Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: s6CDXwVgXhUTU3qkII1cGejqHREMe3Q9f/+FuV3MFa0=
Subject key identifier: F0:82:FC:9A:23:7B:84:ED:5A:6F:FB:D7:F5:22:6A:87:37:5A:60:96
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01A0F869DAD6FAC4839B94B0EF5239DE2639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0ACF
Signing time: Thu 01 Oct 2026 17:01:21 +0000
Manifest this update: Thu 01 Oct 2026 17:01:21 +0000
Manifest next update: Fri 02 Oct 2026 17:01:21 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: v2b5mJt0SPM8bUbj6jzUN49UWwXbCqo8RSaulwMyUZY=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:69:da:d6:fa:c4:83:9b:94:b0:ef:52:39:de:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Oct 1 17:01:21 2026 GMT
Not After : Oct 2 17:01:21 2026 GMT
Subject: CN=f082fc9a237b84ed5a6ffbd7f5226a87375a6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:30:0c:32:14:31:9f:a8:21:17:72:f0:0e:
c0:2b:15:63:32:06:ce:7d:ab:10:29:d1:23:82:8e:
26:eb:9a:32:2b:a3:61:c7:15:0b:de:53:f4:51:9d:
d3:f1:93:f1:eb:ad:6e:7a:3e:40:d5:b9:f7:a9:22:
66:54:10:18:04:15:6c:b1:83:69:48:0d:9a:52:b6:
3b:54:32:ed:d4:be:3f:64:58:71:16:e2:73:3b:6d:
98:4a:e8:7b:12:cb:40:c5:24:ec:50:58:da:41:62:
15:35:2f:99:66:91:24:a8:ea:4c:24:2f:45:b7:79:
3d:5f:11:fa:a1:cd:da:f8:b9:10:d3:08:56:5b:d6:
29:c1:c3:a8:f8:ab:00:18:d8:07:72:b3:fe:01:d4:
73:94:50:c0:1f:9e:d7:ad:bd:5a:74:59:d6:bf:26:
d1:7c:9d:5f:6c:e2:97:b9:9c:70:42:38:9f:c6:a8:
f7:aa:2d:84:27:64:4f:e5:4e:d4:79:4a:36:69:71:
bf:fd:9e:b2:1c:b4:7f:a3:5b:c7:17:31:31:77:86:
bc:04:c0:96:f3:56:a9:7e:a5:e7:47:81:c8:bc:62:
9b:f9:e9:ae:41:49:30:54:7f:cc:2e:88:63:0b:83:
29:ef:67:99:96:b5:56:de:75:88:a8:7a:49:dc:6e:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:FC:9A:23:7B:84:ED:5A:6F:FB:D7:F5:22:6A:87:37:5A:60:96
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f2:c2:c9:af:ce:f6:23:52:e0:1f:73:a6:d9:69:a1:28:f8:
4e:72:12:39:b7:c6:fb:64:9f:f4:d5:68:38:3d:34:6a:f1:f2:
97:5e:71:78:46:37:6b:49:ca:61:02:00:24:c7:47:72:e3:24:
b1:7c:63:ee:c5:9c:81:b3:bd:64:9f:6b:2f:20:dd:a2:22:b6:
da:20:52:03:74:17:60:f8:c8:70:bf:93:d0:aa:43:db:6b:84:
41:13:98:d7:87:66:ed:85:d9:f3:67:73:c1:76:5c:03:d4:a1:
05:fd:b1:b3:ef:35:71:96:57:69:ea:72:fd:74:b2:4d:a4:cf:
8d:42:80:d2:5d:0e:6d:af:19:d6:63:74:24:1b:8a:9f:d7:5c:
e7:c7:e4:8d:e1:a4:d4:11:ff:65:d3:44:6c:70:c1:df:54:7c:
ca:3c:6a:c3:13:8d:16:36:37:b1:01:95:33:d5:bf:68:ba:5e:
9a:7b:97:3b:b6:b9:a3:19:8d:d0:35:6f:04:cf:32:1f:a2:9d:
19:1e:90:39:61:e8:fb:51:3c:2c:69:d5:01:ea:56:7f:58:33:
d8:97:61:f7:88:af:bb:eb:f1:12:32:c3:0a:02:61:bc:63:f2:
2c:8a:ae:b6:97:bc:58:4f:76:cc:2f:12:e6:06:d3:15:35:00:
78:c5:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:29:28 2026 by rpki-client