Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: Gxj3DPz+H3Cypm4BTj+SZIzvT8jykYEXMg08W9oKAGI=
Subject key identifier: C5:5B:B9:E3:AC:8B:F0:44:29:50:FB:68:D0:A2:8C:E1:5B:57:8F:EF
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 01A08B689BD553ABB0ECB425EE47DF07151E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0B76
Signing time: Thu 10 Sep 2026 13:01:23 +0000
Manifest this update: Thu 10 Sep 2026 13:01:23 +0000
Manifest next update: Fri 11 Sep 2026 13:01:23 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: 8tVx5oxGDs7jppyiHdXFZ/VUhnyJy1JYsKklLZqmiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:9b:d5:53:ab:b0:ec:b4:25:ee:47:df:07:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Sep 10 13:01:23 2026 GMT
Not After : Sep 11 13:01:23 2026 GMT
Subject: CN=c55bb9e3ac8bf0442950fb68d0a28ce15b578fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:d9:11:5d:cd:ae:cc:c6:ee:e3:08:e7:07:
5c:c3:49:a9:d1:4b:55:60:c2:5e:3a:92:14:0f:d2:
a4:aa:59:15:ad:de:ac:25:17:f8:f5:d8:ce:9a:23:
08:79:0a:f1:97:76:56:45:32:c0:17:44:3d:3b:48:
d1:e4:a6:cb:4c:f4:05:24:0f:90:cd:23:d0:eb:32:
88:30:6e:58:2c:e2:73:6e:d5:8f:ca:49:8b:d9:48:
5d:71:6f:42:a8:6a:a6:f0:02:a5:ab:2f:72:90:6c:
a2:47:22:8f:3d:53:bf:65:82:be:69:bc:4f:0c:59:
94:0b:cb:0e:73:b4:c2:f0:5c:2f:a7:96:24:a1:15:
45:e4:dc:de:c2:f9:2e:76:7c:1a:2a:06:9f:76:cc:
3b:04:5c:44:fd:b5:50:df:9a:95:23:c9:03:5a:24:
0d:3e:88:e7:25:52:3c:55:e5:ab:2a:99:ca:c1:f2:
4d:8b:c9:d7:44:04:a4:2a:05:79:cc:fa:e2:ef:eb:
14:3f:70:ba:43:64:9b:f4:a2:fa:28:21:41:51:d1:
20:fe:57:7c:69:d7:0f:5a:88:f5:4f:66:34:1f:8c:
4e:66:d1:f7:3b:e3:43:6a:70:d0:3b:fc:01:d0:5d:
ae:58:cb:b9:d8:e4:c5:b8:2f:f4:09:86:15:ba:c1:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:B9:E3:AC:8B:F0:44:29:50:FB:68:D0:A2:8C:E1:5B:57:8F:EF
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:a1:99:cf:5b:f5:b7:f9:9a:6a:82:0b:cb:aa:ce:f8:86:
24:f6:21:c5:68:43:3a:9e:e1:fb:f6:4c:8b:c4:32:a0:cc:7b:
23:12:f0:f9:11:ef:7e:3d:02:4c:20:f8:87:c3:c4:ea:dc:d6:
52:0a:a6:2b:69:b1:24:5d:a4:68:bd:89:86:5b:6f:0c:ab:3f:
65:50:86:15:67:54:20:6e:f1:70:b0:a9:4a:c7:ae:d1:20:4c:
a5:06:ec:cf:b5:fe:8b:04:64:d0:49:8d:f3:7c:82:df:cc:3e:
ee:09:f1:e6:74:d8:4c:21:80:52:8e:2f:ab:32:c4:7d:c4:6a:
aa:40:51:2a:ec:7c:ca:45:99:88:47:b4:c3:f3:e0:14:14:6e:
7e:48:00:f8:aa:40:e6:d9:1d:e0:be:8b:c7:c3:b3:47:41:fd:
ba:f8:f2:59:cf:60:3e:a8:81:06:a3:db:68:e7:fc:a3:ef:90:
f1:f7:e0:f3:87:f2:39:c5:b2:47:a9:78:c7:95:46:25:e0:6a:
cc:8e:f6:59:4c:9d:54:4f:57:a3:c1:ef:d8:99:13:eb:d7:36:
f3:13:b8:ea:0e:bf:63:28:07:3a:80:0f:d2:e7:80:96:78:15:
97:88:8c:c9:fe:ef:d4:8e:a4:08:e9:30:db:a7:0b:b5:30:c7:
b3:f1:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:11:40 2026 by rpki-client