Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: L0BYYOKMQeNLXh4eOUhK0hnvarQiAvH6BclLO1bnwZ4=
Subject key identifier: EB:69:69:F6:F4:1D:D6:E7:3C:45:A8:AA:99:75:88:E4:50:04:95:4D
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019FA14E2315BCEEE07AA225F7708DA03978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1A32
Signing time: Mon 27 Jul 2026 02:01:20 +0000
Manifest this update: Mon 27 Jul 2026 02:01:20 +0000
Manifest next update: Tue 28 Jul 2026 02:01:20 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 84i424QLa7CnP6IeN7mVFKRkrtL40ekCTR7QsjbwdrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:23:15:bc:ee:e0:7a:a2:25:f7:70:8d:a0:39:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jul 27 02:01:20 2026 GMT
Not After : Jul 28 02:01:20 2026 GMT
Subject: CN=eb6969f6f41dd6e73c45a8aa997588e45004954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:57:09:67:ad:c0:04:a9:13:18:c4:69:1b:
9f:a9:ee:a8:a9:93:bf:8a:95:7b:ab:25:6a:84:45:
c0:d8:5d:de:40:98:7a:1f:71:98:86:1c:16:3d:f2:
76:7d:d4:f9:59:b6:d9:de:04:70:2a:16:cc:06:39:
df:db:6b:b6:97:dd:e9:51:12:fb:a7:d7:21:5d:ce:
66:27:01:8e:1a:3f:92:d9:f9:cd:ea:5f:5e:7c:97:
2f:c2:34:40:82:74:ba:a3:88:57:42:6d:1d:8d:2a:
b7:44:6a:57:eb:92:81:b7:73:e4:28:36:b4:a9:bd:
d7:7c:3d:ea:e0:3b:8e:c6:44:8e:88:46:92:40:99:
c6:bd:1e:e7:bd:72:a8:35:6f:89:10:89:d4:cf:7e:
3f:1a:01:5c:e8:f1:11:55:23:60:8b:70:78:7c:74:
26:a5:cd:36:61:9b:bf:f9:98:04:9d:b1:f2:c5:1f:
b7:12:98:3f:83:75:36:cd:08:75:87:bd:fb:4e:48:
a2:77:af:49:cf:7e:01:91:36:ec:b4:b7:6d:17:3d:
23:89:3b:4f:aa:30:67:3c:e3:59:81:fa:b7:94:52:
94:27:6a:17:4d:8f:f9:31:a2:53:e0:2d:6e:7b:bc:
d7:12:14:17:de:50:91:9e:99:c7:78:5d:ec:7e:4e:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:69:69:F6:F4:1D:D6:E7:3C:45:A8:AA:99:75:88:E4:50:04:95:4D
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d1:ce:c2:a9:c7:26:a2:02:dc:24:df:af:45:e3:df:02:92:
19:ee:cb:2a:fd:e9:8f:00:87:a1:be:a4:21:02:f3:db:3f:18:
10:18:f0:1f:9a:05:ad:cf:65:8c:f2:2f:d3:79:02:e7:5a:64:
f6:ac:27:e7:71:b0:31:ed:1f:3e:1d:44:5a:01:0a:1c:fb:3f:
9d:f7:88:e7:45:a1:b5:2e:fa:08:b8:2e:d3:6f:90:81:9b:32:
c6:2a:78:9c:8e:d7:61:e7:fc:5f:00:7b:6f:70:f0:0c:43:a5:
27:d8:18:92:f9:32:d3:21:7e:6a:ff:90:95:33:a9:6a:e3:e0:
c2:47:86:8f:d0:af:b5:e8:c3:ea:d6:f1:1a:43:68:fd:bd:00:
2d:8d:bb:30:80:1c:ea:b4:d8:b0:69:bf:21:be:89:fe:fa:71:
38:85:ef:5c:ee:77:04:6b:87:dc:03:e6:06:55:bf:5c:2a:ed:
fc:de:3f:bf:7d:c3:df:d3:c3:6e:0a:75:e1:ae:18:89:ff:b3:
3d:a1:36:70:91:cc:e3:c3:76:a8:d4:76:18:d1:cb:2a:43:05:
0e:92:fe:fc:84:4d:53:43:8f:8d:c6:d2:9f:a3:e5:95:1d:1d:
45:51:5d:69:9e:c9:94:a1:f6:ba:32:54:39:21:f8:81:ea:bd:
2d:ab:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:36:03 2026 by rpki-client