Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
File: Y56u7x9LomYtRYnGlhfCIjT8f9U.mft (raw, json)
Hash identifier: +6W6TEC5wuWJbhaYdzh/Uq+A/LU8SOR0GajKgwb29UQ=
Subject key identifier: A1:3F:C2:54:B4:68:7E:09:CC:A1:25:A5:47:61:B3:02:D3:93:34:6B
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 01A0B80A105DA14CC63595C69AA48CEAC305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
Manifest number: A7
Signing time: Sat 19 Sep 2026 05:01:02 +0000
Manifest this update: Sat 19 Sep 2026 05:01:02 +0000
Manifest next update: Sun 20 Sep 2026 05:01:02 +0000
Files and hashes: 1: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (hash: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=)
2: Y56u7x9LomYtRYnGlhfCIjT8f9U.crl (hash: Og5LPK0YsaApip9K9KRGuWNomcXWGMP/KxVh2qCEP4Y=)
3: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (hash: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0a:10:5d:a1:4c:c6:35:95:c6:9a:a4:8c:ea:c3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Sep 19 05:01:02 2026 GMT
Not After : Sep 20 05:01:02 2026 GMT
Subject: CN=a13fc254b4687e09cca125a54761b302d393346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:99:0e:02:80:80:00:4f:76:b0:23:bf:96:
b4:66:5a:48:34:f3:cf:0e:fd:31:d3:3b:23:0c:0e:
6c:34:99:73:e1:da:f4:ce:f4:af:60:9d:34:e3:b9:
0f:74:66:64:59:1e:51:24:de:eb:1f:6d:b7:9c:a5:
67:42:19:17:12:ee:d7:65:1f:a4:16:3f:e4:f0:2e:
4a:bc:37:00:d8:ef:ba:ce:04:62:65:b0:82:8e:2a:
c5:7e:a1:55:68:cc:fa:3a:7f:49:14:c9:66:ec:e4:
cf:f0:10:81:8b:47:74:58:bf:5f:f0:35:84:5d:43:
65:dd:05:8a:42:23:74:c3:a7:e1:73:40:e3:23:4e:
4e:39:1c:17:e3:0c:99:03:32:00:ff:71:7b:43:a7:
0d:1c:de:43:a8:f7:39:ac:f7:6c:07:51:ea:4a:93:
b0:ed:55:8e:23:d2:fa:bb:99:22:74:7d:23:0d:cf:
ae:72:84:06:3c:87:80:72:56:1b:e4:81:6d:02:1a:
e8:59:8b:b3:ab:a1:b5:73:de:f0:4f:1b:c6:e4:46:
06:8e:44:d3:c2:d9:23:5f:0e:c5:62:fa:f7:50:62:
ef:a8:57:b8:72:7e:0f:ed:c5:fb:50:01:e9:30:01:
5e:8e:73:3c:3a:43:eb:bf:17:fd:3c:9f:c1:57:9e:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:C2:54:B4:68:7E:09:CC:A1:25:A5:47:61:B3:02:D3:93:34:6B
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:64:86:55:47:7b:ab:03:36:87:6a:0d:38:1e:12:6c:ad:df:
88:72:4f:84:32:4f:a5:9b:46:c3:57:47:19:b9:52:b7:ff:5c:
5b:13:95:36:fe:d2:3e:b6:b5:d4:cf:4d:26:28:00:dc:67:da:
13:92:ff:d3:23:a3:19:3a:3a:31:54:c4:96:ec:fb:90:b0:6c:
1e:5d:bb:8a:46:42:fd:d7:96:a9:f4:83:21:4d:e1:69:4c:b5:
a4:c8:20:92:3e:eb:59:b4:64:72:13:24:c2:0b:5e:79:92:82:
66:f6:98:e4:3b:08:2f:b9:8f:79:5c:42:53:98:a1:64:26:c9:
b3:27:26:de:0d:c6:50:d4:b3:e3:25:70:ec:b4:a0:2a:2e:11:
17:90:ce:de:0c:ab:5d:dc:cd:4f:89:1f:a0:e2:ac:3e:10:6e:
76:7c:9a:af:a0:01:5c:41:ae:8a:6d:e6:14:5e:19:93:0d:17:
14:4e:3b:c9:5d:77:1d:65:3e:80:75:c1:c9:90:a2:43:a9:4c:
09:87:60:8e:a3:77:c3:e3:3f:f2:bf:e1:63:ed:d8:95:b6:17:
6d:88:c1:4b:c2:ee:a6:ff:f3:80:f1:cc:ae:73:0e:7f:7c:b2:
79:fc:29:7d:ea:b2:19:94:c6:c3:d3:0d:dc:15:a8:22:4b:3d:
ba:b3:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:43:11 2026 by rpki-client