Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: 7SCOZdzuU/ati9ORy2qmZZlpE+RLpu65jDl97aOk3DQ=
Subject key identifier: C3:91:15:5A:3C:58:CF:E6:26:96:70:BA:7D:A2:91:90:53:C4:E4:04
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01A08EA0589E14F48EA86E5B1E47A9ED0CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 13D0
Signing time: Fri 11 Sep 2026 04:01:08 +0000
Manifest this update: Fri 11 Sep 2026 04:01:08 +0000
Manifest next update: Sat 12 Sep 2026 04:01:08 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: fc2Y9X3EfeqxhzqW6LBPsF+e2bVSLpNNE0bOuv4trWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:58:9e:14:f4:8e:a8:6e:5b:1e:47:a9:ed:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Sep 11 04:01:08 2026 GMT
Not After : Sep 12 04:01:08 2026 GMT
Subject: CN=c391155a3c58cfe6269670ba7da2919053c4e404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:23:78:db:f8:9f:5e:e7:be:96:5e:6f:21:
26:54:27:ab:15:72:2a:05:8d:e2:8c:a3:9a:15:5e:
4b:91:e4:7e:f4:75:0f:3b:25:24:bb:fe:ff:d3:22:
fa:62:68:06:f1:97:40:7e:84:33:d1:e8:ed:b7:c9:
15:75:11:3c:18:80:f8:6f:35:74:89:22:ef:3d:93:
17:dd:ca:e5:06:4f:ad:27:e9:f7:16:b3:a8:48:0d:
47:76:6a:5b:a9:08:bb:24:09:e6:52:3f:c1:6c:f5:
29:5a:2e:51:45:d3:8f:96:f6:4d:ec:7a:b0:8c:7b:
e3:45:22:5f:2d:df:ee:7b:c4:74:7b:db:87:44:3b:
25:70:c2:01:f2:1e:b6:70:38:5d:34:3c:e0:a0:74:
01:bd:fc:c5:36:e8:6c:f2:f4:d1:e9:d8:73:9d:18:
90:4f:df:84:26:8f:53:33:65:58:c9:a1:82:45:69:
f8:eb:fe:a7:9c:c7:c8:de:95:1a:ff:d8:64:2a:cd:
4c:6a:01:46:7d:ac:11:dc:a7:dc:22:f4:7a:1e:82:
2b:93:da:c7:4d:03:1a:e8:c5:f9:72:01:5a:52:0f:
ac:8f:99:2f:61:fc:26:66:77:d8:96:9e:f8:dd:cf:
23:8b:3d:35:81:e6:e4:6b:22:60:27:49:6d:9d:2e:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:15:5A:3C:58:CF:E6:26:96:70:BA:7D:A2:91:90:53:C4:E4:04
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:24:32:cb:ed:e2:24:90:2f:f0:44:0a:da:99:14:c3:e3:
76:ea:24:c8:7f:86:05:c1:1c:96:ca:85:84:e2:96:c0:8f:aa:
90:d4:df:25:2a:2a:25:ba:db:6f:cd:a8:31:f9:7f:59:22:d9:
1b:f2:36:98:4c:9e:05:c4:5c:f4:8c:60:23:ec:71:b7:55:48:
37:06:c7:36:15:e4:d1:34:3b:72:fe:d9:49:dc:01:cb:f5:63:
17:22:32:96:4f:f2:86:53:70:7b:55:a1:4a:c7:d1:19:77:d7:
72:77:f1:de:54:85:d1:52:10:b6:71:df:ab:bb:72:4c:14:57:
70:25:25:47:2f:1b:cf:2a:22:ff:88:9d:b2:2a:2c:59:ec:ac:
e4:75:c7:b7:4a:a5:21:16:1a:9b:ea:1b:91:1b:dd:9c:0b:53:
33:06:4e:0d:77:cb:93:0e:50:1b:c1:91:3e:7b:e9:4a:e5:39:
cd:cb:8b:cc:23:62:65:35:5f:cf:7b:9d:be:c4:41:9e:c6:fc:
11:2b:8e:5f:56:69:db:16:e5:64:27:df:ca:35:e6:40:69:90:
df:e8:35:b6:ae:f7:fc:fe:1c:49:a9:64:b8:a6:a6:df:dc:a5:
ea:c3:61:ea:1c:a5:b7:ef:bf:d7:f6:c8:48:eb:1b:02:f8:f8:
dc:b2:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:12 2026 by rpki-client