Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: qpUYyCw4HxH+drc3xfaHXVlGe0MpKIOQVVUhUt0CQ6k=
Subject key identifier: C7:B4:FD:A8:B8:FE:5B:4E:B2:B9:8A:F2:29:3A:D3:63:B1:1D:10:BB
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019FA33BE5BD2FD4CBD3F0442FE24E9B0FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1A33
Signing time: Mon 27 Jul 2026 11:00:39 +0000
Manifest this update: Mon 27 Jul 2026 11:00:39 +0000
Manifest next update: Tue 28 Jul 2026 11:00:39 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: QTCDG1TtNJlf4CZ+QiDCeC5rB84BXjp36ymhAB0ka9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:e5:bd:2f:d4:cb:d3:f0:44:2f:e2:4e:9b:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jul 27 11:00:39 2026 GMT
Not After : Jul 28 11:00:39 2026 GMT
Subject: CN=c7b4fda8b8fe5b4eb2b98af2293ad363b11d10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:80:19:01:42:1b:8c:c0:5b:38:3b:cc:b6:
31:f1:f0:2f:6c:94:04:84:0b:0a:25:70:db:ce:73:
99:f7:6f:5c:18:3d:7a:a7:29:37:6f:8a:10:92:f0:
41:5b:cd:db:da:f2:c6:3e:0a:45:e3:70:87:33:65:
ee:c7:ea:3d:d4:9d:9d:88:94:81:63:88:46:78:fb:
d0:f2:05:69:66:16:08:ec:6f:ae:bb:71:2b:76:28:
27:c6:5d:10:fe:f0:fe:3b:6a:c2:98:41:5b:55:2d:
1f:0b:dc:65:05:33:5e:8f:6a:08:5b:18:d8:06:17:
d0:54:7b:6e:72:ae:fb:13:21:a4:aa:87:f1:3d:bc:
ce:36:5d:a3:b1:b9:c6:af:a8:e2:c0:6e:df:89:bb:
44:15:1a:20:45:75:d3:82:08:66:c6:5b:fa:17:58:
5c:5a:7b:f4:47:65:ff:ef:b1:ee:18:e6:06:42:b2:
02:2e:b7:21:0b:c0:ce:29:75:1a:1b:e2:f5:18:83:
87:b8:43:06:82:8c:53:d0:0b:96:c8:51:bc:fa:f0:
4d:f5:9c:36:01:80:74:1e:5a:ab:f1:99:20:b9:b3:
53:4e:a6:3b:f7:66:40:15:e4:6f:6e:41:c6:a4:c8:
53:53:f6:57:b5:86:78:0e:8b:da:08:33:e1:b5:ba:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:FD:A8:B8:FE:5B:4E:B2:B9:8A:F2:29:3A:D3:63:B1:1D:10:BB
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:af:d0:d6:e7:70:ad:63:23:48:44:99:07:41:36:29:4e:cb:
f4:c0:f4:ab:cf:24:d5:fb:53:cd:3e:44:9b:ff:69:28:36:e1:
96:6b:ee:e0:4d:43:66:44:1d:8b:0b:fe:ab:06:39:ab:91:b3:
33:64:88:c1:d1:5b:29:93:26:f6:30:eb:44:d7:d8:91:22:5f:
07:0b:33:1b:e4:84:65:61:9a:42:b8:22:98:fd:ab:05:f7:a5:
ca:a8:21:bc:b6:a0:aa:55:2f:70:b4:0e:9e:90:d1:e0:08:c1:
a9:8b:9b:66:0e:52:ab:5d:08:62:c0:c4:8f:c1:21:3b:8c:b9:
58:4a:fb:70:34:c9:1c:b1:04:33:8e:6c:d3:49:48:28:2a:3f:
fb:05:1d:71:c3:8f:31:ef:f1:39:4d:b1:cd:41:1b:ce:8f:c4:
94:57:c2:b2:75:64:31:b0:1d:e6:78:c0:7c:e1:bb:3a:9a:d4:
72:06:bd:32:2c:eb:b5:06:e7:90:39:de:7f:47:8e:4e:58:1a:
32:de:43:da:9d:7c:31:5a:78:c7:15:a2:83:a2:e7:2c:46:3f:
87:f4:1a:d3:ab:b8:c4:9f:40:84:3a:6b:90:2f:a2:c2:34:27:
af:a9:8b:b3:e9:a4:53:d7:f5:b8:a2:80:23:53:48:d0:3f:ec:
82:36:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:23 2026 by rpki-client