Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: N7bVasdWHiOpKMrot2FPOps0sT0tR0hP/t/jBK4w2XY=
Subject key identifier: 9B:35:41:45:44:AA:B1:FB:CB:49:74:4A:63:19:EA:B6:FE:24:19:59
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 01A0E2193BC10A5DA32531525F6B46724A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 055F
Signing time: Sun 27 Sep 2026 09:01:39 +0000
Manifest this update: Sun 27 Sep 2026 09:01:39 +0000
Manifest next update: Mon 28 Sep 2026 09:01:39 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: LsmjopXqeDceLjzwN+auYj9EkzzrQ5sGSlP/QA7RRNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:3b:c1:0a:5d:a3:25:31:52:5f:6b:46:72:4a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Sep 27 09:01:39 2026 GMT
Not After : Sep 28 09:01:39 2026 GMT
Subject: CN=9b35414544aab1fbcb49744a6319eab6fe241959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:1f:9f:dd:95:97:a8:b5:a7:5c:25:6d:59:
da:8a:cf:df:c0:2b:d0:77:72:97:c9:be:21:d8:3f:
90:88:e3:cb:1d:d0:3f:f4:2f:00:f1:a8:7e:3b:f9:
85:a9:e7:c4:34:60:00:8e:04:3c:3e:7a:6c:c7:dc:
64:f3:a4:fd:57:fe:fa:bf:dc:ff:ca:ec:85:f3:b7:
3d:1b:26:7c:e4:e8:4c:13:b5:7b:1d:49:7f:a2:ee:
71:91:cf:0b:04:0a:d3:97:05:84:cd:fa:bc:20:6b:
e3:af:ad:e3:d6:3e:40:69:d2:79:71:8b:cf:26:ea:
d8:9e:3c:01:d0:9e:15:70:cb:11:ee:b2:5e:00:2f:
01:1e:fc:66:fb:11:2a:30:e0:f9:ae:a8:ac:03:50:
25:02:98:8b:dc:bc:e9:e1:a2:7a:75:96:30:3d:c3:
f8:5b:24:cd:00:79:21:74:50:90:63:1c:ac:d9:f3:
a3:e7:76:f7:40:2b:f9:8a:78:e2:eb:2a:57:8b:43:
0a:2a:5c:3c:91:30:21:44:d9:e5:80:f4:29:d9:ae:
79:55:f9:b4:4f:76:b6:ea:27:c5:05:e5:e9:bd:1b:
8b:9f:2a:e4:ea:17:cc:7a:dc:e1:84:f9:b7:a6:c5:
76:77:35:d2:cc:b0:a0:e0:cd:50:43:3c:2a:ec:84:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:41:45:44:AA:B1:FB:CB:49:74:4A:63:19:EA:B6:FE:24:19:59
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7d:fb:b4:56:e6:f0:ff:eb:40:26:3e:b3:a7:d7:9c:f8:bf:
74:3e:b0:91:e5:b7:7d:e7:1b:ab:d2:31:1e:7a:90:b7:15:dc:
ba:05:2e:51:c2:69:42:91:44:8d:ff:88:e7:48:06:52:95:23:
40:a1:88:7e:bb:ee:d0:46:7e:3f:5c:19:cc:76:c6:ac:6d:bd:
e7:ec:c8:55:a4:4e:d7:e6:01:0d:97:aa:36:c8:68:77:37:f0:
7b:5b:e6:14:58:87:27:21:62:43:04:ee:8f:77:e8:1d:1e:d6:
d5:70:df:78:27:25:99:d0:02:ec:aa:d8:48:e9:aa:65:f2:eb:
ef:dd:05:85:ae:00:9c:fe:7e:dd:5a:b6:d2:fa:36:30:3e:51:
38:ca:5d:4a:e5:bc:8c:c2:5f:4c:f0:90:06:b8:9e:fc:f3:a9:
2c:34:00:e6:bb:ee:d5:37:26:29:91:1d:cd:5a:9f:70:42:c7:
ce:f0:6d:96:af:f3:76:fd:da:dd:88:ba:8e:f5:a5:0e:ab:26:
c5:53:61:e0:c3:4f:73:ce:81:8d:8e:7d:5d:58:8f:40:d5:14:
b2:fd:e4:ae:ea:27:ac:62:31:2a:b0:9b:b4:7d:67:35:59:0a:
4f:4e:55:44:f3:1e:99:05:39:ac:09:e2:38:7c:f5:fc:0c:1f:
28:55:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:08:48 2026 by rpki-client