Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
File: y5wD7KhOW9naXuCQanPrLGs1kyU.mft (raw, json)
Hash identifier: pdifmMEwykeYvJeCA59KE9F66uvGd03TiebYekc6O/Y=
Subject key identifier: 42:DC:6C:66:87:E0:D4:07:37:98:A9:CD:27:DD:03:59:EC:8B:9D:E5
Authority key identifier: CB:9C:03:EC:A8:4E:5B:D9:DA:5E:E0:90:6A:73:EB:2C:6B:35:93:25
Certificate issuer: /CN=cb9c03eca84e5bd9da5ee0906a73eb2c6b359325
Certificate serial: 01A105EEBDD15646F300B967649D5338EFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
Manifest number: 70
Signing time: Sun 04 Oct 2026 08:01:34 +0000
Manifest this update: Sun 04 Oct 2026 08:01:34 +0000
Manifest next update: Mon 05 Oct 2026 08:01:34 +0000
Files and hashes: 1: 0YhgZsUvuxV_mLI2mTWHcqI8PL0.asa (hash: sYwzwg//tE8CUQS+J/mQKfL8idtwX9Re2o46nUuoFwM=)
2: y5wD7KhOW9naXuCQanPrLGs1kyU.crl (hash: 1PGFu9jZMKAkhc9ROEn73uXxSwkUfsKhTifTfp27AaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:bd:d1:56:46:f3:00:b9:67:64:9d:53:38:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9c03eca84e5bd9da5ee0906a73eb2c6b359325
Validity
Not Before: Oct 4 08:01:34 2026 GMT
Not After : Oct 5 08:01:34 2026 GMT
Subject: CN=42dc6c6687e0d4073798a9cd27dd0359ec8b9de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:d0:93:04:e8:7a:92:ce:92:9d:a9:c2:38:
df:ff:72:59:ed:24:f4:89:bb:6e:ac:92:1f:8e:73:
d3:c7:7b:e1:fd:7c:df:4e:44:83:f5:ae:12:28:dc:
8c:0c:4c:63:51:27:c6:e2:84:6b:98:dd:c7:7b:54:
a6:89:8c:f1:a1:65:9e:f5:2e:2e:f5:40:26:74:a3:
27:ea:b4:0a:8a:6f:80:57:11:0e:34:53:39:5b:53:
c0:c3:66:10:d2:5e:e3:8f:87:53:1c:70:52:2c:90:
db:ad:20:c0:42:62:6f:76:b4:21:20:0f:ea:f6:5f:
6d:a7:e0:ce:93:5c:b4:c9:7b:08:75:e1:e8:b3:05:
2b:ca:97:12:57:fc:42:4e:dd:a7:75:35:49:27:32:
0f:f1:db:13:7b:df:12:75:66:c1:4a:b5:d1:ab:6b:
f1:ea:af:13:5a:cf:98:b2:bd:1d:45:16:29:94:05:
07:3b:36:cd:e2:cd:a0:97:bc:58:94:ff:3f:fe:13:
f2:b9:bb:1b:0d:ef:fd:94:db:c8:2b:90:35:b8:29:
98:e9:b9:f7:59:20:81:fd:ef:37:6a:95:f0:7a:2e:
f6:61:1c:f9:b3:45:fd:03:33:ef:aa:76:84:4d:8c:
9e:51:4d:01:4e:7f:17:36:2e:15:6c:3e:ee:fd:f7:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:6C:66:87:E0:D4:07:37:98:A9:CD:27:DD:03:59:EC:8B:9D:E5
X509v3 Authority Key Identifier:
keyid:CB:9C:03:EC:A8:4E:5B:D9:DA:5E:E0:90:6A:73:EB:2C:6B:35:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5wD7KhOW9naXuCQanPrLGs1kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9cd421-605f-40a6-abbb-9bab2c9c5b11/1/y5wD7KhOW9naXuCQanPrLGs1kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:d2:5f:80:b6:87:04:03:e8:7c:6c:1d:cf:8d:d4:0c:8e:
1f:1e:e5:b7:bd:9a:58:21:93:22:ff:40:d9:33:6f:33:11:ce:
8b:0c:21:d0:dc:e0:4d:9f:a6:64:fa:f3:46:9d:d2:a1:91:5f:
61:20:d5:ec:fa:b4:d6:ef:9f:83:2d:68:d4:a7:0c:ef:60:e5:
43:80:4f:cf:e0:32:39:46:e3:b7:39:3d:3b:2e:a5:aa:57:3d:
38:8d:d1:63:58:5a:c9:aa:75:e8:92:78:6f:8e:a5:3a:a6:26:
16:f7:6b:fe:20:45:b9:46:05:0e:98:47:02:e0:e3:0b:a1:a1:
c7:2f:6e:15:82:f0:86:4f:b2:55:d3:48:59:91:04:1f:11:ff:
97:15:88:30:ee:fb:a1:7d:79:9d:e3:61:ab:98:f6:2b:ee:49:
cb:5d:38:0e:bd:b9:a2:98:89:54:19:a3:ca:4a:8c:ab:9e:d5:
3f:18:3b:61:bb:91:9d:83:b7:e8:1f:32:8b:99:80:82:ef:9a:
1e:ca:f9:c5:b0:76:bb:53:18:c3:64:ae:6e:ba:39:aa:7b:64:
53:46:4f:83:d7:8a:bb:f3:b6:d8:64:4f:5d:dd:aa:0a:71:15:
4a:48:c6:f0:d5:01:82:21:54:e3:c8:cb:85:a1:e3:9a:57:8f:
86:19:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:53:26 2026 by rpki-client