Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
File: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft (raw, json)
Hash identifier: u0aJOD5LIWUAHJWlSjf3351rZJJtd46KPMH0Z9oh8zA=
Subject key identifier: DF:26:6C:69:8B:41:7A:EB:BD:7D:D6:B8:10:0F:30:5C:6A:01:CA:51
Authority key identifier: 63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
Certificate issuer: /CN=63d87ebc77db75024336fee91aba63d897fc7452
Certificate serial: 01A0D3EF71E7A9BF69D688B140E9FF4A26C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:19 +0000
Manifest this update: Thu 24 Sep 2026 15:01:19 +0000
Manifest next update: Fri 25 Sep 2026 15:01:19 +0000
Files and hashes: 1: 2wwJSN-aUvUu9Rxb4n6669OEQt8.roa (hash: w+2Vw7XNkk5azSPXvwkjHp7ZpTzcCE9fRC6rKTH/wjI=)
2: FRFGvgi2to8bVz8gK33C7Zcp9-M.roa (hash: ayMTUA2GjSPFdKep9QPV41LfFlo7JL6V3IT7Srxtqik=)
3: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl (hash: ksjOe4WtHAoPgLiElrfNFtgxwvhF7THJM6wumEK7liA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:71:e7:a9:bf:69:d6:88:b1:40:e9:ff:4a:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d87ebc77db75024336fee91aba63d897fc7452
Validity
Not Before: Sep 24 15:01:19 2026 GMT
Not After : Sep 25 15:01:19 2026 GMT
Subject: CN=df266c698b417aebbd7dd6b8100f305c6a01ca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:52:91:a9:c2:67:de:57:3c:06:ba:9b:01:
8a:4d:4a:ae:fb:1a:b2:e6:18:59:c3:2f:af:3e:39:
5e:ab:50:e3:e3:36:e1:75:d5:37:05:73:1e:84:c5:
2d:3b:48:c7:e9:ed:19:18:c8:b3:89:aa:8d:a3:59:
93:7f:08:85:68:c2:3f:e3:0f:ca:1d:82:d9:39:f6:
6a:10:83:5a:c1:c4:0e:b9:8e:1a:b3:68:66:21:ba:
16:dd:3c:05:44:40:35:21:ee:fc:af:5f:9d:82:48:
dd:73:27:8c:74:a3:90:43:61:1b:27:d9:14:e4:e2:
f4:9d:f8:e4:72:21:f8:3b:f7:51:fb:ed:f0:06:96:
e7:45:44:6f:8d:e9:73:15:71:10:75:33:5b:e1:c9:
ac:ba:e2:ce:2b:2e:b2:df:2f:e2:b6:04:34:aa:e4:
4a:f4:84:fd:be:1b:8f:3c:4e:eb:ef:06:a0:5d:19:
26:78:13:01:ba:f6:5f:c1:51:1c:f4:f6:54:3b:7b:
cb:d7:ac:6e:0d:8b:41:fa:5e:46:8c:1b:db:f2:1a:
1f:d0:90:f4:a5:ea:10:2e:6d:d0:c7:e6:8f:93:f3:
69:56:9d:a2:6b:3a:33:41:ac:c4:bb:ac:9c:2d:29:
f7:9d:ec:ac:a7:dd:7a:c9:eb:de:77:9e:b3:b4:39:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:6C:69:8B:41:7A:EB:BD:7D:D6:B8:10:0F:30:5C:6A:01:CA:51
X509v3 Authority Key Identifier:
keyid:63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:04:1c:d6:f1:e4:4a:29:ff:74:f3:1c:ab:44:39:c6:27:fe:
3f:24:65:48:3a:e5:12:63:91:10:4c:71:23:07:bf:90:aa:0f:
db:09:48:87:00:ab:38:c4:ba:c9:41:1b:05:d5:0d:c5:23:f2:
9d:fa:d3:e0:e6:a0:79:b3:5d:48:b2:d7:59:66:a5:10:8d:c9:
dd:44:6a:77:60:77:43:f9:3d:21:f9:c0:d6:3d:42:cd:8d:64:
c8:4c:8c:0b:fb:65:9f:67:47:2d:96:dd:f3:60:1d:23:c7:21:
e0:e4:95:cd:fa:db:18:46:81:98:2e:6f:e2:7a:c0:b9:bc:40:
18:9c:a6:59:e8:56:d9:f8:bc:23:2e:89:a3:9c:f1:27:5b:68:
98:b6:42:2c:77:92:aa:2f:95:89:60:31:62:0d:ee:05:a7:13:
89:fc:87:de:32:73:e5:49:41:07:d2:14:0e:04:85:e3:28:1c:
94:d7:08:f6:43:b7:93:62:e7:0c:12:35:94:a7:53:59:69:43:
2f:c5:35:a9:be:56:cf:6f:8f:46:ac:fb:bf:f6:82:6f:4a:8d:
cc:f8:00:a3:0f:e4:e1:da:6d:2c:2b:b9:ea:1c:f1:75:45:12:
87:e5:e2:d9:99:db:90:d1:9b:7f:f4:93:82:8a:df:97:8d:4b:
e7:28:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:57:53 2026 by rpki-client