Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: OiiZV6oCQ5IwlPZMZO56GATw6HSK2pSJH1A/GksyqYo=
Subject key identifier: 17:33:5C:80:D1:D3:4C:B0:48:A2:0E:FB:4B:FF:B5:B5:58:8B:10:55
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 01A0D727BFF767AF9A831F4554447CA4AD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0DDF
Signing time: Fri 25 Sep 2026 06:01:41 +0000
Manifest this update: Fri 25 Sep 2026 06:01:41 +0000
Manifest next update: Sat 26 Sep 2026 06:01:41 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: qVCf3Jjch4dLhtGTtVfy03zHnA1ujX5Ktu5BGnizW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:bf:f7:67:af:9a:83:1f:45:54:44:7c:a4:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Sep 25 06:01:41 2026 GMT
Not After : Sep 26 06:01:41 2026 GMT
Subject: CN=17335c80d1d34cb048a20efb4bffb5b5588b1055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:f5:e8:e6:7b:ff:33:30:04:de:35:d9:fd:
50:1a:19:ce:cb:70:82:a9:2c:b6:eb:20:6a:df:f3:
3e:44:a4:01:aa:de:77:03:37:c1:ec:18:bd:09:2b:
13:93:4c:6e:57:78:91:34:ae:2d:b6:f5:34:e9:9f:
43:d6:44:b6:e5:eb:db:64:8f:b7:be:23:f4:f5:5e:
bc:fb:dc:2f:fd:e2:4a:a0:ac:55:f9:1f:2c:06:2b:
04:79:d8:12:dc:3a:72:f7:f3:d8:f6:8a:be:f9:dc:
7f:63:07:e4:8e:d6:29:98:b7:ca:9d:82:31:54:c6:
a5:ba:aa:5f:93:c4:8b:66:4c:6f:f5:3a:d3:a2:00:
1f:d0:d8:9c:3b:ef:b8:d7:eb:51:84:2f:61:9b:6b:
0d:0b:f5:e1:e0:e7:04:8e:03:a2:ea:19:ef:62:c6:
4c:89:ce:1b:4e:2f:61:57:97:53:7d:c6:bc:a6:b6:
12:1b:ce:50:fd:e8:a7:2f:c6:e8:3b:b2:58:59:41:
9e:5c:7d:e5:f3:54:08:bb:2a:62:d8:4c:c9:6e:73:
cd:20:1e:cc:8c:1b:d7:b5:4d:6e:3c:36:3f:bc:48:
39:d6:f7:a8:7d:5d:d6:f8:b6:ce:dc:e0:df:c7:64:
cc:be:09:22:48:f7:7c:c2:5e:d9:bf:7b:de:65:42:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:5C:80:D1:D3:4C:B0:48:A2:0E:FB:4B:FF:B5:B5:58:8B:10:55
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5d:24:b9:b8:83:42:b9:8f:47:59:ea:1b:3d:5c:63:14:64:
e6:71:a1:b3:a6:c6:6b:b5:09:45:da:c4:28:8f:9f:fb:73:14:
33:1e:11:42:5a:83:31:c7:41:43:9f:e1:44:b0:f8:da:53:fa:
d3:79:97:2a:89:10:46:5b:7b:0b:3f:96:84:4e:89:3c:9b:1b:
f1:24:b1:47:f7:f2:ab:38:f6:2a:9f:09:b1:d7:9e:c8:f9:c1:
a2:f3:f3:e9:2b:05:bd:c5:25:ff:4c:40:92:f3:20:47:3e:ef:
cf:01:ca:9f:93:00:8d:9c:b5:90:78:d1:f2:e3:26:23:2d:e4:
d1:af:c9:68:4c:7a:93:02:d2:14:de:70:15:f8:f9:82:f2:28:
d8:6b:72:f0:cd:80:98:07:a5:ed:78:a7:1e:b8:29:41:5c:6a:
63:4c:9d:8e:1d:1d:5a:72:4a:2f:21:2a:2c:f4:43:9f:de:86:
61:5b:a7:5f:9a:25:5d:cf:46:65:55:5e:95:93:a2:21:6e:e2:
53:c9:91:5e:d9:66:83:9e:d6:3f:43:44:90:bc:13:0d:87:b6:
16:aa:07:01:c5:2c:e8:a6:1c:78:b7:fc:c7:85:8a:9f:4c:a7:
4b:3c:89:e9:7d:a6:3c:d4:2b:4c:cd:6c:65:ad:22:d0:0a:0e:
fe:1c:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:51 2026 by rpki-client