Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: nRNSPVjvTUzJKdziky6c491RpqQlnpnncu7JxBlbWjE=
Subject key identifier: D8:45:98:1C:B8:AF:C1:12:71:72:00:2E:FC:E7:EA:D1:53:B4:33:CD
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A0D8DEBC7AADC7AB7C6C1C34C8C6A6D49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0949
Signing time: Fri 25 Sep 2026 14:01:10 +0000
Manifest this update: Fri 25 Sep 2026 14:01:10 +0000
Manifest next update: Sat 26 Sep 2026 14:01:10 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: xnWwn7Txh/m3zEcMIqtyAPZNSU2L76pNLI0kYCNPg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:bc:7a:ad:c7:ab:7c:6c:1c:34:c8:c6:a6:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Sep 25 14:01:10 2026 GMT
Not After : Sep 26 14:01:10 2026 GMT
Subject: CN=d845981cb8afc1127172002efce7ead153b433cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:cd:ec:8e:c7:e7:a9:07:96:66:6a:45:7a:
b3:f3:3e:a0:a1:09:e5:7f:2e:0c:be:a9:78:c9:78:
fb:8b:17:a5:4a:82:82:06:b8:f0:08:3f:f0:99:17:
b3:46:d8:42:85:12:07:ee:f1:ef:e3:72:38:ce:d0:
cd:04:c8:6b:bd:24:47:f3:e8:af:e7:c8:3f:12:8a:
f3:db:4e:62:e0:bb:3a:a0:74:21:dd:0a:87:a4:73:
00:35:34:e0:89:ae:ba:fc:ed:ae:24:97:e6:97:54:
f8:d9:3a:21:50:ae:f2:2e:9b:fd:16:5c:b4:06:9d:
a9:df:67:f7:36:cf:0b:72:b9:68:0d:25:81:2f:2d:
2f:d6:00:37:a5:af:06:5c:88:06:8f:92:d7:d6:d2:
5e:1c:b9:5d:41:4a:46:84:22:2c:85:be:59:cc:61:
77:24:60:95:5d:81:b3:5b:2c:46:1b:2f:41:47:65:
87:52:50:10:03:92:6c:d5:7a:b5:0a:dc:dc:54:a8:
e7:42:40:06:26:7f:e1:8f:35:74:6a:4a:fb:8f:01:
e4:61:75:65:60:f9:1f:61:ef:15:cc:e3:73:77:7b:
1f:32:41:b2:56:57:b5:8f:ed:85:96:d5:6b:d0:f7:
03:66:86:21:68:81:23:ec:57:7f:a3:57:2e:c5:a6:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:98:1C:B8:AF:C1:12:71:72:00:2E:FC:E7:EA:D1:53:B4:33:CD
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:e7:b2:1d:db:71:be:50:9f:08:f7:fe:f9:a7:ef:83:9c:
82:92:ba:bc:95:7e:d4:ca:e2:20:07:05:78:e3:99:e4:bf:8f:
98:e1:fd:00:43:24:e0:88:2e:b3:53:fc:1f:2e:bd:71:b6:13:
8d:35:cb:bd:cc:96:66:ef:b6:50:0e:d3:84:65:19:89:a7:f2:
24:50:b1:34:08:09:ad:e6:d9:d6:c4:20:5f:e2:b8:c3:cc:52:
a9:a7:17:40:36:d2:df:31:08:35:4d:7f:f2:a2:f2:59:4b:c4:
3f:b7:f5:d8:df:b9:aa:27:16:8a:86:f7:f0:5c:5f:5b:c9:2b:
cb:22:af:d1:a5:09:be:0a:74:c2:a7:57:ae:33:1d:d1:da:c8:
a7:15:db:55:8c:0a:31:01:e5:f4:f8:db:36:71:d0:24:83:49:
f9:ea:58:c3:42:46:ac:d5:b8:91:49:d7:c3:97:01:99:7a:a2:
bd:2d:79:8e:90:49:51:d3:ec:61:0f:65:0a:7a:ac:37:d7:75:
b9:cb:28:19:18:a8:e7:1f:d4:11:96:95:9a:83:69:a5:b1:7f:
b5:ad:f4:7f:82:5b:f3:65:d9:da:53:5d:65:4f:8e:3f:a8:4a:
c2:0a:f8:09:ef:ef:16:57:86:66:8e:79:7d:85:5d:c5:ff:a6:
20:f6:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:43 2026 by rpki-client