Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: tiqVZ3v4seqoF8qaFclChoTZyTFKD37UiSBBAhvZ9T8=
Subject key identifier: BA:AF:F1:7A:5E:5D:97:16:C3:61:36:A8:DF:F7:F8:B6:3B:3C:58:A8
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 01A0DC1747488C7854613361857097863204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 05:01:48 +0000
Manifest this update: Sat 26 Sep 2026 05:01:48 +0000
Manifest next update: Sun 27 Sep 2026 05:01:48 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: WLpZUGs5U3feaHDZBKlJCHsU8FMeD/Z6lcwNI5jIYXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:47:48:8c:78:54:61:33:61:85:70:97:86:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Sep 26 05:01:48 2026 GMT
Not After : Sep 27 05:01:48 2026 GMT
Subject: CN=baaff17a5e5d9716c36136a8dff7f8b63b3c58a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:91:fb:21:7e:ea:42:dd:0e:48:27:54:8a:
6f:57:37:7c:b2:ab:ec:22:32:e3:19:02:55:99:35:
4e:9c:34:9e:0c:25:cf:1c:45:71:c1:c1:fd:e5:ae:
10:4a:5a:29:cc:b1:f7:f1:38:81:f4:e5:fb:ef:42:
7e:00:f3:b3:30:81:37:76:7c:96:b0:27:4f:3e:3d:
71:03:15:82:1b:9f:ad:e1:b1:6b:e1:b6:93:21:12:
fe:b0:88:ee:f3:68:7e:d8:12:38:4c:e9:e1:d1:c1:
ec:c1:da:cb:90:ea:82:39:2e:56:4b:6d:ee:7f:63:
0c:44:f5:a8:c4:00:58:69:2e:6e:31:e4:c1:22:21:
ed:94:12:0b:9f:03:07:9d:47:da:79:82:3d:9c:be:
54:f7:d5:1d:46:f6:8a:d3:50:2e:50:01:16:9d:58:
fd:bc:f6:d5:77:39:66:82:68:5a:0d:66:75:5b:dd:
9a:09:d4:db:5f:05:79:62:47:1c:b1:7d:01:05:42:
b5:95:23:4e:c2:64:21:ee:b8:eb:55:c4:8d:02:2c:
e4:15:2f:ed:43:54:52:d4:72:85:c4:d4:8d:66:f4:
71:e6:22:1a:29:35:5a:ea:8a:a4:4a:f4:b3:82:15:
4c:99:5d:45:27:3b:fd:a7:2a:b2:2e:5a:cf:b6:65:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AF:F1:7A:5E:5D:97:16:C3:61:36:A8:DF:F7:F8:B6:3B:3C:58:A8
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:f2:49:60:88:8e:dd:d3:08:93:bb:b0:e1:b5:b2:49:eb:
89:20:ba:7f:dd:28:62:ed:ad:86:3d:e3:4e:19:ce:8b:85:44:
c3:06:a9:91:29:b4:c4:48:70:0b:52:25:47:3f:ee:f4:f9:dc:
20:51:39:5d:db:f5:98:88:f6:0c:52:1c:0c:c7:f2:99:11:56:
1f:28:e2:e2:29:78:ad:da:6b:9d:dd:b7:fb:7f:95:d2:c1:14:
61:16:52:98:05:f8:20:4c:2a:5b:36:b6:43:53:27:61:08:57:
78:9d:ed:1d:6a:68:cb:a4:47:ff:e3:67:ac:4b:64:39:63:54:
89:31:07:cf:78:da:87:2b:d4:2d:cc:4e:8e:9e:1f:60:d1:82:
a6:5f:89:f4:d8:40:1a:0c:01:1f:aa:4b:84:6e:a5:49:b2:1f:
c3:37:c3:cd:bf:ec:8b:b4:96:a4:81:d5:8d:04:43:37:53:b2:
1f:a5:29:e0:38:18:c9:68:c7:97:d1:51:74:19:0e:14:41:4e:
ea:1f:cb:c7:e6:7c:73:6d:9b:8f:db:1c:79:84:a3:4a:67:4f:
a8:2e:7c:46:09:e4:65:d5:48:bb:66:1a:4b:57:50:e6:55:72:
e5:d3:12:59:3e:51:f3:07:a4:e9:1d:c3:68:33:72:03:17:88:
b1:58:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:16 2026 by rpki-client