Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: oVMn+UF4hYxlwtBiMrl9zw6VQ8APUM906bTbiLNrL/M=
Subject key identifier: 39:F4:97:92:C6:97:7B:E5:DE:80:07:F6:AC:E3:D7:FF:80:3A:AF:F9
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 01A1822B58CAF15691588DF0DE7D43905AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1B2B
Signing time: Wed 28 Oct 2026 11:00:41 +0000
Manifest this update: Wed 28 Oct 2026 11:00:41 +0000
Manifest next update: Thu 29 Oct 2026 11:00:41 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: iD2BewXZQu4Rc/izWIyx5oeym+ZZYSUxVp8CsNrwxpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:58:ca:f1:56:91:58:8d:f0:de:7d:43:90:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Oct 28 11:00:41 2026 GMT
Not After : Oct 29 11:00:41 2026 GMT
Subject: CN=39f49792c6977be5de8007f6ace3d7ff803aaff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:ff:6d:83:6c:b8:e7:55:55:3d:58:9a:49:
6b:2a:d9:3a:12:c6:b7:ee:e4:8b:6c:a2:d7:b1:79:
a5:d9:77:fe:01:d1:4c:d7:71:78:e8:c0:91:5e:35:
30:e4:fd:d4:37:8d:de:c9:7e:a7:ab:a9:92:20:c4:
8d:2a:f9:d6:3f:96:47:36:bc:b6:30:73:4f:cb:7d:
1f:e7:8e:d0:93:ee:0b:cf:aa:9d:72:f6:6b:80:cc:
f0:02:95:22:23:36:64:dc:07:bc:f1:0b:f6:a3:05:
ad:c3:59:35:34:e9:ae:f8:82:63:fb:a7:e0:10:e7:
ac:b7:38:93:16:5e:b6:27:d9:7d:22:6e:85:5c:71:
d6:71:5c:06:b5:a3:25:23:f6:35:fb:ab:13:28:5b:
9a:f2:41:73:a4:17:cc:a2:22:99:01:0f:d1:e7:32:
66:fb:37:90:1f:db:20:e5:f5:60:b1:56:d4:63:0c:
35:67:1e:27:74:a1:55:d1:3d:bc:d4:a5:ab:ca:bd:
05:30:0b:82:64:79:ed:47:0e:74:94:cf:b1:57:f4:
71:74:22:fc:16:a8:b5:24:28:b7:30:fc:cd:78:95:
60:2e:b2:96:5a:e8:e1:8f:10:98:84:87:36:9d:e2:
4f:88:32:84:06:1d:63:58:06:2a:36:83:df:57:2f:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:97:92:C6:97:7B:E5:DE:80:07:F6:AC:E3:D7:FF:80:3A:AF:F9
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:3a:3d:dc:e6:b0:03:2b:c3:9c:d7:27:d1:a0:d4:f7:85:
94:99:3b:7e:a4:f7:9c:c1:28:0a:2a:25:83:db:9a:a4:80:27:
f9:67:6b:f6:dc:9c:cd:f2:0d:98:d1:5b:7e:ba:e0:e9:78:99:
ab:b7:be:5a:ca:9a:5a:a9:cd:3f:60:96:4b:c7:1b:88:b0:b9:
80:fe:4f:10:90:dc:a9:03:32:26:f0:ff:29:a4:3b:72:e4:41:
f5:41:b4:1b:6a:a3:16:5a:f4:a4:52:f5:b9:86:36:74:c8:2d:
7a:a1:cc:7c:ea:be:f8:d9:eb:93:31:d4:ec:c9:e4:f5:83:cb:
4c:35:4c:80:a4:a6:49:26:2f:3f:54:0f:03:2e:fa:48:4b:40:
a2:d7:9a:44:a1:87:8b:7e:a1:d5:a7:d2:ff:92:26:1f:6f:83:
d4:34:3d:40:ba:4e:c5:44:e5:38:56:d8:23:07:9e:16:e9:f9:
fe:99:b8:59:05:02:db:0d:95:e5:c3:6c:ed:25:91:a8:7e:c9:
cc:a6:3c:ca:e1:92:50:9a:80:89:76:52:2e:97:48:6a:41:f0:
c7:45:e9:74:94:d9:52:94:9f:3d:b3:72:18:2a:1d:82:4f:b3:
77:fd:50:9e:85:f0:c9:99:c2:cd:17:fd:d7:6e:2e:79:c9:ba:
4e:8f:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:53 2026 by rpki-client