
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: ZyRjUzUvDyuF9aLnreXctceeo3k00B+3eQLnP7Xr3NQ=
Subject key identifier: 64:BA:66:BA:5B:66:1C:DE:5A:F4:7C:0D:99:64:67:E3:05:D9:6C:2D
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 01A00281DBDE0C7145A932B5AF23052DF06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 0963
Signing time: Fri 14 Aug 2026 23:00:59 +0000
Manifest this update: Fri 14 Aug 2026 23:00:59 +0000
Manifest next update: Sat 15 Aug 2026 23:00:59 +0000
Files and hashes: 1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: n+LBbjOvpHdb0Q5oEGkzV3zkPdvd8BF8z35pJsIeb74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:db:de:0c:71:45:a9:32:b5:af:23:05:2d:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Aug 14 23:00:59 2026 GMT
Not After : Aug 15 23:00:59 2026 GMT
Subject: CN=64ba66ba5b661cde5af47c0d996467e305d96c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:27:7b:69:ab:90:27:7a:05:fc:ba:a4:ac:
06:d7:3c:49:37:20:be:3f:83:20:fa:4e:9f:5c:1b:
1d:9d:f3:00:52:e5:2b:8b:b9:3d:ef:83:2a:f2:de:
13:7b:e1:b1:f1:32:9c:27:26:85:09:4e:f8:0f:c1:
17:67:91:c8:c3:0c:6b:b2:91:e6:70:14:69:64:61:
df:c6:29:8c:97:f6:60:9a:c9:34:41:7a:34:ca:0d:
fe:99:a2:f1:9e:a5:a6:8c:7d:8d:97:42:b8:c0:67:
f6:b3:2c:b4:da:07:93:20:00:0b:d3:6a:38:1b:ad:
65:98:2f:ac:f1:a3:6e:be:82:87:76:88:3f:54:88:
d2:d1:fc:e2:f8:21:e0:e1:61:7e:34:35:55:6e:6c:
75:1a:e3:92:a7:38:f4:c6:f5:be:aa:cb:13:66:f9:
06:25:4f:c7:48:f0:c1:ce:5a:61:e3:d5:f1:b8:00:
fc:a8:0c:b4:ea:9e:76:50:bb:2b:9d:0e:13:f7:23:
3f:bc:b3:bc:2e:cb:f7:3f:6c:05:e5:cd:3d:5c:63:
d3:53:69:8f:90:99:5b:b7:6a:2a:3d:92:02:f1:f5:
18:25:79:fa:96:d0:0a:aa:f8:d8:fb:b9:0f:96:93:
5f:ca:9b:ab:cc:e4:c1:ee:67:1d:56:d0:57:ac:ec:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:66:BA:5B:66:1C:DE:5A:F4:7C:0D:99:64:67:E3:05:D9:6C:2D
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a4:a4:72:fb:13:72:99:21:df:7b:06:1c:17:66:f4:55:15:
ea:f1:6b:fc:46:36:d2:55:48:c1:05:58:81:4b:28:bb:2c:e2:
70:29:db:75:a5:4b:0a:1e:a8:29:83:bd:cb:a1:a4:ee:2a:ca:
f3:41:20:13:81:04:15:10:9b:6c:f6:1a:a1:7f:4a:e9:f8:10:
1a:27:0f:8e:66:80:4c:4a:5b:f0:c7:1b:1b:71:07:2a:30:0a:
2e:9c:e5:36:84:04:76:26:9d:54:a9:78:e2:46:3b:bd:cd:0a:
83:3c:fc:97:b4:ad:06:72:77:fa:ce:bc:98:02:76:4d:be:22:
02:46:ce:ae:2c:3b:58:f5:8e:1b:6f:34:09:60:bd:12:1d:2f:
0b:74:a5:42:12:27:be:d8:66:a2:54:64:15:d6:ce:41:33:9d:
ac:e7:aa:b8:f8:3b:b1:5f:70:19:1c:af:29:17:f7:76:97:4d:
be:12:9a:5b:f0:ef:03:fc:18:61:2f:19:cf:72:e4:5c:65:d4:
92:c1:9d:32:b8:9b:e1:8f:d2:7b:9e:9a:c2:4a:5b:20:bd:b3:
26:fe:f5:ba:d6:30:f0:97:07:bc:6e:8d:d7:17:3c:97:49:6a:
7d:11:0c:1b:ad:df:4d:1f:90:83:32:a5:9d:01:04:9e:f4:fc:
ce:77:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:42 2026 by rpki-client