Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: 7oXtbCNfwYBIiDPpIfwTMU5HvoB4xMJ+9X1ZzLwFtVc=
Subject key identifier: A2:68:28:49:A5:0B:AC:1A:F6:D6:F6:77:E5:C5:7C:DC:0B:0D:71:F2
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019F1C0D988BFB30F6A7656E0D16A6DB3B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 198A
Signing time: Wed 01 Jul 2026 05:01:20 +0000
Manifest this update: Wed 01 Jul 2026 05:01:20 +0000
Manifest next update: Thu 02 Jul 2026 05:01:20 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: 5/AGZ3fSpZsmPKZi5xCadOitT6rqxayppZg972wWE6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:0d:98:8b:fb:30:f6:a7:65:6e:0d:16:a6:db:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Jul 1 05:01:20 2026 GMT
Not After : Jul 2 05:01:20 2026 GMT
Subject: CN=a2682849a50bac1af6d6f677e5c57cdc0b0d71f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:4e:99:cf:19:da:93:36:39:07:c8:de:c1:
5c:dc:36:95:8a:cc:b6:05:50:60:75:f1:0d:0d:86:
f8:a9:f8:b7:f4:7e:65:5f:e5:ad:12:b1:8a:da:b1:
fa:74:57:4c:d3:90:80:f4:cd:bb:4c:61:d8:1c:8f:
22:d9:38:34:11:c4:83:87:a6:f7:42:09:83:20:11:
7f:c4:a9:83:02:d2:87:bb:19:e0:53:29:e4:8d:fc:
c1:08:b0:1a:a1:0a:f4:45:d7:f1:da:eb:21:23:b3:
2d:7e:9f:1f:e4:2d:43:53:e5:c7:20:bf:ed:e5:f1:
1b:ec:0e:be:49:98:c5:3c:ed:4e:5b:c9:10:4e:aa:
1c:72:f7:dc:4c:7c:0f:19:af:3d:67:32:df:2b:e9:
5c:4f:27:70:3f:62:e5:9b:5a:43:22:68:6b:d7:82:
8f:79:1a:bb:d2:5d:b9:85:c5:bb:1f:2d:64:d1:5c:
80:d7:09:40:72:5d:8e:ce:a1:1f:89:c5:22:aa:b7:
74:37:a8:17:ce:48:f5:f4:70:9f:b9:f5:e2:52:21:
23:78:b8:a7:48:63:ae:07:a3:91:f1:97:d5:0c:c1:
f6:60:43:d1:98:02:18:a8:fa:3a:83:db:de:e8:49:
52:1f:16:2e:a2:db:a3:47:50:60:a6:27:bd:fb:e6:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:28:49:A5:0B:AC:1A:F6:D6:F6:77:E5:C5:7C:DC:0B:0D:71:F2
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:37:32:d6:2c:81:09:5b:84:0a:7f:16:34:a0:9d:3b:26:
3c:ff:6c:2c:11:16:9e:97:a7:f8:ab:56:89:88:88:4e:f6:e7:
63:1c:77:72:de:7e:23:ce:fb:2c:b5:b2:05:5c:db:68:f2:cb:
48:43:98:35:57:2f:32:fe:8b:4c:00:5c:d7:8b:74:d1:13:b0:
8d:12:cc:a4:b3:a6:e9:43:9b:68:5f:b6:c9:1c:58:8e:10:aa:
94:ef:a9:22:ba:0c:85:c1:e2:21:2b:71:14:f2:06:72:8e:13:
b3:13:98:5b:a6:52:fd:f1:10:53:58:cd:75:56:a0:b2:01:e1:
66:7f:34:47:fc:bc:cb:1f:f4:9b:9c:b6:8e:d8:80:d0:2f:26:
02:7c:c2:49:9d:f6:91:74:35:d6:43:be:c0:7d:52:ee:bb:1b:
a8:d7:4a:d2:05:1d:3d:7b:ba:35:42:82:e3:f2:53:03:a9:cc:
5d:9e:28:84:70:80:9c:1b:f4:9b:67:8a:ef:62:8e:f4:71:87:
24:dc:46:01:fa:22:90:71:73:1f:56:50:15:58:a8:f7:2d:6d:
44:7d:d6:7b:62:51:49:ae:72:5c:00:25:8c:ff:e8:a1:77:46:
34:9f:0c:0b:3d:3e:83:6f:d3:25:29:04:e3:b9:f4:7e:8b:66:
bd:b9:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 10:57:25 2026 by rpki-client