Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: qGNWJlG4wQMzXK46jo62gH93XOejzlVpfaal5RXNg5A=
Subject key identifier: 71:33:7A:80:93:7B:1B:E6:DD:63:DB:A3:A5:36:A4:A0:88:B9:72:87
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 01A1347EFE4A37094DB991E8CA773486C71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: 0189
Signing time: Tue 13 Oct 2026 09:01:40 +0000
Manifest this update: Tue 13 Oct 2026 09:01:40 +0000
Manifest next update: Wed 14 Oct 2026 09:01:40 +0000
Files and hashes: 1: 8cev6T1zaLrh6Jk14ObD9NyakTQ.roa (hash: to4V+vWxwt5dlu/ctWHIBNuLYFM8RdFNyqXTXudedwM=)
2: Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa (hash: OsSZawzfUresZMVh8cgGQhsAKGK/Kk+rAbkVCPwwXCQ=)
3: P28NAR-gwo3DWhrCfUDsje3yy5M.roa (hash: Rg/sbFjmtTahpzYygmbXRtVR2XC/RUmlzbY7QG8k+LY=)
4: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: gTXuEsPviXaKSoHcNJ1fHcISe0Y8nO+2EcGGlvjEC6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:fe:4a:37:09:4d:b9:91:e8:ca:77:34:86:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Oct 13 09:01:40 2026 GMT
Not After : Oct 14 09:01:40 2026 GMT
Subject: CN=71337a80937b1be6dd63dba3a536a4a088b97287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:3b:a1:fe:b5:ff:2d:55:cd:12:9b:9f:09:
36:be:f9:b5:62:34:e8:21:68:4a:69:69:f6:1d:8c:
56:54:02:d8:a7:77:d8:d4:98:d2:bb:d1:6d:b1:3e:
5a:98:fa:34:45:5f:35:2e:52:48:65:e4:50:a7:55:
37:2b:ea:93:39:bd:40:c5:e9:34:87:76:0c:4e:47:
50:83:de:21:2b:3e:b4:3c:62:50:19:8b:5b:e9:9a:
69:44:cf:da:d1:79:6b:6a:14:dd:2d:89:d0:91:ac:
10:bd:de:61:59:4b:f4:6a:13:d7:e1:5e:b1:2c:12:
ce:a8:6b:0a:8c:67:76:67:04:aa:d6:38:f5:98:5c:
04:ff:f0:8f:45:4c:c5:70:81:f9:54:e2:e8:bb:67:
77:8f:58:2e:33:68:41:90:f8:69:e0:e7:26:e1:e8:
f2:da:a4:37:48:7f:ed:b9:ab:df:9a:fa:76:fd:43:
fd:59:ba:58:96:c9:8e:e0:35:6d:f8:24:93:07:f6:
d6:f2:f5:1d:c7:f3:66:fc:db:d9:bf:8d:13:7a:7f:
34:50:74:26:24:6e:72:7a:2e:4c:7d:9d:10:03:e6:
de:10:30:fa:ff:dc:1f:fe:3a:77:22:34:96:f4:91:
81:b4:7a:42:52:79:df:d2:36:b8:89:4d:ac:f6:bc:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:7A:80:93:7B:1B:E6:DD:63:DB:A3:A5:36:A4:A0:88:B9:72:87
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:c0:8d:1a:0e:ee:99:0e:b6:f1:c9:31:5e:30:a4:5d:d7:
16:c1:05:8a:c0:15:17:de:b8:38:dc:05:fd:20:3a:f0:5a:ec:
91:21:76:b1:c4:19:a0:14:c6:93:76:c1:f8:85:85:1b:fc:30:
3e:57:70:4e:4b:ae:90:52:84:76:bb:0f:85:12:ec:d2:89:14:
25:51:a4:b8:77:f7:fc:a9:8e:8c:e3:6a:af:93:36:58:3b:f8:
d2:4b:eb:cc:5b:1e:95:8e:77:1a:98:3a:47:c7:e5:82:93:16:
ad:98:d5:a1:85:32:ad:eb:91:17:46:d7:17:6c:a4:7e:26:55:
97:ef:c8:6a:af:62:2f:15:8d:92:c3:9c:4d:bb:79:8c:d1:ee:
c4:1c:c3:c7:21:49:0b:b4:58:95:bf:1f:d7:53:71:46:76:c8:
2f:d9:d4:1e:38:5c:35:b6:ea:8c:e8:2e:5c:07:25:8a:77:a8:
61:08:67:ee:3b:11:0a:65:f4:90:33:9f:ae:66:06:8e:5c:59:
d9:a7:4c:fd:de:4a:c0:50:ef:8f:21:de:ec:80:a1:dc:1b:c0:
8e:6f:03:36:4d:6a:f9:66:ca:63:a6:6a:9c:bd:e0:07:90:c5:
54:d0:52:cf:e3:83:25:70:5a:9d:c7:5f:34:f1:98:02:e5:ad:
01:e1:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:33:03 2026 by rpki-client