Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: gRS7GHHn32N02yJttEYZvKUZJV9bZhypk1jTlVGnzOw=
Subject key identifier: 89:16:54:C7:41:26:36:F8:34:9B:3B:8F:0E:A3:7F:56:57:E4:48:45
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 01A04129C601E25BA737051CAFDE3C406E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: 010B
Signing time: Thu 27 Aug 2026 03:00:51 +0000
Manifest this update: Thu 27 Aug 2026 03:00:51 +0000
Manifest next update: Fri 28 Aug 2026 03:00:51 +0000
Files and hashes: 1: 8cev6T1zaLrh6Jk14ObD9NyakTQ.roa (hash: to4V+vWxwt5dlu/ctWHIBNuLYFM8RdFNyqXTXudedwM=)
2: Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa (hash: OsSZawzfUresZMVh8cgGQhsAKGK/Kk+rAbkVCPwwXCQ=)
3: P28NAR-gwo3DWhrCfUDsje3yy5M.roa (hash: Rg/sbFjmtTahpzYygmbXRtVR2XC/RUmlzbY7QG8k+LY=)
4: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: Sy3A3Ejqz3j4kj9K7Rz9dQp+GCNPIaIkoaBDt4GT5fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:c6:01:e2:5b:a7:37:05:1c:af:de:3c:40:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Aug 27 03:00:51 2026 GMT
Not After : Aug 28 03:00:51 2026 GMT
Subject: CN=891654c7412636f8349b3b8f0ea37f5657e44845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:d9:d7:37:62:71:cd:8f:36:b6:6d:79:1c:
17:c9:7c:d3:7c:13:c1:4a:7d:ae:c2:36:83:cd:17:
b7:f7:75:32:14:8d:f4:d1:06:b6:d1:c2:ab:62:12:
02:2c:fa:1e:03:fe:db:f6:80:28:92:94:b9:90:74:
9e:23:26:bb:99:a3:a6:88:0a:0a:63:81:fa:83:20:
e8:e1:85:b3:f9:60:23:7a:01:a5:1e:eb:76:13:f0:
00:0c:9b:be:cb:96:f6:1f:99:6f:bb:37:01:25:43:
8c:ae:90:2f:38:bb:53:dd:7c:0d:a5:f6:07:dc:fe:
6e:ff:67:23:ef:a9:b9:d1:83:15:4d:39:16:f9:3d:
59:5c:9f:62:39:bb:42:9d:8d:44:01:d1:0c:4e:08:
43:90:5c:22:58:40:93:ec:0a:eb:a6:10:4e:46:b0:
62:29:8c:1f:3e:af:9f:a0:27:83:d5:08:34:f3:6e:
25:9c:6a:59:8a:9e:f3:fd:5c:ca:7a:31:b5:ce:ee:
50:83:15:dc:d7:4a:6c:5c:de:f8:34:49:f2:bb:05:
33:20:7a:db:44:d6:e0:a3:ba:eb:ce:37:58:b8:f1:
7d:88:ca:96:e4:3a:a8:f1:52:dc:1b:48:cd:08:12:
60:1a:93:f9:07:b3:09:82:87:d1:f4:39:e9:7d:9c:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:54:C7:41:26:36:F8:34:9B:3B:8F:0E:A3:7F:56:57:E4:48:45
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:76:30:00:43:b4:00:cd:6d:83:f7:56:95:12:b2:09:d0:
33:54:8f:c0:20:73:fe:4e:56:19:27:2e:05:93:e6:7a:45:c1:
09:e6:66:25:a9:33:c1:ae:92:8a:4f:cd:50:68:55:9e:d9:2b:
ac:ab:20:18:d2:1f:07:82:9c:a2:96:94:2e:a4:c6:12:17:b0:
10:83:e1:08:43:92:7b:c3:d1:9f:96:5e:ba:39:c6:e3:34:ba:
5f:f2:65:4d:25:69:bb:51:ae:98:30:d4:ef:04:09:11:ce:50:
e5:1e:c0:5c:40:e9:d0:70:e5:8a:ae:08:2a:1f:b3:3b:5d:10:
95:5d:9c:9b:08:f7:d2:d6:01:a7:ea:0e:a1:de:b6:c9:2c:bc:
51:2b:8f:4f:d1:a2:1e:68:05:74:59:c4:c1:e7:e2:7d:78:9f:
a8:6d:05:d9:52:2b:06:a7:0c:c7:2a:0f:54:9e:17:ff:11:91:
f7:e3:ef:62:03:37:fb:32:ff:1f:72:50:70:d0:8a:87:64:fb:
4c:ed:89:28:c7:6e:e1:3e:5e:00:d3:e2:9e:c2:4a:22:49:b8:
43:cb:9f:fa:fa:9c:89:cd:d0:91:13:13:84:c1:08:dc:af:2c:
62:05:bb:ab:cf:ae:f7:09:1a:a2:47:31:a5:16:eb:5c:f7:80:
b7:fc:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:01 2026 by rpki-client