Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: 4c/MAdr98Ddq4Ol36HzrjZ/1xLpxLAsPnaZCwsPtf0M=
Subject key identifier: 98:FE:28:4D:81:3D:5A:92:17:08:96:4D:5E:C1:AD:3C:75:60:7B:85
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 01A177039199870E23CE7E9B995CD9CB23A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0BF0
Signing time: Mon 26 Oct 2026 07:01:24 +0000
Manifest this update: Mon 26 Oct 2026 07:01:24 +0000
Manifest next update: Tue 27 Oct 2026 07:01:24 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: yPinBE0tQexyghYU2IdSlrGO5B0Es7/Gc4nNiZp/aZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:91:99:87:0e:23:ce:7e:9b:99:5c:d9:cb:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Oct 26 07:01:24 2026 GMT
Not After : Oct 27 07:01:24 2026 GMT
Subject: CN=98fe284d813d5a921708964d5ec1ad3c75607b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:6b:d2:03:7d:55:9c:2b:fd:e8:a4:2c:c4:
f6:a5:86:85:23:22:fd:12:27:d3:0c:59:35:c9:6a:
26:c3:cd:41:48:f4:b4:fc:71:b9:05:38:4f:77:5a:
df:07:3a:ff:0f:d4:b6:93:a2:c0:77:2b:e4:7e:a8:
ae:de:21:80:d1:13:88:a5:1f:ee:e1:64:d0:fa:1a:
bc:31:49:ec:79:52:35:44:e7:1b:29:d1:6b:55:92:
db:18:6c:ed:e8:39:bc:16:aa:5d:89:2f:fb:a2:23:
49:ed:0a:0c:8a:9b:c2:b3:c0:4d:58:75:2b:78:cc:
60:f6:f1:93:11:f4:58:40:b2:59:97:76:fb:f9:bb:
5f:4a:b0:85:c8:11:31:d0:f3:98:f4:7b:a7:28:cc:
d9:5a:e1:04:ba:ae:39:c3:22:2d:c8:eb:5a:5f:8f:
e0:27:8e:8c:ea:2c:2e:fe:98:9c:af:96:c6:d5:1e:
2f:7e:1e:0d:69:9d:7f:c3:e3:53:be:ed:49:f8:91:
7e:21:47:f8:a9:56:7a:bd:53:89:27:a9:db:08:12:
0b:21:8c:29:8f:9e:90:08:9b:73:69:4d:87:74:f7:
e1:08:55:a5:ed:ea:5e:0e:64:53:ac:7e:22:20:1a:
26:18:33:6e:91:89:ab:cb:dd:2d:12:c1:69:16:9b:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:28:4D:81:3D:5A:92:17:08:96:4D:5E:C1:AD:3C:75:60:7B:85
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:81:59:d5:ae:25:c7:be:e7:aa:8a:55:5d:4b:bc:2f:a8:d3:
2e:fb:22:03:2a:c5:48:94:31:db:98:07:61:51:1b:f3:35:13:
90:a5:58:20:83:15:12:2c:ad:b7:ce:c2:70:f7:7b:f5:88:1f:
d3:84:c6:31:c0:14:1a:8b:79:7c:7e:06:53:01:4e:cf:a8:20:
87:55:4e:b6:4a:6c:df:98:88:bc:e6:17:58:87:22:37:5a:bd:
3a:34:75:60:2d:76:c5:fb:fc:aa:8d:48:65:f4:a1:91:69:8c:
a0:2c:58:70:36:dd:55:47:b2:28:a4:fb:7c:d1:d8:48:57:06:
d7:04:fe:75:83:d5:fe:ef:d9:92:ed:a6:1a:0b:f4:b5:45:07:
b2:a0:6c:35:e6:12:57:b9:b1:32:03:dd:0b:f6:ca:2d:3c:7d:
43:eb:76:32:77:f3:55:86:dc:c1:55:50:69:c0:2a:0f:51:6a:
e2:89:0a:c3:e8:ae:cb:db:fd:ba:ea:fa:11:f4:16:e1:59:97:
b7:3f:9f:41:56:15:83:25:c4:5e:e2:4c:0d:b2:9a:c1:d9:d0:
3f:b9:0d:d4:3c:9d:90:5f:cf:1d:a5:16:e2:cb:0a:1f:5c:92:
0b:f5:a9:d6:e4:d5:46:5b:27:29:39:a9:84:0f:ec:23:be:73:
64:6f:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:39:50 2026 by rpki-client