Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: SaoGZPgvTPUYWcv+kLQQJXiHTLfhiZPDEnIKsBRsgzw=
Subject key identifier: CE:A5:63:16:C8:49:AD:27:A2:C2:5F:97:0C:A1:CA:6F:BD:35:8B:CA
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01A06EA7401BD11FBC296B329618377543F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 18B9
Signing time: Fri 04 Sep 2026 23:00:49 +0000
Manifest this update: Fri 04 Sep 2026 23:00:49 +0000
Manifest next update: Sat 05 Sep 2026 23:00:49 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: O8uEJcBlapTlkJjYaZ3Amb4xaDWizSasD6OIIOPoWao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:40:1b:d1:1f:bc:29:6b:32:96:18:37:75:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Sep 4 23:00:49 2026 GMT
Not After : Sep 5 23:00:49 2026 GMT
Subject: CN=cea56316c849ad27a2c25f970ca1ca6fbd358bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:24:49:87:93:c0:95:9b:cb:c6:e0:85:05:
bb:51:d0:43:76:2c:12:23:42:04:79:63:c4:8a:61:
4d:b8:5f:bc:19:b5:52:49:5a:f1:4e:09:39:32:a9:
e1:36:ce:7f:fc:65:78:75:7f:3e:ed:e7:4a:42:bd:
81:9f:b1:3e:8d:28:0d:29:a3:1b:61:11:bc:80:ef:
30:7d:94:19:85:a5:69:cb:ab:39:ba:b0:dd:df:64:
e5:45:60:bb:cd:5f:21:0e:0c:e6:a2:a3:35:e0:65:
8c:b7:8f:cf:a0:01:cc:cb:c2:46:ff:ae:3b:f6:04:
9f:4a:0f:58:73:4f:3d:eb:99:6b:f7:70:a3:e6:17:
37:29:8c:c7:3c:3a:df:a3:82:d6:ec:77:60:f7:36:
52:3c:bd:89:5b:71:89:07:22:d1:0e:ae:5e:12:8c:
42:eb:e2:6c:51:b6:e2:63:3d:fc:e4:77:97:87:e5:
7f:72:4c:2d:67:d8:19:c8:bf:e1:2e:ef:2f:46:90:
9b:67:cd:36:9c:f5:0e:0f:77:dc:a6:31:19:db:1b:
66:7d:17:4a:c0:ec:7b:07:5c:84:f8:00:f2:d2:45:
71:79:71:e4:6e:87:c9:c3:d9:91:a1:6f:86:1f:57:
3b:29:3d:13:85:0b:bd:f6:88:00:47:fb:ac:4c:11:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:63:16:C8:49:AD:27:A2:C2:5F:97:0C:A1:CA:6F:BD:35:8B:CA
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d3:f0:c0:27:bb:66:7d:77:9e:e8:de:57:e2:69:33:1a:f9:
d1:66:04:86:c3:39:1d:20:71:c5:98:1f:8d:80:ce:9f:c6:e3:
78:72:ad:f0:0b:dd:0e:b3:9a:49:be:51:c8:3e:c9:fa:87:60:
10:6a:2e:0b:1d:70:4c:84:3b:fc:af:a6:ed:2f:91:d6:82:e0:
6e:1f:e9:f4:13:bd:36:8e:b6:29:5b:e5:f6:17:91:c9:b2:b0:
66:f2:35:cb:16:5b:93:df:50:00:92:35:82:5d:63:e9:1d:48:
dc:6a:84:70:07:30:71:35:65:3b:7b:76:c9:b5:8b:2e:1b:b8:
fa:04:1f:19:d8:06:a8:6a:aa:cd:99:a1:d4:e5:ea:49:f4:e4:
98:15:84:6e:e8:af:02:41:4e:9a:c5:eb:38:8e:3d:e9:b9:ca:
59:d7:1e:34:0e:b2:55:55:14:b2:24:a4:f2:2b:a3:bf:68:17:
bd:f7:96:72:5c:55:d7:69:f5:e3:44:43:d1:d6:1d:15:72:45:
53:2c:7f:fc:07:dd:30:92:71:bc:10:d7:76:71:d6:fa:77:2a:
a3:2d:90:ba:f4:32:fc:64:a2:4d:ab:98:de:08:19:85:98:f2:
36:9a:cf:d9:7b:68:96:bb:35:e8:3f:d5:7f:f4:82:7b:da:fc:
bd:80:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:57 2026 by rpki-client