Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: e+6Cfm1HO+ikq8R1IP93MZVmwqQR6TgauRSyWPnHjmM=
Subject key identifier: EB:DA:EB:73:69:D1:4C:8C:67:47:E4:F7:59:77:6A:28:2C:E1:AE:21
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01A10C5DF7E735D0E0F6DBC91BDE78143D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0D9A
Signing time: Mon 05 Oct 2026 14:00:47 +0000
Manifest this update: Mon 05 Oct 2026 14:00:47 +0000
Manifest next update: Tue 06 Oct 2026 14:00:47 +0000
Files and hashes: 1: UdacM9ueU4fTZAcn05BbHDu10YY.roa (hash: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=)
2: VsR35aykkc_iAYM4SDexkh120pI.roa (hash: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=)
3: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: SOK7MDFQltKBhM38sL2ZtJF+VGIhn2mY+UyXXhPVZ+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5d:f7:e7:35:d0:e0:f6:db:c9:1b:de:78:14:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Oct 5 14:00:47 2026 GMT
Not After : Oct 6 14:00:47 2026 GMT
Subject: CN=ebdaeb7369d14c8c6747e4f759776a282ce1ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:f7:dc:e1:9e:e5:fb:e2:c5:94:17:a7:c7:
ef:89:66:45:ed:36:59:97:96:5e:32:bb:77:b9:4c:
71:07:49:d2:e5:30:92:db:96:59:18:d1:2a:90:b0:
9c:f0:95:6c:2b:10:ca:45:b0:18:ae:2b:24:49:9d:
bc:99:e3:88:33:2a:12:6e:1a:85:20:69:23:bf:41:
30:8e:9c:b7:2d:e8:15:0a:69:0a:d2:3f:03:c0:07:
83:ef:fb:4c:f5:28:40:bd:61:0b:b0:98:cc:e1:d6:
fe:25:17:38:54:8d:af:60:d7:b7:58:9a:f3:19:7a:
db:84:ec:3f:e0:3e:6d:53:3a:4e:b3:b2:49:63:f4:
8f:ea:47:01:4c:93:69:c9:e0:f8:98:c8:e6:6b:e1:
4a:62:4b:ea:78:71:b6:68:ce:9d:be:bd:c5:12:1a:
57:d5:96:7e:7c:27:50:4e:df:8e:10:e8:8f:05:35:
10:fd:27:b0:f2:35:b6:b5:2b:54:7f:ca:de:fe:19:
39:b9:bc:15:03:51:58:a8:ed:17:8c:b9:04:0d:06:
a7:1c:36:ea:59:db:66:08:04:e7:2d:2f:d6:0d:7e:
7b:71:8e:bc:71:5b:39:53:c6:4a:e5:84:50:f1:16:
03:6d:44:23:88:82:b6:7f:64:c9:3a:d7:62:9b:fa:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:EB:73:69:D1:4C:8C:67:47:E4:F7:59:77:6A:28:2C:E1:AE:21
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b3:bb:3b:31:12:c4:da:76:74:9a:77:cf:41:c0:38:0f:e8:
5d:02:a4:3e:7f:29:d0:1b:76:26:93:03:ca:2d:c0:2c:f2:de:
c0:ff:73:42:eb:cf:99:2b:d3:fc:68:0a:98:76:00:51:fa:7f:
d5:3e:e8:74:3d:16:8a:bd:2c:f6:72:24:0e:eb:aa:97:0f:95:
75:a9:cb:33:85:3b:7e:ec:4a:6b:e7:ae:0d:e4:90:b1:8a:d3:
d4:59:e5:4f:5e:c4:86:a3:1d:94:16:86:0f:33:bf:27:48:78:
71:75:e7:68:fc:74:53:01:55:b2:33:02:1f:f7:16:c3:ed:5c:
ad:3c:da:97:ac:fe:63:ca:c2:85:f4:e1:21:9e:d7:e6:d0:6a:
0c:54:46:c0:36:f8:2f:b7:c5:f5:22:04:f0:ef:e1:67:f1:d8:
fa:29:f3:9a:1a:0f:ab:26:18:6b:2b:db:a9:7e:55:ab:b0:5b:
1c:28:10:a2:6d:45:f1:7e:16:37:8f:1e:e1:4b:f8:f6:0d:dc:
90:45:54:61:82:76:cb:06:ad:49:41:94:2d:6f:3a:41:f3:b4:
2b:e3:3e:02:8a:c5:cb:35:c6:3f:e7:86:75:e0:a5:32:ae:9a:
ec:a9:5a:d8:03:a1:61:fc:29:1b:ab:64:56:55:99:48:64:c8:
bb:6e:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 21:25:11 2026 by rpki-client