Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: CO1xIfNnCq4x+obs1E6rbUUOvwnaiiDJNK8WvadX3GI=
Subject key identifier: 6F:FD:62:FC:BE:FC:BF:E5:07:2F:BC:34:7F:17:07:5A:C8:F6:00:00
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 01A137117F28CC4612CD3222325AFF7EEA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0BD9
Signing time: Tue 13 Oct 2026 21:00:55 +0000
Manifest this update: Tue 13 Oct 2026 21:00:55 +0000
Manifest next update: Wed 14 Oct 2026 21:00:55 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: e7UgwEbmr3cxX39M2eCkhMY2zxfvz44pLg5H2NtK++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:7f:28:cc:46:12:cd:32:22:32:5a:ff:7e:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Oct 13 21:00:55 2026 GMT
Not After : Oct 14 21:00:55 2026 GMT
Subject: CN=6ffd62fcbefcbfe5072fbc347f17075ac8f60000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:e3:e9:8e:ca:14:f7:f3:ba:ec:d2:9d:c3:
c1:87:a4:30:30:2a:da:bb:c7:39:89:d0:20:e4:66:
a2:de:0c:2d:a4:0b:bf:8b:9d:30:62:e0:6f:c9:49:
7f:0c:3a:5a:71:6f:eb:50:65:70:44:8f:ed:0f:59:
5c:f4:ae:63:20:04:31:10:74:74:a8:5f:4c:f6:2c:
94:de:5b:10:7b:c0:64:48:2b:d6:cc:3b:9a:12:0b:
c7:36:7e:9c:67:88:ef:2b:b1:c3:89:83:b0:8f:c6:
e7:e6:ff:19:6c:3c:ae:a8:57:78:3e:a3:60:e5:b7:
10:8c:12:44:e7:f8:13:23:81:18:f9:58:86:0d:68:
7b:ca:98:7e:4f:07:30:ab:d8:aa:c1:51:4a:c3:29:
05:28:3c:62:95:3c:66:77:a0:cf:76:a9:4f:04:3e:
1d:1d:cd:ce:8f:ac:fe:e3:00:8d:a1:a5:a8:d9:14:
0e:8d:65:fb:ad:e1:db:4f:bc:cf:03:10:4a:85:ac:
18:1d:98:27:91:50:d8:90:79:13:6e:5d:e0:85:a3:
5a:b4:4c:89:54:91:86:d5:51:90:83:a2:bf:3d:d7:
e1:01:7b:60:6f:fb:b2:44:28:6a:13:2e:ac:ee:ee:
49:56:17:f9:15:e2:9f:2f:cc:51:7e:d2:64:30:41:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:62:FC:BE:FC:BF:E5:07:2F:BC:34:7F:17:07:5A:C8:F6:00:00
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:39:a6:80:4b:00:dc:39:ba:10:d8:85:f5:37:7e:73:15:
f2:c9:b5:dd:7c:e4:35:48:b9:5b:cf:b1:36:fc:72:41:b0:5d:
8c:3b:36:14:69:72:63:40:63:9f:d0:af:2a:08:a4:57:b1:b6:
e7:6a:2a:c2:91:09:0b:ef:26:1c:f2:4c:12:b2:81:d5:c7:96:
7a:80:f3:53:e4:87:67:b5:03:6e:c2:2f:9d:df:61:45:28:51:
8a:0a:7a:a1:83:04:42:28:df:55:f1:71:4c:13:0c:b9:53:05:
91:c7:2b:26:5b:ac:d6:e0:26:5c:b8:7d:40:60:4b:2f:c0:9a:
9b:d6:ec:7a:9e:1b:e3:14:fe:1a:70:58:e9:13:8b:54:84:f0:
51:12:01:af:29:e3:72:05:ac:2e:c8:f9:4d:1d:58:e6:d1:fb:
68:e4:de:f6:94:cf:85:83:44:38:f2:1f:53:06:32:ef:ce:14:
4c:9c:5b:6d:76:7d:81:47:42:d5:bb:61:1c:a5:58:21:30:d9:
9b:5f:e4:ea:66:f5:c1:77:3c:c1:56:fe:bd:c1:b6:5b:04:1f:
92:78:50:91:e2:18:38:b2:f3:e7:2a:31:38:7b:28:5f:b3:63:
1a:a4:b1:d9:aa:fc:0c:b5:6a:da:35:0f:60:0b:9c:74:0c:ff:
a6:80:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:43:50 2026 by rpki-client