Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: JgM3a2/X2PsOcTsiWMhqcD+mV8I2cTy+YewVcWRRgOI=
Subject key identifier: AD:3F:41:3F:62:D0:3D:AC:85:09:D6:D4:8E:81:A8:FA:E3:2A:59:80
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A0D6F05DEF3D6B0B6E72E1243E185685EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0948
Signing time: Fri 25 Sep 2026 05:01:11 +0000
Manifest this update: Fri 25 Sep 2026 05:01:11 +0000
Manifest next update: Sat 26 Sep 2026 05:01:11 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: wz7FE2rK1ncBa4jwv93bEhx/R/wZTFmdHN3/iwr4US0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:5d:ef:3d:6b:0b:6e:72:e1:24:3e:18:56:85:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Sep 25 05:01:11 2026 GMT
Not After : Sep 26 05:01:11 2026 GMT
Subject: CN=ad3f413f62d03dac8509d6d48e81a8fae32a5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:54:61:e0:ad:0b:59:9e:d5:a2:0c:a2:61:
c8:4d:a1:f4:ad:2b:78:e5:12:a3:36:9a:32:89:0f:
aa:2d:a5:a3:b2:74:23:a8:1d:83:5b:46:c3:de:ca:
f5:64:f6:82:70:a9:54:54:a7:f3:a3:97:c6:1f:20:
be:f6:7a:71:23:56:c6:07:54:75:57:56:13:fc:8b:
0c:9e:a9:0b:c8:8c:09:63:ce:5a:5c:cc:76:0b:9d:
a2:1f:07:1e:87:9b:c4:c0:d9:39:09:21:3c:cd:6a:
32:b4:9a:7d:c8:ab:a3:c1:70:d0:12:1d:e1:33:12:
64:de:31:58:3e:a3:a7:16:1a:5d:6c:cc:b8:c6:b5:
86:c6:b4:6b:26:c0:dc:72:19:15:d1:01:3f:29:35:
a3:bf:1e:ae:2a:96:c9:60:78:b9:92:27:de:47:a3:
89:71:a3:5e:cf:05:f6:79:d1:7e:89:a2:30:3d:dc:
6a:66:a4:b9:b4:50:c3:f3:4a:82:f5:1c:5b:03:9d:
f1:38:89:f8:a3:cd:c0:33:e3:cd:b5:6b:c1:0a:7a:
60:62:5e:33:64:1b:27:f2:93:c0:43:57:7c:9e:e5:
78:b3:ef:d5:90:53:47:e1:ab:54:a4:ab:d7:63:69:
17:6f:25:71:fd:8d:0c:38:34:f9:94:78:59:c9:32:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:41:3F:62:D0:3D:AC:85:09:D6:D4:8E:81:A8:FA:E3:2A:59:80
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fa:d6:9f:c9:cb:1e:a8:cb:74:57:87:c2:3d:28:a0:94:4d:
8c:de:69:03:7e:fb:ca:e1:20:2e:16:9c:24:4e:fe:ba:98:b6:
b6:e0:8b:16:f5:32:76:44:be:a7:12:df:c2:0e:5c:1a:14:c5:
d9:c8:a7:a4:19:38:f7:77:a2:60:fd:31:12:00:52:d2:9e:22:
de:e9:89:9a:2a:5a:75:91:98:85:a4:6c:99:34:14:35:d1:6b:
77:c0:e9:d1:ff:21:be:d9:3e:e0:d0:67:23:2e:1b:28:6c:a0:
85:6d:d7:ba:be:33:1a:84:36:fd:79:b3:20:6c:ba:dd:33:37:
f8:4b:3f:0f:90:42:d4:35:58:9d:49:3e:65:0a:9c:7f:da:25:
d3:b7:ff:5a:4b:16:ce:8a:5e:a0:1d:3e:77:40:e5:70:cf:31:
1a:a3:36:06:80:74:0d:07:78:7c:4e:cc:71:f9:fa:73:7a:61:
7f:24:54:4c:4e:33:0a:f6:2d:83:ad:5e:73:bd:93:3b:ed:d7:
f1:69:2a:2e:4e:4a:20:bd:d0:ad:0a:7d:0d:38:a7:72:67:61:
df:20:65:c3:4c:67:3f:e2:3d:ef:72:b4:63:3b:ce:f8:64:0e:
61:bd:1a:77:e9:dc:21:78:9f:6e:f2:8f:02:b8:a9:9a:3d:f8:
5f:8e:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:26:17 2026 by rpki-client