Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: A6hCKGKJm3j+3JYMeTxYAvwKD1UuzivNGxeqOQ4JZow=
Subject key identifier: 48:9C:36:8C:7C:F2:08:F0:FD:28:52:BD:06:4A:07:BC:0F:A4:1F:50
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01A08A8D82A6DC5E2A1C1FC51B84636287E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 09:02:04 +0000
Manifest this update: Thu 10 Sep 2026 09:02:04 +0000
Manifest next update: Fri 11 Sep 2026 09:02:04 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: gMPy6jw5LBU1ANIM8aW644t213Au3lMCEnbdK0F0XcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:82:a6:dc:5e:2a:1c:1f:c5:1b:84:63:62:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Sep 10 09:02:04 2026 GMT
Not After : Sep 11 09:02:04 2026 GMT
Subject: CN=489c368c7cf208f0fd2852bd064a07bc0fa41f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:b5:3b:1b:93:2e:fa:b9:65:cc:99:a7:fe:
86:89:a0:0d:51:4e:59:a1:4c:af:07:0b:c6:39:e7:
30:20:fb:ba:fc:a3:70:5b:96:40:cd:2a:e1:86:b8:
4f:69:89:9e:04:01:39:b8:d5:a3:92:42:31:14:ff:
b8:ec:b1:a7:d1:82:ac:d8:49:22:fc:d8:b8:fe:df:
77:d3:f6:5f:03:8a:34:05:1a:16:8f:45:e3:e1:92:
b1:30:53:2a:11:fc:7c:f6:0c:64:57:2c:f6:11:e1:
7c:a3:29:9d:14:8b:fa:ea:af:0d:19:75:1c:49:21:
b5:cc:4b:a9:ba:72:2a:dc:7b:c0:3c:9c:25:fb:c1:
86:ed:84:6a:d8:3f:98:5e:69:12:72:e5:76:da:fb:
15:b2:57:b6:7f:50:91:61:21:f8:f4:bb:de:5a:f0:
ee:c9:f4:ab:9d:76:8f:ce:df:1b:c0:3e:6e:0e:6f:
06:b9:a0:26:2e:16:a5:13:79:1b:fe:84:88:d3:9f:
36:d8:c9:ff:5c:1b:d6:d8:dd:28:27:72:b2:cd:0a:
5f:1c:69:b3:c4:85:f0:e4:a0:37:6d:01:1d:17:cd:
69:94:f2:2b:6c:4f:ed:f1:69:0e:d6:a0:f4:fe:75:
48:ae:55:4c:c9:71:c8:d3:9e:b4:d1:48:44:28:dc:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:36:8C:7C:F2:08:F0:FD:28:52:BD:06:4A:07:BC:0F:A4:1F:50
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:d5:d5:80:81:6b:e6:a6:29:be:b3:cb:8c:33:62:3b:81:
37:b7:75:9b:45:76:5e:c8:f6:5a:5a:12:02:12:5f:b0:f4:b6:
51:61:58:bb:4e:a9:79:9b:62:54:06:be:23:de:38:a6:49:06:
a4:f9:2a:ed:29:d7:12:4b:49:7a:85:63:de:a2:87:90:af:cc:
7d:a5:56:f2:84:15:d1:8f:d5:9f:3f:05:a1:eb:47:c0:46:0b:
0b:2d:2b:d5:28:a6:29:a1:29:5b:5a:51:7b:d5:3f:62:c5:c8:
78:da:d7:5f:e1:bd:08:71:23:bd:2f:eb:e1:3c:75:86:f1:23:
f7:2a:a4:16:62:5c:5c:68:01:35:52:16:77:ed:e1:23:ad:24:
5c:f3:fd:f8:53:50:04:57:f2:9e:00:b1:e2:67:b8:65:d0:b8:
38:b8:f1:0b:6f:c1:18:a4:86:d7:71:d8:01:35:eb:92:3a:6b:
dc:ed:8c:26:9b:44:30:ac:ed:18:68:af:b8:1c:c6:f2:49:e6:
f7:91:eb:27:d3:77:9d:28:92:4b:50:97:64:6c:ac:18:98:72:
35:be:98:ad:c3:9d:3b:43:19:14:8c:2a:82:d6:6c:80:cd:b8:
bd:29:10:cb:df:d4:a2:c0:62:3d:85:99:22:a5:a2:bf:fe:4b:
a0:aa:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:16 2026 by rpki-client