Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: yakCkuv7MWBnNx2LEuQZX/kvLb3DESdl3BpEjDJHwpU=
Subject key identifier: 07:1B:40:99:E2:90:18:B0:9F:31:57:C6:F4:43:B0:48:12:B7:0C:4F
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01A0B6F80828FE7AD5269166B260720355E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1145
Signing time: Sat 19 Sep 2026 00:01:43 +0000
Manifest this update: Sat 19 Sep 2026 00:01:43 +0000
Manifest next update: Sun 20 Sep 2026 00:01:43 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: 1bHXx6793xJyBGhIIJSqkJqOymXL9SqwrNLf3G/WiNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f8:08:28:fe:7a:d5:26:91:66:b2:60:72:03:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Sep 19 00:01:43 2026 GMT
Not After : Sep 20 00:01:43 2026 GMT
Subject: CN=071b4099e29018b09f3157c6f443b04812b70c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:a7:73:a0:c1:8a:e3:86:78:40:0f:51:57:
1a:5d:b1:97:7e:bb:e7:a4:e7:22:29:fc:66:92:26:
c6:b5:ca:8b:7e:86:0f:55:d7:91:dd:65:38:71:01:
32:1b:f3:34:b1:c6:cf:3a:25:64:0e:c2:9a:b3:52:
4d:b3:dd:dd:06:67:3d:ad:90:92:0b:c8:df:be:d5:
7e:7e:9e:df:4d:25:bb:70:95:3f:16:36:18:1d:55:
31:2c:57:d4:a8:00:09:87:83:5b:5a:25:5f:53:46:
a1:7d:89:08:f1:0e:93:a3:c5:05:4b:9e:d3:fe:35:
65:e2:5e:d8:67:db:ac:1a:79:4b:66:9b:fb:c9:f6:
69:d9:11:c6:02:f1:ec:5f:25:e9:f2:81:b2:7b:fe:
a3:4d:36:ed:b5:d5:e4:0f:32:2f:1d:d9:3f:40:f5:
a0:7f:0e:7b:71:b3:8e:4e:3c:1a:24:34:de:d5:63:
92:9e:46:04:d8:ba:fe:c8:4d:46:a1:77:6c:a9:8d:
31:85:9f:ce:54:97:f9:bf:e9:41:89:23:3d:0f:12:
10:1c:8a:f0:d4:d5:df:02:ce:95:59:de:43:de:16:
b9:1b:15:88:21:4e:38:f3:11:f8:5d:a1:8b:71:5f:
c0:28:19:6c:b6:e2:a2:4a:63:da:ee:1c:aa:5b:24:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:40:99:E2:90:18:B0:9F:31:57:C6:F4:43:B0:48:12:B7:0C:4F
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:74:ee:1e:b1:ec:70:71:f0:71:1e:67:79:2e:2b:39:29:
fd:65:40:af:d6:ae:a9:5e:11:cd:d4:05:eb:e4:42:93:db:b7:
b6:37:69:09:b9:49:17:03:a0:51:b7:94:35:63:f2:5a:4f:a5:
eb:a7:31:16:7b:60:5f:cb:34:b8:b3:ab:56:06:a3:f0:6b:62:
a2:5c:7e:8c:bd:ce:ee:53:48:1e:8d:4e:0d:d3:6f:f6:39:bc:
f9:11:4f:f2:b9:97:66:39:fa:5c:51:ba:61:eb:4e:6b:a7:c2:
cd:3a:be:58:14:76:4d:00:07:69:70:19:1a:21:41:78:77:f5:
cf:44:e6:5b:a2:e4:13:91:2c:85:9d:a1:f8:8d:a7:29:6e:93:
9b:40:11:3d:0d:ea:4e:40:d5:be:56:8a:f5:f3:6f:cc:7b:38:
cb:55:bf:51:a3:4b:f9:67:0a:84:d6:70:72:36:1d:80:36:70:
76:94:ea:00:e0:25:8f:0c:a2:3f:3b:7d:33:ed:e7:2d:e8:ad:
e9:30:bd:14:5c:a4:5d:33:7f:2e:91:76:bb:a4:a8:f3:18:56:
96:13:25:20:f1:ff:01:01:3c:55:05:7d:2b:8c:55:f5:c1:02:
4d:db:8d:9f:04:74:0a:70:0d:30:e3:b2:23:4b:04:95:94:bc:
52:c0:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:08:08 2026 by rpki-client