Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: jKgejtJZohfbcnFX90NkXgkwikc0nNYD9U6L1J4Q8Ik=
Subject key identifier: A9:5B:01:49:78:47:07:D4:2E:1C:4A:D1:98:9B:4B:BE:C4:78:5B:C4
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01A0D9BB6F4A0648DE1862B85FA7F51C3106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 18:02:14 +0000
Manifest this update: Fri 25 Sep 2026 18:02:14 +0000
Manifest next update: Sat 26 Sep 2026 18:02:14 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: WtE/Hf3y8LbG2TQNT7mPVjixM8GACmLX+jHpXXzTrj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:6f:4a:06:48:de:18:62:b8:5f:a7:f5:1c:31:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Sep 25 18:02:14 2026 GMT
Not After : Sep 26 18:02:14 2026 GMT
Subject: CN=a95b0149784707d42e1c4ad1989b4bbec4785bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:2e:af:96:8f:01:0c:7c:42:54:18:7c:b0:
0d:cc:09:59:04:e7:f1:75:07:91:4a:cd:c8:f2:bb:
9a:6b:ef:6c:b7:30:d9:0a:4b:fe:85:ba:c0:f8:13:
93:45:09:d8:8f:82:db:8a:e9:8d:42:ed:9f:b8:ce:
f4:7c:01:2c:a7:c8:c9:e0:c2:eb:8b:9c:17:c9:4a:
92:3b:15:b6:15:e3:41:83:b1:e2:5a:5b:67:89:55:
16:62:ae:68:00:6e:56:fe:b0:68:ee:4d:44:40:59:
b7:71:04:03:f3:ec:81:a5:5a:50:61:44:c0:e6:6f:
b0:8a:77:74:1e:d4:05:85:2c:52:4d:90:73:c5:94:
86:da:d9:7b:9f:1a:07:1b:eb:7f:b8:10:f2:85:77:
16:49:3a:ee:07:ba:e6:04:29:f0:18:8f:78:1b:eb:
af:fa:95:a5:fd:01:36:f4:1d:d7:23:36:7b:7e:72:
88:e0:e0:25:b0:89:5f:29:90:10:c7:28:95:65:46:
3b:18:96:9f:04:db:79:14:88:6c:cb:b1:04:ee:f0:
55:c8:31:c5:5d:a2:bc:66:c8:a1:68:1d:d8:00:4b:
4b:fb:eb:7b:c1:34:9a:0c:c1:1a:c4:90:32:97:a4:
c8:6f:73:76:8b:95:eb:31:f1:e5:e9:d5:57:88:5b:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:01:49:78:47:07:D4:2E:1C:4A:D1:98:9B:4B:BE:C4:78:5B:C4
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:eb:8e:bb:2f:7f:c7:68:8c:2c:9c:cf:bb:52:b8:9e:31:07:
41:ca:24:0d:f9:dc:99:6d:fb:e7:73:ee:af:91:25:76:bf:11:
65:0a:25:18:08:ef:c4:d3:f0:99:57:4b:32:ff:75:ec:3f:8d:
0e:c1:5c:2f:72:45:44:2a:4c:04:45:4e:b2:0d:e2:95:ae:b3:
35:5d:77:51:e0:df:6c:e4:a6:0c:ba:50:63:51:a5:8a:8f:51:
40:2e:38:67:fb:99:dd:43:1b:43:a9:6b:a2:d9:99:1e:29:97:
bd:9a:3c:c4:6a:7a:ef:7f:e4:3e:32:f9:55:79:31:1a:4f:7c:
b8:8c:01:fb:d1:77:f7:a1:ee:71:06:f9:f2:94:57:52:e1:cb:
97:f0:60:2a:6b:b8:a5:0e:e3:4f:ce:71:57:3b:9b:9b:14:3c:
98:6f:44:2b:e7:e7:27:e4:fc:68:f8:91:99:d7:7f:e3:f6:a2:
06:6f:6a:0a:c7:9b:23:4d:ea:34:a7:0d:c7:03:09:76:e4:93:
c3:b2:42:4c:9e:60:27:db:68:63:31:60:16:eb:83:87:10:7b:
f9:1a:ca:e9:6e:da:8e:f7:5e:c4:34:b2:70:ce:69:6d:50:9e:
20:c3:04:d1:92:7a:72:c8:32:5c:d7:d7:50:4d:2f:0d:00:39:
a3:11:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:40 2026 by rpki-client