Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: VZqnnyRTVy5aUIaXQXkCHpul3EPcQAJ4FbhOh0blHtg=
Subject key identifier: 5D:9B:98:D4:A0:EA:81:8C:01:F1:2F:17:5F:C2:6A:28:55:A2:43:63
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 01A0D9F199A5997507B0A586EC666D9755A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 022C
Signing time: Fri 25 Sep 2026 19:01:24 +0000
Manifest this update: Fri 25 Sep 2026 19:01:24 +0000
Manifest next update: Sat 26 Sep 2026 19:01:24 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: /7FYlpqdKFRnGvPsFRbQNypOBp0272TzJKUOFWcMgfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:99:a5:99:75:07:b0:a5:86:ec:66:6d:97:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Sep 25 19:01:24 2026 GMT
Not After : Sep 26 19:01:24 2026 GMT
Subject: CN=5d9b98d4a0ea818c01f12f175fc26a2855a24363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:f5:74:2a:29:53:41:c7:37:05:2a:22:73:
32:d8:5a:30:84:ad:6b:7b:e2:e1:69:6b:8e:19:30:
ef:ca:d5:12:3a:87:b0:c7:65:a5:48:16:4b:30:6f:
63:1d:c1:a0:9b:ea:39:d6:b5:50:ed:1f:b7:8c:c5:
e0:c9:32:8e:9b:03:50:3d:67:f8:7b:18:d1:aa:e8:
2c:41:49:e3:bb:9a:ee:f5:b7:1d:c7:04:88:10:3b:
8d:76:16:0c:96:a8:8e:cf:b6:26:d4:e2:50:74:0f:
5e:c3:c6:47:ca:1e:5c:8c:b7:dc:2e:c7:bf:ce:0a:
08:96:6f:20:55:ed:82:0b:9a:af:40:43:10:05:f6:
8f:d3:bc:f7:4f:2c:02:1b:6b:a2:04:88:ab:ee:d9:
03:79:34:13:b2:61:77:62:3b:af:04:fd:cf:15:08:
91:97:07:a9:14:2a:58:ca:74:1e:83:60:a5:54:a9:
db:9d:ce:8c:dc:fa:9c:61:77:ae:db:a4:18:ac:61:
b2:0e:b9:20:64:11:21:83:c2:2d:a0:5e:20:2d:42:
09:2e:b4:81:b0:cc:64:97:07:b2:cd:78:64:e1:08:
ed:72:55:b0:ed:09:f7:50:60:1e:11:e0:9b:d6:45:
4a:5a:af:e6:26:4d:42:84:3d:be:38:a6:19:21:50:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:98:D4:A0:EA:81:8C:01:F1:2F:17:5F:C2:6A:28:55:A2:43:63
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2c:43:49:e4:5e:e9:ef:1d:29:52:34:68:61:33:68:1b:44:
96:22:ae:55:cb:34:f5:65:a0:c6:d3:07:87:05:21:6f:cb:91:
0e:f1:fa:49:97:f6:64:ae:dc:f2:aa:80:38:08:03:c9:06:1a:
31:81:22:3f:50:37:cb:1f:b9:ec:f6:09:83:16:3b:6f:d2:ae:
71:19:e2:ec:09:91:63:c0:97:fc:6d:55:93:21:20:d2:cc:cf:
fa:d7:5c:10:a9:66:d1:d6:a5:5a:c9:94:2b:75:ed:3c:76:f2:
66:71:ec:db:d2:bf:47:1a:f0:8c:c8:15:89:4c:95:35:7f:39:
29:90:99:91:20:ac:a9:22:87:38:0d:ce:96:fb:ef:c8:42:a3:
d6:0f:95:61:88:3a:d1:2b:4c:4e:21:5e:9e:99:cb:e1:bc:86:
5a:c0:1c:76:c2:b8:a7:51:14:ec:57:01:ea:44:36:1b:a0:f4:
65:13:2b:6c:38:c4:4c:96:f5:79:cd:de:e3:de:13:8e:c4:ca:
17:0e:2d:8c:9c:af:6c:3e:d5:83:ba:34:3c:ac:e6:bb:e5:78:
ea:1c:cc:39:17:c8:65:52:04:ed:2e:e2:d5:a6:37:c3:6d:03:
bd:d0:d5:87:30:40:a3:20:da:02:98:58:6e:ca:ee:40:4f:52:
69:77:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:42:24 2026 by rpki-client