Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: CCWkkUbF4a2IGqsPHBvN4/fskAQN11dKnhOFUDQcKtg=
Subject key identifier: 10:A8:5E:8E:6F:F0:86:13:07:AB:09:84:50:C4:3C:7E:9A:19:CC:87
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01A08C0D52A670682F9513680FEA1AB808B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 1574
Signing time: Thu 10 Sep 2026 16:01:18 +0000
Manifest this update: Thu 10 Sep 2026 16:01:18 +0000
Manifest next update: Fri 11 Sep 2026 16:01:18 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: yIB4AzGpo/TQ5nvBa/0wYG2qrLV/d8umJScsqw877EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:52:a6:70:68:2f:95:13:68:0f:ea:1a:b8:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Sep 10 16:01:18 2026 GMT
Not After : Sep 11 16:01:18 2026 GMT
Subject: CN=10a85e8e6ff0861307ab098450c43c7e9a19cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:5e:8b:2d:18:df:28:93:30:be:b9:7c:7e:
09:17:0a:64:aa:ca:a3:19:2f:2f:16:aa:27:ee:a9:
ec:ad:6c:ee:56:9b:f7:9f:38:79:23:a1:96:6e:58:
bd:fe:af:1a:fa:9d:70:af:ae:9a:8c:f8:d0:5e:07:
fa:78:4a:a4:32:a1:f0:cd:42:ec:3b:4d:bd:0f:ce:
aa:1b:d2:77:f0:ad:07:89:e6:31:7e:15:01:d2:5a:
6b:c2:76:ba:b5:52:e8:45:7f:f3:9d:6d:70:3e:e7:
0d:f0:7a:08:b6:eb:c5:ba:8b:43:32:1c:8e:ce:cd:
b8:dd:8d:ac:6e:35:7b:cc:1a:50:b1:e0:7f:56:c9:
52:f4:73:77:20:b4:ca:6e:d9:92:2e:18:88:ba:dc:
f8:44:fe:32:78:a8:e0:95:ee:f7:a6:a8:27:f6:02:
15:9d:fa:3f:42:32:da:c3:f2:29:1a:ff:3f:7c:5f:
1c:4a:f7:f1:c0:de:36:c7:c4:f2:d2:17:69:19:00:
d8:e9:b8:ff:5e:8c:4f:e6:01:1c:f5:53:e9:f3:ae:
92:37:80:b8:bd:b8:6a:89:28:78:c2:ad:02:02:ad:
df:cb:69:06:c8:ee:da:fe:f9:fb:ed:7a:cc:04:de:
2b:da:3f:0c:06:e9:6a:ca:b6:42:6c:2c:e2:93:26:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:5E:8E:6F:F0:86:13:07:AB:09:84:50:C4:3C:7E:9A:19:CC:87
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:80:cd:f8:31:fa:d9:73:9f:5d:69:f2:59:93:69:fb:a9:
50:f7:26:a7:db:f3:d8:38:d9:68:72:47:e8:e6:b6:5c:76:1a:
ae:99:12:15:1a:83:93:6c:25:4f:88:85:db:9b:5a:6e:e2:6d:
30:77:1c:d7:fc:80:24:af:d8:e4:81:5c:4e:9c:64:35:94:06:
5f:ac:04:97:4a:11:00:3b:90:ea:95:e6:6b:16:95:b7:07:08:
6f:b5:7f:92:55:93:cf:21:d3:df:5d:e1:08:bd:bd:1a:33:d7:
f1:e8:50:f8:7e:c3:5b:84:da:df:49:dd:a3:13:f6:32:01:06:
ab:b4:62:72:ea:db:c0:5e:62:85:dc:3b:d7:43:e2:11:05:d9:
1f:d6:d6:03:ba:6f:bd:f4:b8:01:30:6c:38:cc:4a:04:59:71:
b6:1d:75:e3:eb:92:60:23:b3:62:6c:8b:44:0a:26:60:6e:9d:
ea:6c:5d:16:91:eb:c9:71:2a:62:c0:21:64:c6:83:0c:66:a9:
b3:c4:03:fa:0c:b8:4a:27:84:d7:11:a9:75:71:6e:e6:b6:92:
54:81:f3:ae:64:38:cd:64:be:61:3d:6d:5f:57:82:f8:a4:af:
93:de:62:fb:13:9a:02:7b:16:1c:28:e9:78:a2:a2:5d:44:54:
02:bb:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:08:30 2026 by rpki-client