Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: 2CjPVIhLQPHs74iG3hgV1bqXhT2aK2AXRk5JJPpg7Ic=
Subject key identifier: 63:F1:56:A1:D1:7A:41:DF:6A:EA:27:F9:12:47:1B:AB:56:73:C3:47
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019F92480071E831E6BE928C6E1FB7904AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0AF5
Signing time: Fri 24 Jul 2026 04:00:19 +0000
Manifest this update: Fri 24 Jul 2026 04:00:19 +0000
Manifest next update: Sat 25 Jul 2026 04:00:19 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: kFQDmdgEb0ayJcsbDdkaw0lXvHZdTcFbcVgRnI98pm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:00:71:e8:31:e6:be:92:8c:6e:1f:b7:90:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jul 24 04:00:19 2026 GMT
Not After : Jul 25 04:00:19 2026 GMT
Subject: CN=63f156a1d17a41df6aea27f912471bab5673c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:62:e2:8d:4e:42:72:5d:0b:87:1d:4c:03:
bc:3f:f3:8e:e4:21:4a:6c:cc:b5:50:42:bd:d0:91:
b8:7d:13:2f:45:0d:e9:a6:8b:6e:11:50:6c:d3:af:
0b:11:41:8d:02:ff:73:d8:79:9e:ad:d1:2c:60:51:
94:a1:7f:8b:fd:24:f0:a2:5d:d4:34:4a:86:34:f0:
f8:44:76:f2:d8:e2:3d:d0:55:b9:f4:41:74:4d:39:
1e:f7:3d:89:9a:2a:49:22:45:42:bc:4e:5c:61:95:
52:0a:51:96:9f:31:98:58:05:36:92:b7:bd:7f:97:
59:63:7a:2f:97:01:1d:ce:76:a9:25:db:35:98:72:
be:d0:eb:26:e3:48:8f:4d:4d:84:ed:f8:40:28:b7:
81:f3:05:ce:0f:a1:eb:21:a3:87:09:dd:0e:5d:9a:
93:d6:0f:e6:c2:67:85:0b:dc:18:95:01:72:c6:14:
8d:cd:7b:71:8f:98:97:46:93:fa:f0:03:8f:2f:2b:
72:2d:b0:f1:12:d9:9d:9e:d2:5f:f3:40:74:51:40:
40:f5:1b:ce:24:f2:30:c3:b6:66:ef:24:1f:fd:15:
ca:6b:ee:3a:fb:98:70:b0:66:2c:84:3f:ac:65:9b:
11:68:82:3c:bf:85:37:58:a9:6e:07:49:3d:9f:f1:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:56:A1:D1:7A:41:DF:6A:EA:27:F9:12:47:1B:AB:56:73:C3:47
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ef:e8:11:2d:78:3e:a2:cc:55:62:82:29:eb:ee:97:72:1b:
83:d8:ab:de:dd:44:3a:02:65:ac:b1:a9:2a:e2:6f:39:ba:ca:
e3:1d:f5:e7:f7:7f:c7:88:c5:99:24:d4:01:dc:2c:33:dd:ee:
d4:7a:d9:9d:bc:ed:4f:18:9e:7d:15:50:11:bc:3e:f0:21:26:
e5:72:47:87:33:41:e3:03:09:cd:6d:73:e5:66:cf:30:71:57:
fe:32:85:6f:3d:b4:56:2c:b0:a4:fa:19:e6:ec:3f:c3:e3:7f:
1e:8d:5e:65:e1:b2:9f:a1:a3:12:d7:fe:cc:92:5a:aa:01:2f:
29:f0:78:46:73:06:bd:d8:61:a7:da:f3:a0:65:1c:00:ea:cd:
de:20:51:75:d3:63:7c:b6:af:7b:35:f8:a4:f5:fb:74:92:1b:
e4:fd:e8:12:37:bf:5d:a7:de:18:33:e3:31:31:16:64:0d:40:
b8:36:e8:40:c3:da:c6:06:87:90:d3:74:16:c9:70:4b:42:00:
b2:07:3d:36:d6:e3:10:d0:de:0c:9b:9a:60:5e:1b:cd:a4:c2:
8f:bb:81:86:d5:be:75:73:9c:32:96:6e:ba:2b:88:59:2d:70:
dc:ea:6a:2e:62:27:04:29:73:fe:4b:eb:46:8f:13:a1:7f:51:
05:b9:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:13 2026 by rpki-client