Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: X5lkEYf47sTdej0ov7KxTYzC9hbCHwCTkRRT0EfRpqs=
Subject key identifier: 3C:B5:6B:19:07:C9:30:35:40:33:29:2B:7D:5B:81:2E:6F:86:31:E3
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01A0DBE013E0929605FA2A55C51079C1D0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 04:01:30 +0000
Manifest this update: Sat 26 Sep 2026 04:01:30 +0000
Manifest next update: Sun 27 Sep 2026 04:01:30 +0000
Files and hashes: 1: 1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa (hash: uAnzzs6q7U6un+U0t3+PFFv4SIJ/S56dCg4WUcRKDUE=)
2: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
3: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: +/TPI81cQo8h3J5z9QCUnMkEKijBEa6SIp99aH0tkkw=)
4: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:13:e0:92:96:05:fa:2a:55:c5:10:79:c1:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Sep 26 04:01:30 2026 GMT
Not After : Sep 27 04:01:30 2026 GMT
Subject: CN=3cb56b1907c930354033292b7d5b812e6f8631e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:6e:2b:c9:7e:be:19:ad:08:60:ff:5d:d9:
c7:b1:78:a6:26:46:dd:b6:fb:e0:59:52:48:1c:e2:
52:57:98:3e:c9:78:1c:71:1e:75:2a:ea:51:a5:73:
e4:a0:5e:e9:4e:35:53:ac:38:a3:2e:fb:9e:cb:17:
85:b0:d0:5e:0c:4b:78:0d:8b:b7:29:5c:2a:55:e5:
e3:e9:59:8a:5a:45:f0:b6:64:a5:87:61:81:56:1b:
83:0c:2e:b5:7c:0c:64:cc:a3:48:21:6d:24:09:8b:
67:c7:3c:59:ea:a9:85:02:30:78:34:2f:dc:2e:7f:
7d:05:83:fe:b6:6e:a6:49:32:50:a2:a6:99:d1:0f:
fc:65:f4:c7:80:90:1d:f2:e4:59:ca:a9:2b:86:c0:
76:6a:0f:3d:85:74:d8:ed:ce:e3:9f:91:40:4d:96:
ea:9f:24:0a:7f:03:fc:14:dd:6f:60:53:37:45:01:
ea:70:8d:e7:e1:ad:1e:2b:4f:09:3e:f3:75:1b:25:
c9:6a:28:79:6e:c5:6c:a3:d8:42:fc:f5:8b:b6:2c:
f0:6f:a7:02:b2:4e:41:57:74:2d:42:8d:93:34:ce:
56:84:c1:f4:4a:8e:88:63:a1:ae:1d:22:95:61:86:
d7:e8:a4:31:64:93:0c:45:7b:9f:aa:ac:a9:02:56:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:6B:19:07:C9:30:35:40:33:29:2B:7D:5B:81:2E:6F:86:31:E3
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0f:7f:e0:28:41:41:97:be:85:7b:c0:b9:67:ac:92:6b:8d:
2b:88:58:11:72:7b:05:d0:d8:ca:a4:69:c1:0d:f0:1c:a2:bc:
37:bf:c8:3d:2c:5e:7b:39:ae:0c:ff:68:cd:b8:f8:0c:fc:0f:
53:cb:0a:e0:5b:29:8a:b0:ca:2a:6e:d8:d3:39:46:9a:32:95:
42:fd:0b:ef:01:4b:12:0e:1f:b3:c4:e6:9d:3d:f0:29:d9:e5:
c8:22:ed:7e:88:a9:2d:59:f1:f8:e1:df:4e:1f:38:07:65:f5:
09:56:9f:f0:05:07:86:c3:f7:f2:49:d7:d9:cc:07:1b:2b:32:
ee:19:11:ad:0d:60:79:10:c7:3d:c5:1e:e4:72:f5:eb:0a:69:
20:e4:0c:c9:66:1c:38:24:c8:75:67:d8:7d:39:21:a6:84:b5:
90:74:4f:f0:13:7b:b6:af:08:77:28:2c:59:69:e8:05:f2:5f:
b8:1b:67:0d:85:12:08:2a:d3:0e:89:96:f2:91:05:6a:e8:41:
7a:ba:dd:e4:66:da:40:67:f8:3a:85:c4:39:ac:3e:86:71:b1:
43:e0:40:a8:70:b3:61:12:9b:f6:64:ff:a8:12:d5:c2:17:49:
f5:1b:ef:d8:6b:71:44:16:dc:b8:c8:15:ed:16:bd:78:52:20:
bb:e9:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:38:54 2026 by rpki-client