Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: 2+FFRD0cItqJDmXsG/4H6NoOsM6iKxTyBGDUH1wPycs=
Subject key identifier: 0F:E3:3C:78:6B:D3:44:4E:D0:3E:8D:9D:E8:56:FE:2E:F1:CE:8E:D4
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 01A0B5096F176E77DFB705EF4CC09C0CD062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: D7
Signing time: Fri 18 Sep 2026 15:01:29 +0000
Manifest this update: Fri 18 Sep 2026 15:01:29 +0000
Manifest next update: Sat 19 Sep 2026 15:01:29 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: gDuHVf4z0t1DlGiXuZheOQgr8f8HhVdvtx5tdRgC2KI=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:6f:17:6e:77:df:b7:05:ef:4c:c0:9c:0c:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Sep 18 15:01:29 2026 GMT
Not After : Sep 19 15:01:29 2026 GMT
Subject: CN=0fe33c786bd3444ed03e8d9de856fe2ef1ce8ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:dc:3c:93:fd:da:a2:5e:8f:63:c7:49:44:
7f:56:be:48:ff:2a:3b:b9:e4:18:6b:e7:46:88:29:
27:ea:dd:2c:71:79:f7:88:b8:55:d3:82:dc:f1:4c:
58:fa:d7:9d:27:88:46:a5:af:76:30:c6:70:01:2d:
e1:b0:dc:a9:22:ab:b3:20:67:ff:77:dd:4c:c2:6b:
77:fa:9e:a6:30:3a:c7:9c:0c:e6:be:d5:af:1a:8c:
67:9d:94:c6:d4:a6:09:ab:81:46:b3:d0:02:97:0f:
f9:d1:81:d8:d6:36:69:95:11:9a:d8:fc:98:f4:c6:
f2:95:9e:27:4a:3b:fc:20:6b:7b:fe:de:05:bb:76:
5e:18:95:15:24:6d:e9:61:a0:00:61:a0:75:93:0a:
13:97:52:c8:e8:f0:57:44:24:f7:fd:d5:28:86:bf:
a1:a5:96:e7:66:db:ff:bf:3e:a2:b5:a1:23:e9:05:
e8:d5:a4:80:e1:17:d9:e1:b5:55:7e:51:f9:e5:7a:
8e:20:03:80:c6:0b:01:80:35:a1:9d:8d:1c:b3:01:
ec:af:a6:d1:d1:69:5b:78:eb:4e:b1:35:e6:df:ee:
cb:52:a4:8f:1d:e9:c9:0e:c7:45:0b:a5:aa:81:8f:
07:03:02:d2:39:4d:cc:c1:21:7d:50:82:d0:0e:fa:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:3C:78:6B:D3:44:4E:D0:3E:8D:9D:E8:56:FE:2E:F1:CE:8E:D4
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:65:81:6b:60:3f:f1:c8:0d:86:02:5f:96:ad:82:45:26:
44:e4:95:b0:bd:f8:ae:ca:63:65:25:62:91:c0:62:25:fd:db:
89:28:83:3d:ca:a8:af:52:25:a1:e5:13:47:f2:f8:af:19:06:
c1:41:70:03:3f:ad:0a:8b:b2:49:cb:1b:fa:b7:ba:59:9d:9d:
07:37:14:b7:e2:4e:97:a8:5d:cc:25:f3:10:c2:ae:ee:99:82:
82:86:67:21:4f:3f:73:b2:6a:fd:40:ed:90:09:f1:16:ce:da:
a7:4f:39:a8:50:7e:00:be:ab:7e:5d:64:1e:15:54:0f:84:d9:
fa:fd:ef:be:cc:30:e2:db:3a:8c:bf:7c:57:68:65:58:df:75:
9f:2c:80:2b:00:ea:98:ff:49:e8:99:1f:2d:e4:05:ff:7d:32:
28:6b:b7:56:6b:1a:db:ad:33:6f:d9:6d:8b:39:12:cb:a8:64:
b3:92:fb:c0:ea:20:b8:d9:73:0a:80:5d:56:e1:7d:30:32:4c:
00:cc:dc:cc:dd:0e:ec:e3:b8:2c:c9:e9:4f:d1:9a:5c:3b:93:
57:e8:1b:9e:5e:38:43:b4:83:3e:f7:9b:7b:81:5b:c6:2b:71:
fd:a9:2f:55:2b:96:3b:54:02:0b:ff:b9:fa:00:c5:e2:1d:99:
e5:ac:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:59:16 2026 by rpki-client