Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: qhisOAS3UWY7b+aPHH+Xmd494yiSdv0XX73IzC8KJ20=
Subject key identifier: D6:F6:AA:DD:05:A1:DA:4D:1D:B0:FA:D6:07:CF:3A:23:03:25:29:1A
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 01A0D804441A5E3093E9C2FCAF1165589856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 10:02:33 +0000
Manifest this update: Fri 25 Sep 2026 10:02:33 +0000
Manifest next update: Sat 26 Sep 2026 10:02:33 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: Y/LSQ6U65uD0d4PI9BbIvr4HeYe7CmLb6wpilSJM3EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:44:1a:5e:30:93:e9:c2:fc:af:11:65:58:98:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Sep 25 10:02:33 2026 GMT
Not After : Sep 26 10:02:33 2026 GMT
Subject: CN=d6f6aadd05a1da4d1db0fad607cf3a230325291a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:76:10:64:aa:e3:68:3b:86:a5:3d:a6:b8:
f5:34:9c:a6:99:05:62:76:86:f3:4d:94:da:93:76:
20:95:30:38:23:32:f1:b1:f8:cb:40:08:f0:ae:3d:
16:c4:86:da:fa:a9:9b:6d:61:ec:34:07:d8:c4:ca:
ee:ec:9d:2a:48:79:46:2c:cf:68:6e:8b:8b:f6:19:
71:c5:17:f1:3c:12:0e:ba:36:b9:7b:1e:a4:bd:da:
3a:d1:58:a2:a5:2d:c0:75:37:a5:99:55:b1:6d:6a:
65:c2:73:d9:97:c0:4d:1f:e3:3f:35:fc:3a:a1:50:
74:2f:02:c0:79:94:f7:57:2b:48:23:66:f4:ab:04:
3f:26:d4:20:31:93:0a:a2:21:08:32:bb:9f:41:b0:
c3:4f:8c:58:cd:79:48:d7:e4:de:9e:6d:51:fe:2a:
58:f9:f5:be:dc:71:15:16:d2:5d:8e:6c:90:8d:06:
2d:80:54:ba:cb:09:3b:76:b7:82:4e:07:4f:74:44:
3a:2f:93:0f:67:92:0c:c2:ed:de:d6:95:88:47:c5:
21:c6:b8:ff:c1:80:d6:1d:a7:22:5e:d0:32:20:59:
bb:6d:fd:72:41:cf:3c:1c:01:27:b1:34:ae:b8:ea:
02:78:6d:47:5e:27:54:11:e0:d7:7d:77:88:a9:1e:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:AA:DD:05:A1:DA:4D:1D:B0:FA:D6:07:CF:3A:23:03:25:29:1A
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:ba:84:a0:fa:f3:7b:ee:c1:bf:d1:e5:ab:4a:43:fa:c4:
d0:a8:ff:1b:7e:8b:e2:ce:ea:c9:f5:81:9a:c6:b3:47:45:64:
79:01:fa:77:c5:df:3b:ad:8d:81:8c:d1:54:0e:5b:9d:92:e5:
3d:f1:9e:23:b7:8f:2f:2f:3b:72:72:30:ac:bb:0c:95:ea:91:
79:7c:a1:11:23:51:00:09:1c:4c:b1:07:9c:73:5c:25:25:9f:
b9:52:f0:36:0f:fd:26:f0:d1:c8:b9:e7:42:73:71:74:a8:e3:
fe:e0:8e:f6:41:96:d0:a9:ee:76:0c:cd:df:64:5f:e1:2b:a8:
fa:87:1b:2e:c6:d6:5d:b9:64:aa:30:26:6a:f1:11:90:92:c0:
0c:9b:a1:3f:a2:64:f4:96:e2:2a:b3:b0:13:fb:11:63:48:26:
0f:ea:59:49:e5:a5:c2:dc:7c:70:29:fc:43:90:e4:46:8a:2c:
54:1a:14:05:68:55:fc:c7:32:32:13:9d:5c:2f:bb:08:a6:1d:
07:78:18:18:d9:67:92:2b:ce:a3:a9:20:2c:c6:ad:9a:1d:cb:
40:90:ea:3c:8b:ec:e9:ae:f7:03:8e:7a:7b:24:1c:c9:72:a6:
3d:43:ef:86:3f:b1:88:a7:79:5d:d0:ba:4b:31:f1:7a:90:7d:
1e:27:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:00:41 2026 by rpki-client