
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: LzH8wYXlgIzlO3Ir5j2v18UlQBhDpriNSH/ukBVwCws=
Subject key identifier: B4:C4:32:29:2C:CF:00:19:F8:FA:22:CA:0B:EC:82:D9:E5:3C:27:EC
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 01A0DF17C82527314D48EBDDC6B3684F1619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 1281
Signing time: Sat 26 Sep 2026 19:01:12 +0000
Manifest this update: Sat 26 Sep 2026 19:01:12 +0000
Manifest next update: Sun 27 Sep 2026 19:01:12 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: eZVX3bV3KYmcTbvzmn2Ji/u/yIIsJ61YQerJ2f1FrjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:c8:25:27:31:4d:48:eb:dd:c6:b3:68:4f:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Sep 26 19:01:12 2026 GMT
Not After : Sep 27 19:01:12 2026 GMT
Subject: CN=b4c432292ccf0019f8fa22ca0bec82d9e53c27ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:d1:f7:dd:1e:61:4a:d0:cb:27:09:86:e8:
c2:c4:ee:ac:b5:02:95:e3:17:ca:98:0c:e9:93:5e:
7a:83:7e:b1:9d:69:d9:d0:eb:11:76:70:f3:0d:d4:
54:78:04:39:b4:e9:91:e8:a0:22:23:b0:7e:54:d2:
c8:72:f2:d9:0a:33:e9:38:9f:be:3f:41:b0:df:7c:
50:da:aa:02:fd:77:3c:33:1b:0e:98:b4:25:cd:e0:
bd:5f:26:56:e3:49:79:f1:10:5c:d1:65:36:6a:51:
c5:fb:e7:57:2a:65:e9:50:14:df:54:88:30:de:0c:
2a:05:7a:3c:de:d8:5f:4e:23:bf:7c:34:81:41:5d:
7c:4c:69:50:5f:88:5d:2e:d8:13:e8:f8:3e:e1:f4:
29:87:37:36:df:43:a3:de:57:20:66:02:97:6f:d3:
8b:79:85:8b:89:aa:75:84:98:84:98:af:16:ff:33:
9c:6d:9b:31:4a:51:b5:2e:c1:22:ba:1e:54:3d:4a:
8b:53:d0:f9:df:e3:8e:12:1a:b0:8c:f2:ae:53:99:
38:8f:35:5c:98:73:e7:a6:13:7c:11:d8:e1:24:af:
1c:58:3b:36:ef:7d:24:a4:37:d6:1d:27:75:0d:e4:
28:ed:36:88:5c:b9:3b:9a:a6:ed:c1:bb:64:01:ff:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C4:32:29:2C:CF:00:19:F8:FA:22:CA:0B:EC:82:D9:E5:3C:27:EC
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e3:17:03:97:03:3d:72:b1:90:b4:09:c8:95:4f:40:bd:81:
78:bb:36:63:a4:7b:ad:12:08:58:04:3c:1f:bf:dc:ee:ab:e1:
ff:1f:d4:30:3b:dd:d0:21:66:09:3d:30:12:8d:fb:eb:f8:34:
e0:8e:be:42:0c:d6:e1:dd:ad:07:bd:5b:71:17:42:8f:5a:e3:
25:36:87:94:7c:35:e6:77:fd:d6:87:58:db:4a:bb:9c:fa:c1:
dd:9b:90:00:ad:c4:60:7e:a4:fb:34:32:4a:cf:a0:ca:b7:33:
9b:22:5b:7f:b5:37:a6:02:6f:5e:f0:a6:fb:27:cc:fe:fd:a5:
5f:80:a9:33:9d:04:97:b7:9b:75:23:e3:55:8f:91:b2:45:42:
52:d0:15:e2:f9:19:f0:49:32:4e:e3:c2:4d:f3:da:10:8f:8c:
cd:58:0b:e9:66:5a:a7:5b:ba:47:86:49:e1:94:1b:80:0e:91:
aa:e0:33:b2:40:b5:33:8e:8d:f8:00:3a:ef:d0:fd:10:52:e1:
2f:92:cf:09:19:74:64:33:a6:64:d6:cd:8e:2f:1c:11:84:05:
b6:ee:b1:44:fe:00:64:95:fa:0f:12:1e:c3:a0:c6:d7:b8:87:
9c:4e:85:ed:15:cd:79:22:88:7a:16:cf:79:f6:25:f3:08:6b:
d7:d5:de:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfF8glJzFNSOvdxrNoTxYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl
ZWJlOWYwHhcNMjYwOTI2MTkwMTEyWhcNMjYwOTI3MTkwMTEyWjAzMTEwLwYDVQQD
EyhiNGM0MzIyOTJjY2YwMDE5ZjhmYTIyY2EwYmVjODJkOWU1M2MyN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF3R990eYUrQyycJhujCxO6stQKV
4xfKmAzpk156g36xnWnZ0OsRdnDzDdRUeAQ5tOmR6KAiI7B+VNLIcvLZCjPpOJ++
P0Gw33xQ2qoC/Xc8MxsOmLQlzeC9XyZW40l58RBc0WU2alHF++dXKmXpUBTfVIgw
3gwqBXo83thfTiO/fDSBQV18TGlQX4hdLtgT6Pg+4fQphzc230Oj3lcgZgKXb9OL
eYWLiap1hJiEmK8W/zOcbZsxSlG1LsEiuh5UPUqLU9D53+OOEhqwjPKuU5k4jzVc
mHPnphN8EdjhJK8cWDs2730kpDfWHSd1DeQo7TaIXLk7mqbtwbtkAf/sKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTEMikszwAZ+PoiygvsgtnlPCfsMB8GA1UdIwQY
MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt
NTNhNWFmNzY1MzQzLzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz
LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+MXA5cD
PXKxkLQJyJVPQL2BeLs2Y6R7rRIIWAQ8H7/c7qvh/x/UMDvd0CFmCT0wEo376/g0
4I6+QgzW4d2tB71bcRdCj1rjJTaHlHw15nf91odY20q7nPrB3ZuQAK3EYH6k+zQy
Ss+gyrczmyJbf7U3pgJvXvCm+yfM/v2lX4CpM50El7ebdSPjVY+RskVCUtAV4vkZ
8EkyTuPCTfPaEI+MzVgL6WZap1u6R4ZJ4ZQbgA6RquAzskC1M46N+AA679D9EFLh
L5LPCRl0ZDOmZNbNji8cEYQFtu6xRP4AZJX6DxIew6DG17iHnE6F7RXNeSKIehbP
efYl8whr19Xe9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:57 2026 by rpki-client