Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: uLrXfane87jRSBanF7niB/bFBwqCH6V1unGmd4/4U4A=
Subject key identifier: F6:1C:64:C3:7E:EC:93:76:20:BC:4B:79:CC:6C:00:1C:9F:86:69:3F
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 01A0E40749804898865C3801C01834E1E064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: 014B
Signing time: Sun 27 Sep 2026 18:01:17 +0000
Manifest this update: Sun 27 Sep 2026 18:01:17 +0000
Manifest next update: Mon 28 Sep 2026 18:01:17 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: v9sIz1yq5t0+kvHmSu6JZkgwLPsFMK2SjLsSLNM9Tyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:49:80:48:98:86:5c:38:01:c0:18:34:e1:e0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Sep 27 18:01:17 2026 GMT
Not After : Sep 28 18:01:17 2026 GMT
Subject: CN=f61c64c37eec937620bc4b79cc6c001c9f86693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:3f:50:fd:08:50:95:42:b5:9d:a2:93:21:
f4:6f:9e:43:ce:8b:34:d9:4e:39:b6:c8:10:52:7a:
78:32:86:65:ea:6b:a1:58:5d:02:d2:f1:92:05:b5:
b6:50:aa:09:0a:25:20:41:57:49:a4:c3:70:f4:05:
34:c8:55:b6:71:68:66:54:a1:2c:5f:90:76:d2:e9:
38:1a:b2:a7:b2:cc:58:23:55:f3:51:1e:5f:44:9e:
2b:7c:d1:b8:7b:4c:ba:11:1d:7f:50:34:65:16:9d:
43:42:8e:78:25:37:f6:70:0a:45:a3:da:86:c1:cf:
02:c4:be:c8:d0:91:6a:0c:21:f2:9a:56:27:83:12:
29:13:76:8b:b3:d8:2e:ef:2b:42:92:9e:dc:53:72:
0b:bc:0f:56:95:49:b4:7e:60:81:ff:1d:7b:cb:01:
ca:c3:a5:28:8f:de:5e:01:1b:d3:88:49:5a:29:e0:
9f:3c:9a:22:f4:32:c6:92:ef:db:0a:d0:59:7e:b1:
20:8e:9e:cd:58:68:a8:e0:89:7d:c1:0a:60:d3:e8:
37:72:68:e3:c9:45:ce:e4:7e:aa:91:46:bc:f8:f6:
48:25:29:e8:b8:9b:aa:e5:1a:a4:ac:da:07:2e:2c:
30:02:d9:8a:66:5d:9f:69:6e:26:e2:5f:8b:f1:1f:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:64:C3:7E:EC:93:76:20:BC:4B:79:CC:6C:00:1C:9F:86:69:3F
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:cc:8c:9c:ae:32:71:d9:57:fa:10:83:e9:4f:9b:02:f2:
8e:83:af:e8:19:18:c5:19:29:0c:2c:2f:31:98:38:00:bc:ed:
53:a9:6c:b4:df:61:a5:6b:1e:0d:ee:f9:ac:64:cf:42:12:7e:
fe:4b:d1:4e:db:2c:82:5a:c4:ce:b9:c6:ea:da:ef:6d:4e:bc:
07:45:0c:df:98:6f:55:7a:ae:8f:4b:95:c2:80:34:2b:d2:28:
cb:b7:c7:69:7a:b5:d9:f5:b3:9a:51:bf:74:08:a4:09:1a:df:
81:ca:c6:3f:21:d0:52:0b:c5:e6:3a:1e:c3:34:e3:d1:82:2b:
f4:2f:83:e8:27:69:75:3c:b0:44:ea:91:6c:62:02:87:1f:54:
3e:1e:0d:77:ac:67:0a:15:2b:5a:e4:62:88:5c:c3:0c:95:44:
45:3c:64:3a:da:a4:70:f4:72:bb:e8:08:40:c8:37:a0:d9:9a:
c0:e2:84:10:ef:7e:3e:aa:83:31:ed:a6:05:dd:81:3b:ab:56:
fe:2c:c7:b8:56:3c:ff:28:68:52:ad:d9:f3:5e:df:87:4e:47:
5c:b6:14:a0:2c:b5:c5:2c:58:18:c7:cb:ba:ec:95:5e:70:17:
a3:95:92:d3:34:85:a9:b1:52:fe:5d:9f:fc:29:02:72:6c:94:
94:2d:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:46 2026 by rpki-client