Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: nCXGiPpk8tgFyzczcThrgyfoUKhWhydd/FGD7worK6Q=
Subject key identifier: 42:A0:B2:0B:EA:BF:C6:9C:60:A3:B8:13:28:87:D7:08:B7:7D:73:9D
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 01A08CE8D8E7D3812C9391E2AA8D5A9A5E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1AAC
Signing time: Thu 10 Sep 2026 20:01:04 +0000
Manifest this update: Thu 10 Sep 2026 20:01:04 +0000
Manifest next update: Fri 11 Sep 2026 20:01:04 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: XTnfVEI6pSmFu8fL6WH6XRNnrZxLuoeU46xt80jIvEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:d8:e7:d3:81:2c:93:91:e2:aa:8d:5a:9a:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Sep 10 20:01:04 2026 GMT
Not After : Sep 11 20:01:04 2026 GMT
Subject: CN=42a0b20beabfc69c60a3b8132887d708b77d739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:50:6f:a4:8a:05:8b:fa:03:4a:8b:26:df:
c5:95:63:cd:ea:e2:71:12:7d:38:b8:f3:44:28:02:
91:b3:1d:a5:ec:6a:14:20:2f:25:55:6c:9b:7b:ab:
25:54:6d:f8:72:fc:b7:0e:d0:34:41:3a:fc:e4:36:
7f:38:d0:43:26:28:79:d7:ce:37:81:c3:ad:d3:2a:
c7:de:d5:fa:7d:fb:0e:50:0a:18:41:7c:21:34:b4:
53:ab:45:26:f8:54:c5:0f:c6:cc:df:dc:aa:c2:df:
e9:05:ab:c8:85:f3:89:5b:f3:b1:de:e5:7b:b4:2d:
0f:e6:1e:fa:ac:38:92:80:b2:c1:98:ab:f7:8f:1c:
b7:2d:8a:a2:cf:f0:64:4c:10:a7:ca:0e:5b:26:6a:
5c:cf:01:2b:82:09:e3:b9:40:07:9b:a7:84:af:a5:
b0:9a:f4:f0:18:40:c6:1f:be:24:9a:00:05:94:96:
f1:de:3d:89:a8:62:1b:fb:b4:65:5b:ed:6b:bf:ec:
fd:d4:63:45:0d:e4:48:b2:c4:d3:8d:9e:d2:a8:f8:
c4:b5:be:f4:08:75:e4:ab:07:b7:44:b4:bd:30:3c:
00:44:28:bf:85:4f:97:a9:b6:ab:41:fc:8b:32:60:
de:21:ee:70:63:57:24:df:8a:6f:64:cc:8a:83:e5:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:B2:0B:EA:BF:C6:9C:60:A3:B8:13:28:87:D7:08:B7:7D:73:9D
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:cf:62:74:12:0f:b4:fb:c3:fc:8c:db:a7:18:55:2d:d2:
e4:b7:96:c4:ba:90:b6:12:ef:bc:64:ef:20:00:39:10:ca:81:
ba:a9:3e:a5:32:3d:98:df:67:71:9b:62:de:e2:fc:e2:46:78:
1f:64:f8:85:e6:6e:e5:aa:08:13:bb:68:3e:c3:8c:b2:a7:04:
cf:e2:4f:1e:b2:d5:40:4d:5a:91:34:9f:bf:af:3f:b6:5d:3e:
f2:8f:0c:7f:7f:68:d1:ab:40:db:be:e5:4e:b8:b8:16:62:ff:
4b:84:19:ae:9d:81:c2:f3:34:2d:72:71:5a:fa:87:c7:95:f2:
96:06:64:4d:53:32:61:0a:d1:a5:2a:f2:9b:06:dd:b2:7f:a2:
9a:8a:cb:f0:65:c4:b5:d2:24:64:32:83:e5:7a:23:04:8c:38:
47:3e:94:46:05:3d:1f:ba:55:fb:cd:3b:a9:21:3b:40:3c:8e:
ef:de:15:02:b5:e8:de:72:ef:f3:4d:66:44:94:b1:45:88:67:
4e:fa:9c:77:91:82:bc:0f:df:59:d7:89:9e:51:c3:55:6a:bd:
59:be:7f:d3:63:4e:6a:42:23:44:56:ea:87:60:b3:93:68:e1:
86:a9:39:2e:42:c9:e1:ee:a7:e6:9c:7e:ef:e6:2b:70:39:3b:
75:07:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:42 2026 by rpki-client