0c:6f:89:f1:1b:f9:59:19:b1:eb:13:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Sep 10 11:01:18 2026 GMT
Not After : Sep 11 11:01:18 2026 GMT
Subject: CN=49208a01bac4423aaf151f2b293b049b2d7ea3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:e9:4d:41:9c:21:6a:47:0b:ff:e4:40:9a:
b3:8b:ab:1c:4f:47:dd:f0:f0:f2:ca:fd:e0:e3:c8:
10:55:2d:74:5a:c6:20:82:38:78:a3:a2:b7:98:79:
b7:d7:ad:7c:40:31:eb:42:22:26:32:a8:fe:64:43:
e3:e4:5a:95:20:19:1d:d5:3d:09:be:f6:e2:be:44:
51:12:b9:27:60:2c:77:06:45:c9:43:ef:8f:4f:0b:
91:f0:0c:7c:70:e9:00:94:f5:ab:8a:87:e3:ab:a0:
bf:15:7b:eb:e3:92:9b:f1:87:54:84:02:c1:55:85:
c4:7c:d8:bc:59:3b:00:42:de:65:a1:46:cb:8d:47:
5c:83:4e:92:67:e1:31:74:d9:aa:58:53:fc:c0:ad:
5b:ec:8a:1f:2b:78:1c:ce:73:70:8c:e2:e3:3a:01:
8e:d7:fa:4c:91:a8:35:57:26:ce:17:50:ed:ba:03:
30:d8:a1:ce:42:58:f0:c5:42:c3:98:d8:4c:1b:b4:
2b:e5:12:96:46:bb:a4:41:05:61:1e:a2:a9:0f:20:
47:6b:5f:1e:fb:22:ba:21:ea:98:08:bf:16:84:7b:
1a:97:10:70:74:37:25:5e:7a:bf:f4:7f:31:f2:43:
f4:2c:f4:43:a4:34:bb:c4:97:08:61:5c:ed:64:1a:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:8A:01:BA:C4:42:3A:AF:15:1F:2B:29:3B:04:9B:2D:7E:A3:D4
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:31:d8:8f:ca:a8:3f:36:5b:1a:5e:9b:5c:17:dc:90:2e:
d6:46:d9:07:f0:09:f7:16:be:b3:03:c1:00:2f:c3:33:1c:e9:
ec:4f:53:04:cd:54:ff:dd:94:7c:df:85:a6:83:48:ee:c3:e0:
e7:72:a9:5b:02:1c:f1:57:9f:20:71:58:ca:40:43:ec:00:e1:
8a:01:64:63:d3:d8:80:46:a2:43:c3:57:b4:af:55:a8:2c:29:
e9:de:a6:66:70:1a:54:93:24:5c:c5:43:90:7c:3c:68:a1:ef:
22:2c:12:85:22:c4:00:3c:e2:95:76:7d:33:ca:bb:0e:80:77:
76:60:9c:3d:1e:2c:49:bb:ac:6f:13:31:17:a3:72:f1:1f:16:
5f:e7:c8:7d:5a:25:8f:65:7d:fe:1f:d5:e7:2b:ce:74:30:e2:
a2:62:e0:e0:4d:b4:15:be:41:6f:27:96:b6:9b:74:a0:0a:c3:
6f:23:ca:51:ff:db:52:a0:d2:ea:83:50:42:71:c3:e2:49:84:
67:69:66:ca:17:67:51:00:01:1e:1f:65:37:ff:f8:4c:3a:08:
3f:86:9a:57:e3:12:dc:e9:6b:c6:05:6b:e6:68:d3:2b:fa:e6:
be:d9:81:66:ac:1b:5f:7c:24:23:16:f4:38:03:64:54:ba:4b:
58:d7:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:36 2026 by rpki-client