Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: vQGVu7OO+m3adO1YMtzxCc8ET1m0NkbX7pMHGyRdLiI=
Subject key identifier: CF:9C:6F:9B:19:4D:95:58:EA:EE:79:27:2F:9D:6F:8C:6F:5C:08:15
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 01A08D8DC4832B9EADC179F85B8A6401BE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0416
Signing time: Thu 10 Sep 2026 23:01:13 +0000
Manifest this update: Thu 10 Sep 2026 23:01:13 +0000
Manifest next update: Fri 11 Sep 2026 23:01:13 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: 2nQLk8lU1MjOLg9HqG9AQNGpY7QVyL7xW/WfGcpx89E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:c4:83:2b:9e:ad:c1:79:f8:5b:8a:64:01:be:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Sep 10 23:01:13 2026 GMT
Not After : Sep 11 23:01:13 2026 GMT
Subject: CN=cf9c6f9b194d9558eaee79272f9d6f8c6f5c0815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:3a:de:36:a8:d0:69:39:0c:91:33:c7:68:
d7:89:1f:2a:a8:9c:8f:5d:64:02:d3:55:5c:bb:7d:
de:28:03:38:df:27:5a:e0:94:fb:bf:f4:67:c0:5c:
17:46:3f:fe:6d:66:7d:01:ba:24:24:e5:55:0a:37:
b8:96:34:41:dc:1a:48:31:f8:e8:ab:51:98:22:4a:
9c:5f:e4:1c:67:37:30:c2:c7:80:c6:7b:c1:65:ec:
bd:6a:00:80:88:5c:9a:0e:08:03:70:e4:e9:20:04:
ac:ff:91:f5:1f:37:b8:80:44:b9:5f:c5:cf:79:48:
05:9f:9f:38:66:01:1b:af:08:f1:5c:f9:a7:97:2b:
03:46:a3:6b:bc:91:5a:21:9c:6e:95:01:04:36:61:
8c:1b:26:11:6c:f4:31:4f:4e:77:95:b8:23:73:96:
0a:a3:fd:89:a4:94:92:bb:12:59:82:22:46:7a:8e:
46:e1:d4:ad:28:90:00:05:54:d7:26:bf:54:c6:81:
6a:27:07:32:ad:5f:5d:90:77:a0:1c:fc:09:07:72:
30:82:dc:3f:0c:e4:bb:89:c1:b1:35:ef:36:59:5a:
6e:54:8b:66:55:26:91:b1:b6:5c:b6:4a:ac:fe:a5:
3e:3d:42:39:79:cb:68:04:9a:cb:93:a7:d6:cd:68:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:6F:9B:19:4D:95:58:EA:EE:79:27:2F:9D:6F:8C:6F:5C:08:15
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:71:df:8e:5a:6e:be:38:e6:4d:f3:9a:6a:8c:12:5b:2f:e1:
46:15:05:c9:4f:78:97:3b:8c:0d:ba:a4:41:d5:1f:07:af:b5:
c1:e8:3c:69:33:3c:08:28:90:09:c2:8c:c5:15:29:c4:95:07:
f0:7c:34:26:6b:73:ad:ae:6f:4f:44:93:d3:62:df:90:c4:36:
9c:52:e8:7e:ac:c8:7b:78:e9:6d:a3:ab:8b:c0:5f:29:03:17:
a7:d0:c8:97:1a:e3:26:7a:6b:5c:69:b0:f5:ef:61:f1:a5:00:
62:7c:1a:5e:ed:be:0b:f1:f9:83:c8:8d:8e:85:a7:17:83:97:
e2:29:d5:62:4a:a0:cb:c3:a5:37:a4:56:f2:7d:a6:fc:62:68:
c7:97:73:fd:c8:50:a5:d1:9c:f4:f7:ac:fe:d7:e5:02:08:2e:
d1:fa:42:7a:9d:fd:92:a6:e9:18:af:a6:b4:97:58:02:91:d9:
97:aa:a3:75:96:f7:ca:ee:b9:19:1b:93:15:58:a1:2f:f2:36:
23:2e:1a:e6:34:a8:e7:b7:32:83:2b:fa:81:8b:54:25:e4:d9:
e0:72:2e:9d:4a:83:26:5f:91:83:35:da:be:35:d3:e6:fd:a2:
2d:d8:8a:5d:1b:b2:93:23:dd:91:e3:87:ce:31:b6:a6:04:90:
85:dd:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:31 2026 by rpki-client