Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: 5GZb/pFxo8cZ0G0BXECyb9VWo0ROYBPcGBwXWSEuigQ=
Subject key identifier: 26:12:8E:9B:46:6B:ED:91:01:F6:47:78:E9:97:4C:1E:41:3D:B8:91
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019D3941A93C61D479897C77FDA7CD868B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:37 +0000
Manifest this update: Sun 29 Mar 2026 11:01:37 +0000
Manifest next update: Mon 30 Mar 2026 11:01:37 +0000
Files and hashes: 1: kRt9bUyJdFBB9Urf88wqGCyD9z8.roa (hash: ru+g8q6Q2p0jDg0nGr5M9c3LVV0Tl9BDqYju45TyK18=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: f8lKz927DOEyIdQstLRuTBQilrl0m0TpgD2a3ETzyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a9:3c:61:d4:79:89:7c:77:fd:a7:cd:86:8b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Mar 29 11:01:37 2026 GMT
Not After : Mar 30 11:01:37 2026 GMT
Subject: CN=26128e9b466bed9101f64778e9974c1e413db891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:21:9f:c9:cd:3c:ba:f2:f5:26:0f:7e:cf:
98:e3:32:94:b5:70:a2:eb:69:62:75:7b:04:ac:be:
22:34:19:7b:e1:1e:f1:54:55:37:a2:ca:ec:38:6e:
55:28:19:b2:8f:a5:2f:46:ec:52:c3:cc:ee:c8:57:
9f:d0:29:04:47:75:ca:3c:0f:27:57:6f:69:33:38:
a3:fd:5d:17:f9:1b:fd:73:8e:be:22:07:d4:6d:41:
1c:7d:3e:1f:3a:4a:95:04:ff:b2:00:02:32:79:22:
5b:38:fc:d2:59:1a:02:2b:f4:52:33:a4:7a:02:e2:
10:4f:5b:49:5d:f0:f2:41:de:ef:07:b9:b5:99:f0:
5b:0a:e0:6b:f8:bf:81:16:3b:0e:43:a6:80:df:b9:
4c:99:d0:79:8d:e9:79:78:76:72:5a:11:4b:ff:79:
60:52:3c:b5:4b:e0:a2:6d:42:ee:56:39:08:10:c7:
17:09:78:e7:f0:c9:f2:f4:fa:0b:f6:d7:03:5c:4b:
f5:1c:1d:66:e1:3e:49:02:c2:11:68:95:8f:bb:28:
b7:0d:e4:ee:ac:74:ea:6d:ed:c6:98:5f:89:ea:90:
cd:43:e2:41:a0:9b:65:94:5b:86:51:50:83:95:f5:
2a:a8:25:f3:38:c5:26:f4:8e:16:f1:d8:7c:ba:c7:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:8E:9B:46:6B:ED:91:01:F6:47:78:E9:97:4C:1E:41:3D:B8:91
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:29:b1:62:e1:1f:36:91:48:0c:fe:78:5d:9f:85:0d:a3:4e:
b8:d8:31:7f:31:a3:87:30:6d:8b:8a:52:57:c0:f9:eb:85:95:
9c:45:5e:15:c2:ff:53:10:4d:00:fa:a7:ab:c4:fe:13:6e:f0:
d6:45:a3:b4:c7:82:58:04:49:ac:db:68:52:c6:90:bf:c5:c4:
bb:ad:11:95:00:68:05:5a:9e:f1:20:37:2d:7c:fe:e3:53:05:
31:73:27:85:09:8d:87:b6:c4:dd:2d:51:a7:a1:60:c8:1a:76:
a2:35:8e:94:36:b0:25:91:8a:f8:40:2e:ce:6f:40:32:c2:95:
fb:27:52:d7:01:85:62:a5:ea:23:66:c7:9f:59:02:70:c2:a5:
42:0b:7c:1e:7c:a0:6a:13:59:5c:96:c5:05:67:43:fb:2f:d7:
17:92:72:7b:20:4a:e5:31:b9:a7:14:ce:93:dc:0e:c5:68:af:
77:5f:fc:0a:c8:df:32:af:43:01:70:9b:c4:0b:56:4a:e4:d9:
0e:e1:13:71:2e:7b:3b:f2:32:ad:0a:d3:69:23:83:d0:20:a9:
9e:04:bb:a3:cc:18:a8:89:cc:d0:0b:1e:7e:e0:28:a2:5c:19:
61:d2:97:f7:40:40:c0:1e:40:e6:ac:62:f0:b6:c3:f5:63:bf:
47:b5:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:35 2026 by rpki-client