Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: 0dp3t6+WehWYIrvZe3Nx16tq+ZIZlnCRt055a2DP+as=
Subject key identifier: 4B:6E:0D:33:88:24:A5:A1:C5:D0:D1:AE:30:2A:A0:D7:59:04:1F:CC
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 01A08CE870087A0D68B868E60FB04538622C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 20:00:38 +0000
Manifest this update: Thu 10 Sep 2026 20:00:38 +0000
Manifest next update: Fri 11 Sep 2026 20:00:38 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: GBxuvaBUucU+9qMCI1qjq64q8BLFjM//XLR2/IKaw8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:70:08:7a:0d:68:b8:68:e6:0f:b0:45:38:62:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Sep 10 20:00:38 2026 GMT
Not After : Sep 11 20:00:38 2026 GMT
Subject: CN=4b6e0d338824a5a1c5d0d1ae302aa0d759041fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:ea:77:6f:16:38:0f:21:a8:ec:51:86:c8:
b5:df:40:ea:10:1b:84:88:29:8f:58:60:99:01:20:
bf:35:58:f7:31:0f:10:8d:4b:c5:de:3b:7c:88:f8:
1a:97:9d:e4:3e:48:ea:a9:93:56:e0:a3:30:fa:03:
d0:b1:c0:41:45:11:32:99:20:a8:04:21:34:23:05:
d9:2c:01:45:14:ad:bb:a5:3d:04:61:47:41:69:8b:
e4:99:b5:c9:2f:c6:5f:33:8b:94:1d:78:c5:f3:42:
5a:49:be:97:f3:96:59:52:77:f1:f3:d5:54:b1:f6:
99:17:c4:c0:c5:fb:8b:d9:fc:96:54:ba:31:c0:22:
d8:79:e7:c1:e8:a9:47:07:8e:50:3c:1e:0f:2d:89:
dd:64:9f:c1:f6:4e:18:83:3e:2c:17:d8:e5:70:f9:
60:7b:4a:50:d4:e9:cc:20:ab:d9:af:91:0a:7d:b6:
82:ea:03:06:1e:d8:42:de:89:97:67:65:84:89:a0:
b5:7f:df:ee:df:b3:0f:ba:6d:cd:f4:65:5c:70:47:
81:7f:3f:96:e6:28:0f:17:7a:d0:d7:5a:08:65:b6:
e9:a0:b9:30:39:e6:1e:a0:ee:d0:34:e0:f0:c8:81:
ea:95:3e:f3:10:59:c7:44:3b:3b:a0:e8:8c:1f:d3:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:0D:33:88:24:A5:A1:C5:D0:D1:AE:30:2A:A0:D7:59:04:1F:CC
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1f:20:93:66:8f:2e:af:d0:1f:92:ca:41:b2:ab:a3:9f:72:
20:df:a0:df:de:f1:6e:aa:41:c7:fa:64:63:88:be:94:a0:1f:
dc:d9:50:23:04:20:aa:51:a8:70:59:2c:c3:59:f8:1e:32:61:
82:f8:51:75:79:ff:ec:b4:79:f9:b3:29:7f:fa:12:06:04:ce:
48:12:f1:d4:69:a0:5a:9f:b1:44:d2:8c:ab:d6:1b:5e:78:e0:
c4:fa:1d:6f:46:06:bd:e6:29:d6:00:b4:2c:cd:ab:6b:70:9c:
57:05:b8:4a:c0:41:3c:0a:3a:b5:8b:3d:75:a6:8b:ff:e9:39:
ea:c2:b3:4d:8b:4d:39:f9:9a:96:c8:ea:f7:4f:01:81:31:d6:
dd:db:6d:b5:ab:8f:b2:d3:ef:a2:60:9b:b6:eb:82:a7:09:72:
d6:9b:8f:7c:1e:df:fa:e2:b1:16:33:f1:a4:64:6c:ee:4a:4b:
c8:40:cb:5b:e1:bd:07:63:0d:c2:eb:6d:c3:ea:f1:04:7b:3c:
e3:ab:a4:1f:a8:67:49:c0:c3:4c:90:84:54:de:d5:48:d1:ee:
c8:06:a6:99:d3:79:5a:a1:d2:2f:24:d5:f7:5f:c0:93:95:25:
d3:75:f1:c1:73:56:18:67:68:a1:87:a0:a2:b9:28:e9:1b:b2:
12:4a:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:05 2026 by rpki-client