Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: UWC3OJb9SN2/BwXX7ncn1opYIC2c9jmj5Ihd+eoPJng=
Subject key identifier: 31:35:AA:43:61:F8:66:6A:01:76:42:FC:F6:2C:52:32:CC:4A:01:C8
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 01A08BD63680383405C63F72738BAF59FB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0DB8
Signing time: Thu 10 Sep 2026 15:01:06 +0000
Manifest this update: Thu 10 Sep 2026 15:01:06 +0000
Manifest next update: Fri 11 Sep 2026 15:01:06 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: xPzVLyO7WlnzIgtr6Y4Ic6bclyBe4ZFq5iPa4A+z1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:36:80:38:34:05:c6:3f:72:73:8b:af:59:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Sep 10 15:01:06 2026 GMT
Not After : Sep 11 15:01:06 2026 GMT
Subject: CN=3135aa4361f8666a017642fcf62c5232cc4a01c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:d9:10:44:cb:8b:de:ed:4e:f7:4f:e7:2b:
58:97:ea:3c:29:99:57:86:ba:ea:23:2e:a9:2d:a6:
2a:06:bf:3f:68:15:97:34:3b:b8:4b:ae:76:81:97:
d9:23:42:33:ea:d5:b8:49:95:80:94:d8:87:f9:0e:
a0:8d:83:50:28:ea:fb:fb:fe:3a:08:e7:d1:e4:06:
3c:c5:8e:0d:15:f4:e5:50:22:79:9b:f4:8e:ed:0f:
35:32:60:e5:17:61:81:28:a1:63:31:b4:78:71:43:
93:9a:ee:c0:da:aa:a2:3c:8a:8b:93:89:2a:f3:1a:
95:b1:77:48:67:69:e6:91:bf:54:3f:7c:e8:87:be:
71:cd:7b:47:34:3f:49:81:77:c9:40:fc:a2:ad:da:
36:a5:41:55:24:16:a3:e4:fa:48:d6:2f:1e:db:45:
27:92:1f:da:30:e7:9a:c9:af:52:f7:25:75:72:73:
d5:66:65:64:65:88:32:2b:dd:84:4d:35:7a:69:e2:
b9:93:01:eb:fe:53:20:55:3c:fc:a6:8a:eb:27:b3:
12:bc:75:17:67:bc:a1:0e:92:4b:50:88:1e:65:06:
3b:76:42:11:66:9d:fc:1b:8e:82:b1:f2:f3:4d:66:
86:04:5f:a5:8a:a6:3f:9d:86:05:c7:1e:a5:35:16:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:AA:43:61:F8:66:6A:01:76:42:FC:F6:2C:52:32:CC:4A:01:C8
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:48:58:5b:32:ef:b8:30:27:2b:83:e2:91:9d:ae:27:14:6b:
5c:a0:54:2d:69:bd:99:cb:c8:0a:72:50:a5:68:5d:91:9a:9d:
93:90:8c:4f:97:53:ff:38:6e:82:5a:d4:fd:29:47:56:2a:89:
9f:39:14:a7:9d:2c:5f:13:c8:7f:82:49:15:fe:7e:84:da:38:
e8:48:68:e3:ff:1b:e7:7c:95:fa:0b:13:b3:47:ba:76:ee:45:
70:90:0a:ed:05:87:af:61:95:dd:b9:d8:d9:47:09:08:fc:22:
8d:e3:78:ce:ae:7e:95:46:4d:bb:be:1c:92:13:5c:1b:de:b1:
8d:06:82:2e:34:94:73:01:52:fb:e0:b9:65:da:36:eb:d8:b3:
ec:1e:f6:e4:6e:ad:3d:04:98:4c:e8:78:64:ac:00:c2:83:e8:
c6:3c:20:f3:96:38:dc:21:8b:da:34:d8:e1:7b:9a:9e:ed:93:
3c:f7:59:2b:f7:10:3d:f4:4f:d1:1e:d0:16:30:7c:cf:34:68:
61:03:05:73:60:26:44:05:d8:45:9a:e2:a9:96:d2:5a:09:af:
48:8c:68:22:a6:57:81:c9:fd:0f:40:ac:2b:c1:d1:ae:9b:12:
1d:12:97:d7:12:03:cf:6c:61:de:53:d0:94:32:c2:0e:f6:82:
4a:51:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:43 2026 by rpki-client