Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: MWWXnoNq/v4xe0TC7nUeDtwxXmgRnMRRQ+eKW+5x3Qk=
Subject key identifier: C6:B6:C2:93:23:D9:F4:C9:A9:3A:B2:9E:93:8C:51:35:C2:62:C7:87
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019DCE2BD766643D100E78B341369ECD0059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 11CA
Signing time: Mon 27 Apr 2026 09:01:12 +0000
Manifest this update: Mon 27 Apr 2026 09:01:12 +0000
Manifest next update: Tue 28 Apr 2026 09:01:12 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: RE5PiANVXxAkA46X+/REvfXKh+bbECRsGTsphr/jOC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:d7:66:64:3d:10:0e:78:b3:41:36:9e:cd:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Apr 27 09:01:12 2026 GMT
Not After : Apr 28 09:01:12 2026 GMT
Subject: CN=c6b6c29323d9f4c9a93ab29e938c5135c262c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cf:14:f9:40:cc:ad:26:42:80:22:91:3f:05:
e5:81:6d:ba:b6:1f:08:7a:5a:dc:ea:42:c0:bc:7a:
03:b2:f0:97:b1:30:01:42:9d:07:4c:ca:26:9e:40:
81:7e:d8:f6:12:b9:af:8d:fe:1c:62:a2:e9:ec:47:
7d:f4:ea:f9:12:11:f9:f0:2c:22:d4:3c:73:b9:26:
8b:94:fc:9c:0c:aa:83:0a:d8:e7:ca:ef:3a:d8:f0:
a9:27:a8:5d:54:04:63:a9:13:b7:e8:d1:55:86:af:
37:b7:51:39:f7:f1:54:ff:cf:de:b1:d0:12:ee:b9:
d9:61:62:5f:98:b4:4b:9a:77:77:52:87:5a:c4:2d:
1b:e4:cf:f0:ad:1d:2e:19:d9:d5:f6:b4:b4:10:9c:
d6:b4:44:16:17:82:97:1a:18:a0:6f:fd:f2:f4:6d:
27:f0:58:79:e7:aa:90:2e:6e:88:b3:95:1f:f1:68:
18:c0:39:b3:d4:32:dc:15:03:31:32:6d:85:b1:8f:
3a:92:6f:ca:e2:f6:12:82:67:6b:c3:a2:85:d7:7d:
f1:65:52:5a:ad:42:3b:2e:36:8e:6b:b7:cc:f0:3a:
7a:08:ea:f7:f7:90:d0:6b:fe:42:3e:00:24:b8:09:
96:e8:89:a6:84:b5:67:28:40:e4:67:6b:41:07:7d:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:C2:93:23:D9:F4:C9:A9:3A:B2:9E:93:8C:51:35:C2:62:C7:87
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:2f:b9:e2:4c:07:a3:8e:fb:f1:63:cc:6a:5c:45:06:29:
a1:b1:a5:5a:6e:a6:60:75:45:5b:52:d4:94:bb:90:25:51:65:
38:70:0e:74:5b:f7:21:2c:79:f1:47:66:18:18:0b:7f:ad:9f:
08:6c:71:dd:62:7c:d2:5d:7d:21:1c:8f:e8:ff:00:ca:bf:f2:
b9:70:16:2b:38:b1:b1:c6:3c:df:d9:ea:fc:9b:e9:d0:dd:36:
80:aa:8b:0d:12:93:30:7a:d7:fb:8f:b7:06:4d:d9:e2:e8:48:
19:03:d5:55:3b:00:b6:9f:33:75:3f:7c:15:77:26:9b:21:cb:
54:54:79:01:a8:ce:f0:6a:61:fc:35:98:7d:9f:90:6c:cb:49:
99:ae:67:13:55:c9:09:fb:08:91:4c:35:de:ef:12:7a:70:7a:
47:8f:04:90:e6:2e:14:e9:7a:e5:c8:49:c1:07:9c:cc:fb:7e:
03:b7:b0:9f:db:dc:3b:fc:45:c4:90:fe:07:f8:d5:7f:62:47:
e1:39:0c:c2:a3:fc:a3:c0:11:95:df:4b:75:3a:f0:86:1a:ae:
19:83:59:71:95:c4:57:d6:2d:a4:b5:e8:3e:f4:b4:43:3c:62:
b9:18:44:93:91:3e:20:97:d9:bd:e7:6f:1a:54:54:71:1e:74:
33:ca:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:38 2026 by rpki-client