Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: ZRon65sL6S1EdMzl4ShQzIwtyTaEu4lcjx/h8Fo/VqA=
Subject key identifier: B2:A4:6E:9A:87:69:4C:A9:D9:56:03:39:C6:5F:6E:CD:5D:7D:B7:4A
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 01A15BC2B39AB64C2B44C34AAF9EEA006B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1AB1
Signing time: Wed 21 Oct 2026 00:00:48 +0000
Manifest this update: Wed 21 Oct 2026 00:00:48 +0000
Manifest next update: Thu 22 Oct 2026 00:00:48 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: sn95uA3LB6E+G2S+22xbcOZBIZUp/4w5x6f0xkVXRys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:b3:9a:b6:4c:2b:44:c3:4a:af:9e:ea:00:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Oct 21 00:00:48 2026 GMT
Not After : Oct 22 00:00:48 2026 GMT
Subject: CN=b2a46e9a87694ca9d9560339c65f6ecd5d7db74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:09:06:16:3c:4a:6f:15:3e:b7:d3:72:9d:
62:8d:e1:74:d9:ac:ae:d1:a2:54:54:7d:bb:92:48:
e3:d8:02:6b:d1:30:6d:e2:56:49:bf:60:ed:e1:41:
5a:cf:58:c1:45:17:a6:4b:b5:cb:e9:9c:37:36:19:
f6:e4:02:fd:76:f6:1a:ff:e5:34:11:c1:30:fe:85:
6a:2c:27:9e:01:30:2c:f4:c6:4c:66:5d:38:5b:64:
2e:ce:9f:93:62:59:0e:9d:f3:0f:e3:04:9d:44:a1:
88:8f:df:30:5c:ca:3b:ba:1f:84:c3:f6:19:3c:87:
2f:dc:7e:c5:01:1c:01:8f:13:9b:1c:ce:22:ae:65:
49:3a:de:bb:87:39:b1:67:8c:e0:39:ce:3f:1d:e6:
37:2a:e8:63:3b:12:26:ec:61:bb:2e:70:d7:fe:7b:
fc:a8:e0:4f:ee:f6:a7:f3:20:92:b4:7b:be:39:15:
2f:7e:00:5e:8b:d4:fb:7c:6b:67:a7:df:4e:88:53:
db:ed:9d:2e:e0:32:38:5c:89:50:f0:2f:6b:4f:85:
a4:e5:d0:2f:40:86:6c:53:f3:4e:ce:d9:c8:1e:e1:
15:3d:df:07:4d:ea:b3:b0:56:e5:33:b9:ba:86:b2:
b8:0e:63:b3:7c:68:63:44:b8:17:1b:f4:5f:4e:65:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:6E:9A:87:69:4C:A9:D9:56:03:39:C6:5F:6E:CD:5D:7D:B7:4A
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:87:3b:38:85:7a:40:b2:8f:ef:f2:46:73:26:bf:28:22:29:
34:b3:69:99:41:3d:d4:b3:f7:96:4a:3b:fb:1c:b5:24:7b:cb:
c1:d3:08:d4:00:f4:53:f8:7f:58:58:1a:00:c8:c0:ca:11:f9:
63:29:38:84:b0:9d:03:b1:35:b1:31:a8:b2:e2:57:9b:a2:aa:
66:e2:66:25:ff:af:d7:48:81:b3:f2:e8:13:48:79:00:46:d8:
1b:c4:50:62:17:20:9f:2a:64:96:47:c8:9a:08:aa:5c:ef:65:
2b:17:05:c9:96:5b:2c:61:20:71:92:23:f3:ba:83:b1:92:f2:
71:dc:e9:fa:8b:e8:32:51:e7:cb:52:af:69:a3:b6:35:51:49:
5d:44:a3:4e:93:a2:d8:13:73:5e:1a:cc:9c:34:d6:c4:b0:e5:
99:48:e7:df:32:4e:f5:ad:c3:4e:ef:fb:9f:2b:ab:f1:0d:f8:
62:2c:20:6d:75:45:e8:27:e1:92:77:c9:7e:59:53:cd:c7:73:
82:d6:55:97:94:53:0a:50:b1:ff:9b:a6:e7:98:4a:2d:f8:bf:
08:31:63:fb:1d:3d:18:a7:71:0c:82:40:28:ef:d7:cb:48:b3:
81:e8:39:34:7b:13:2f:53:fa:cb:3f:9a:46:78:84:6f:e5:b4:
2c:4d:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:35:05 2026 by rpki-client