Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: /eAAddeE4f3GYFzUG7xftJbR9on4RjMddhBgYH3VN4A=
Subject key identifier: 7A:0D:4B:51:69:00:20:29:82:1B:10:58:61:80:06:52:6F:8A:B2:64
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01A0EB536411FD50FCFAFA69FB486E648299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 062D
Signing time: Tue 29 Sep 2026 04:01:45 +0000
Manifest this update: Tue 29 Sep 2026 04:01:45 +0000
Manifest next update: Wed 30 Sep 2026 04:01:45 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: GrIBFjGfs2TB4r2L8uqqx4cv7NKiZu1lbFyWXheyr0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:64:11:fd:50:fc:fa:fa:69:fb:48:6e:64:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Sep 29 04:01:45 2026 GMT
Not After : Sep 30 04:01:45 2026 GMT
Subject: CN=7a0d4b5169002029821b1058618006526f8ab264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:ef:99:88:49:fe:52:e8:dc:1f:a5:99:04:
85:4e:53:db:a0:6e:dc:3a:1c:2d:95:43:65:af:4c:
e7:99:39:5a:f2:4d:eb:5e:72:95:94:29:bb:bf:ec:
ae:fe:00:66:e2:4d:85:60:e0:b9:b6:46:81:03:00:
15:4e:3b:24:4f:c6:1b:5e:5a:a9:e2:4c:28:df:ac:
39:0d:96:2a:d5:5b:c9:c2:1a:3d:08:1d:1a:58:75:
49:8d:08:b5:29:7b:bf:28:fa:f8:9d:c0:86:f0:40:
da:5b:05:96:fc:7b:d6:e6:d1:ff:55:b1:a1:94:a6:
6b:49:64:c7:5a:dc:6d:36:25:d6:52:d5:53:c7:f6:
64:43:10:e9:e5:c7:42:c1:37:fc:e7:87:df:f0:c9:
4f:81:3e:cf:cf:d5:41:25:e9:0d:b4:2d:50:4f:fa:
ae:96:69:34:2c:04:01:cf:9a:8d:53:a4:c7:d4:c9:
48:48:35:d7:9c:72:0b:b4:67:f9:27:e3:f3:ab:8d:
e4:da:64:2a:ff:41:a2:57:ab:d1:85:53:85:ba:94:
cf:43:af:a8:a1:1e:f3:7f:32:04:6b:94:e5:ab:92:
d7:2c:22:1e:89:78:72:60:b9:9f:79:2c:5f:94:ac:
3f:2f:13:3a:ea:fb:96:96:a8:3c:ae:fb:07:06:19:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:4B:51:69:00:20:29:82:1B:10:58:61:80:06:52:6F:8A:B2:64
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:11:16:62:ca:7c:46:c2:e0:92:b8:01:da:6e:f8:58:5b:
f3:a3:8a:95:4c:d3:98:5e:7d:56:08:63:c3:e1:74:a8:7a:d2:
bd:5c:46:57:9c:a9:4e:e4:1b:64:94:b3:b3:f6:ab:14:68:13:
b7:7f:e4:cb:c7:40:97:77:86:e7:92:68:38:db:55:9f:55:65:
ef:9f:66:6f:9a:cc:c3:24:63:35:df:5b:04:cf:3d:49:c2:c1:
92:d9:26:aa:e1:bf:97:f3:4f:31:fb:ef:67:38:86:be:fa:37:
98:71:7d:65:88:e8:40:a5:81:b2:b8:f6:ab:76:22:a2:36:b1:
5d:94:c1:57:8c:af:61:1c:29:e4:8a:0f:24:2f:dc:0c:79:24:
1a:04:96:99:18:92:ed:c0:c2:a5:94:8b:f4:b6:63:f7:53:8b:
02:4b:a4:a2:f8:00:95:b7:4a:fa:39:46:ce:28:f1:fe:24:04:
97:01:50:5b:08:41:4c:b5:56:17:55:44:a5:af:ba:9a:71:25:
ae:7d:79:4d:3c:bc:eb:7c:16:c5:93:52:e0:cc:01:e8:64:7e:
0f:3c:36:89:bc:7b:cf:78:3c:02:d0:25:82:d6:84:96:4f:d8:
77:4c:01:39:81:6f:02:41:7f:d7:52:84:47:1b:80:59:ca:22:
c5:c7:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:18 2026 by rpki-client