Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: 0OzX8E3CQETLfXIwVmMQY1LOa1KuR3kD7vmOmexF/yA=
Subject key identifier: 3E:10:24:B7:A9:69:5A:82:0C:6A:80:12:25:F9:BE:EF:B3:A6:6F:6C
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 01A1777111B8FEB1EE0904C529F5AB225F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0E32
Signing time: Mon 26 Oct 2026 09:01:00 +0000
Manifest this update: Mon 26 Oct 2026 09:01:00 +0000
Manifest next update: Tue 27 Oct 2026 09:01:00 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: pXk710M1bx3dkYypsdzYVdYIDMpOm9WJTWjUJ865kow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:71:11:b8:fe:b1:ee:09:04:c5:29:f5:ab:22:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Oct 26 09:01:00 2026 GMT
Not After : Oct 27 09:01:00 2026 GMT
Subject: CN=3e1024b7a9695a820c6a801225f9beefb3a66f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:4f:5e:8b:af:0e:35:61:54:ce:a6:d1:0f:
16:38:ee:ca:3a:c9:c7:2d:2c:49:3d:2c:2a:80:c3:
b2:85:76:f6:8c:3e:b0:c7:a4:01:d4:bd:31:26:d2:
dc:49:e9:18:0f:db:fe:ab:f0:d8:29:f3:c5:29:54:
a6:99:75:a2:c1:87:0d:74:1a:df:77:e6:aa:a6:b2:
ea:cb:65:92:d7:7b:29:9a:66:7b:0f:ba:c6:00:ba:
22:3b:6c:d5:b1:96:e1:c1:70:56:d2:b1:b5:5c:ba:
f9:67:d9:2f:b5:c2:2e:4b:93:9c:d7:11:69:4a:a2:
31:c1:65:3d:2e:6c:17:41:30:72:a3:78:47:b6:ff:
a8:34:b5:46:d3:41:2c:90:14:3c:04:1a:89:45:4d:
77:12:fa:66:b0:d3:33:84:26:c9:a8:58:ed:e4:94:
5d:ac:a1:2f:80:7e:17:79:27:1c:55:a8:97:a5:79:
79:34:66:72:73:e5:40:b3:44:49:c4:a6:07:5a:1b:
02:e5:3a:c5:18:8c:47:f0:ce:f5:b9:f7:ec:9f:2f:
6a:a2:99:b0:fc:0d:2f:a0:aa:d1:33:62:4d:0f:a6:
23:fd:e5:5b:28:29:1a:3b:5e:41:48:38:43:36:42:
97:98:41:c2:a6:10:93:4c:9c:03:e1:15:03:11:78:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:24:B7:A9:69:5A:82:0C:6A:80:12:25:F9:BE:EF:B3:A6:6F:6C
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:29:b6:d2:e3:dc:a2:6e:28:05:8b:23:b8:86:9b:57:ef:
e7:25:2f:48:65:63:7d:df:c2:be:11:00:43:a1:ba:06:54:42:
a1:4a:db:34:af:74:83:d2:49:3f:85:e6:e7:8f:49:d1:90:0b:
a7:fa:bb:99:19:f4:7a:34:84:9f:7d:2a:bd:da:c1:31:90:2f:
26:0a:2d:d3:49:19:de:b9:cc:9d:12:61:76:e5:7f:9f:47:46:
6e:9c:46:84:98:e0:b3:c1:34:21:00:21:55:df:35:dd:70:fa:
fc:1d:ba:c5:63:dd:f3:af:aa:73:ff:c0:1c:84:9d:82:f9:86:
70:74:bb:bd:fd:4c:06:21:06:9c:e0:c0:6f:3b:8d:27:4d:c9:
21:d1:3f:5b:00:22:06:49:92:86:f7:31:03:7a:9f:44:9e:95:
db:40:56:e9:80:f5:b7:66:6b:9f:93:62:77:63:62:9f:4f:52:
11:4b:cc:d6:3c:14:b6:33:b1:7b:41:66:b8:ab:bc:4a:2d:74:
4c:97:3a:78:08:71:ec:d7:67:f8:d8:6c:01:ba:00:89:f6:75:
d1:b5:8b:1a:a0:71:b9:c3:dd:a2:dd:34:e9:6a:cf:9e:a9:eb:
64:b9:db:d9:71:c5:e4:fd:54:26:26:0e:13:76:97:fd:9e:44:
7e:ff:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:06:05 2026 by rpki-client