Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: fL6u1CHJV9SA1UK3WLnyPceFrEU+MLHbA8u0SO5Y1jo=
Subject key identifier: 6F:A0:B9:CA:8D:3F:94:44:10:D7:42:FF:B5:67:36:E9:C2:DF:C9:CA
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01A17A3A619B59C3783F8735D6B9D90A24CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 144A
Signing time: Mon 26 Oct 2026 22:00:08 +0000
Manifest this update: Mon 26 Oct 2026 22:00:08 +0000
Manifest next update: Tue 27 Oct 2026 22:00:08 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: FQtfadQtKLylfXRy4nyQXDWssQNzzWtyGojpO1pKFJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:61:9b:59:c3:78:3f:87:35:d6:b9:d9:0a:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Oct 26 22:00:08 2026 GMT
Not After : Oct 27 22:00:08 2026 GMT
Subject: CN=6fa0b9ca8d3f944410d742ffb56736e9c2dfc9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:92:11:70:0e:0e:84:b0:e2:d0:48:6e:1b:
d3:6a:1f:c3:cf:dc:4d:a4:e0:05:a3:27:c1:2b:e8:
12:67:7d:6c:0f:ee:ea:d6:8b:e8:f3:52:d2:0e:26:
c3:da:c1:fa:a4:99:1d:99:4e:1a:75:4b:f4:a9:17:
e9:67:1a:cb:87:40:2b:ea:41:8b:f8:25:fe:9d:d6:
b1:0d:64:3e:c6:31:dd:1b:ad:cc:6d:06:61:8b:d2:
e7:e2:34:1b:75:86:e4:60:7f:3d:67:ef:b1:4a:ec:
92:70:31:05:b3:36:6c:fe:68:a0:d1:24:90:90:b4:
3c:46:f9:8c:93:6a:5a:c3:2b:dd:7d:aa:29:83:b1:
14:61:ce:5f:fa:a1:ac:8c:0f:fa:83:47:68:f7:90:
57:e0:da:5f:5d:11:2e:1f:aa:22:07:65:22:32:39:
95:cd:e3:74:f5:31:72:af:22:85:26:f9:ff:5e:84:
33:dc:69:f8:a3:72:9e:99:9f:69:31:1d:78:bd:ff:
77:fa:f8:b5:b2:35:bc:78:29:6f:57:a7:58:e8:ba:
95:98:31:fc:62:6c:41:00:9b:13:49:b2:6e:2d:d4:
87:ce:a8:38:1d:80:b7:12:92:dd:8c:2b:59:ab:be:
79:b9:20:bd:1f:08:39:69:f9:ba:8f:3e:f3:e9:17:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:B9:CA:8D:3F:94:44:10:D7:42:FF:B5:67:36:E9:C2:DF:C9:CA
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:80:b8:e9:96:6b:0d:7c:9b:ed:e6:25:49:41:02:e9:75:1c:
10:82:4e:cc:bb:a2:63:98:33:d7:12:63:b1:86:28:eb:64:44:
c6:2a:0b:ad:0f:58:a8:df:ea:85:c8:9a:30:fe:5a:89:26:c5:
06:3e:fe:ab:24:cb:ee:10:3a:cc:3f:dd:86:a1:6b:9f:53:b9:
d9:0f:7d:f3:b2:a7:56:35:09:e4:b3:97:16:a1:69:39:83:27:
15:5a:b6:f6:29:1e:7e:36:a8:58:18:ab:f3:a0:28:f3:a9:0c:
a6:d9:7f:31:b5:39:4e:f2:64:15:ba:84:52:7d:cd:1d:70:12:
71:07:d2:a5:bb:22:3f:1c:40:18:ba:d2:d2:77:5c:5a:40:21:
83:f4:0c:0d:b7:88:2e:ca:76:fa:16:7a:d7:1f:01:61:34:b1:
a0:42:89:fb:21:7d:75:ba:61:24:ef:1c:75:a9:6e:22:8b:50:
d7:8c:fa:7f:a9:33:ac:fa:0e:d1:0e:f5:a3:0e:05:41:7b:59:
6f:7e:4f:2c:b3:2c:97:95:42:d3:31:95:c8:5f:6b:9d:a9:2f:
6e:d6:e1:3e:ab:f5:b2:f4:e7:1a:e8:5d:34:4b:47:26:0c:2c:
8a:ec:39:7d:b1:63:88:f3:50:be:22:6b:b7:96:53:df:c5:4f:
17:81:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:08:36 2026 by rpki-client