Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: BASZuf2cZ5OJjacsaAYihT2Ykanv7DqPJFPYV7fKiv4=
Subject key identifier: F5:AD:EC:F5:88:47:CF:09:4C:D9:9A:A7:89:B9:D9:7C:93:06:77:85
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 01A178BA0CD283B4AE1089830DDCECD0FEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 13B0
Signing time: Mon 26 Oct 2026 15:00:21 +0000
Manifest this update: Mon 26 Oct 2026 15:00:21 +0000
Manifest next update: Tue 27 Oct 2026 15:00:21 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: oRgk/cptaXmCge9PQ2OIFqAmXPgZRxYtS69jl8xiwa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:0c:d2:83:b4:ae:10:89:83:0d:dc:ec:d0:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Oct 26 15:00:21 2026 GMT
Not After : Oct 27 15:00:21 2026 GMT
Subject: CN=f5adecf58847cf094cd99aa789b9d97c93067785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:40:3e:c3:55:40:d2:d9:00:12:59:d0:28:
8d:86:67:8f:bb:6f:9c:05:db:46:16:0b:43:bc:c0:
c2:18:fe:49:f1:bb:21:57:89:3e:1a:77:5c:66:a3:
d6:30:92:67:7b:11:7f:99:22:f9:28:eb:07:18:cd:
93:66:e7:f2:6f:f0:ab:a2:c7:0d:58:10:76:a1:fd:
8d:17:fd:c5:57:3d:66:c2:f5:96:f3:78:17:45:e5:
66:40:9b:85:84:4f:cd:8c:b7:30:d4:0a:f8:2b:01:
9a:0a:07:fa:6c:81:8a:4a:b6:c6:62:5b:7a:70:c5:
94:15:e4:1d:0a:8a:17:36:f9:78:1e:13:74:0f:22:
9e:b7:d2:df:e3:fc:98:b6:92:b4:69:f8:d0:0f:38:
61:9a:90:76:81:cc:07:ec:c4:1e:8a:f2:1f:0e:77:
b9:c8:5c:ec:e0:0e:6e:82:02:b1:00:cd:23:3c:c8:
2f:ec:91:87:f1:73:9c:fa:e5:e7:6b:06:fe:8b:d6:
29:e3:c2:b2:b0:c5:2d:ac:c0:ab:cc:bc:d1:56:cf:
de:bd:81:36:a3:fd:f1:a2:5b:76:37:5a:5e:4c:7a:
d2:4e:f1:ff:6a:e4:4d:58:04:ae:39:64:f4:3f:03:
a1:bb:41:f5:e0:e0:ee:14:45:f7:bb:69:a0:c1:84:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:EC:F5:88:47:CF:09:4C:D9:9A:A7:89:B9:D9:7C:93:06:77:85
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:94:43:bc:2b:fd:66:2b:c6:1b:b3:5b:98:1b:03:1f:4c:
4d:46:39:9d:d4:00:b2:38:b9:a1:52:66:c2:6f:01:52:64:63:
65:cf:a9:6c:f3:4e:c5:4b:7b:3e:89:13:a6:9d:b3:c1:83:58:
6b:0c:26:35:23:0d:fd:b5:d1:29:61:2d:4d:16:a6:57:52:1a:
d0:c4:96:bc:21:c2:ea:2d:5d:96:22:01:ce:58:9d:3b:f3:7c:
ba:fa:cc:2d:45:18:a4:36:14:79:8f:66:b8:e4:1a:63:4d:8f:
d7:3e:54:60:2e:a3:e0:ad:3b:f8:c3:41:89:12:7a:66:c3:cc:
d7:d3:56:3c:df:ed:33:1d:f8:f7:36:a2:27:7d:f5:0c:7b:69:
63:7a:f7:9a:fd:ae:84:6e:42:b8:78:4d:c0:42:7a:5d:bd:91:
d2:9d:98:5b:b5:bd:bb:f4:4b:13:67:12:81:9c:a7:c3:29:de:
0e:d9:22:6f:d6:4c:a7:81:a4:b3:c8:1b:6b:f6:8d:f5:e7:f0:
0a:3f:ec:e5:dc:dc:a2:f1:2a:bb:dd:95:bb:ad:7c:47:d0:7f:
be:c7:f5:1f:db:f5:5b:e6:0a:09:b4:2b:db:7e:eb:34:c7:9b:
d3:42:19:dd:62:99:12:7a:e0:78:da:61:34:51:36:4a:1e:fd:
c8:08:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:56 2026 by rpki-client