Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: ZAsxeAMhKOIw+60XHZ5RBP5aDX0gPrLFlIo9mctOlLE=
Subject key identifier: A5:6D:EE:A8:0B:BB:6E:42:00:52:5E:78:2C:C3:47:E4:6B:BE:78:34
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 01A0EB536D421EF243F337AC9BE939CF78A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1400
Signing time: Tue 29 Sep 2026 04:01:48 +0000
Manifest this update: Tue 29 Sep 2026 04:01:48 +0000
Manifest next update: Wed 30 Sep 2026 04:01:48 +0000
Files and hashes: 1: EpTBQMmX_i98nrHenbAZIilledc.roa (hash: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: t9WlkRnelNiCBGGecAFDJQR+MDacUSY3NfYuYxXE9sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:6d:42:1e:f2:43:f3:37:ac:9b:e9:39:cf:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Sep 29 04:01:48 2026 GMT
Not After : Sep 30 04:01:48 2026 GMT
Subject: CN=a56deea80bbb6e4200525e782cc347e46bbe7834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:5a:19:58:af:e2:5e:ea:38:65:ff:64:6e:
5c:2b:ea:06:0d:7e:5a:a5:f3:e5:99:ed:1f:ad:1b:
0b:0d:2a:47:38:d5:5c:21:38:c0:94:01:bb:24:36:
aa:e9:ba:e9:20:4e:e1:c1:79:f8:1a:f8:0d:d7:cc:
03:0e:41:2a:0f:64:9e:6c:f8:8a:e2:d2:4b:0f:5a:
c8:75:9d:66:66:54:62:75:8c:80:a2:3a:e3:6a:c4:
5a:a0:c3:9b:18:4c:be:8e:fa:0c:e6:c0:56:78:35:
cc:ce:ea:34:9e:25:f6:ab:2c:de:7a:82:c9:69:f2:
05:e3:1b:18:ad:66:07:d8:8e:98:59:8e:06:2a:0f:
9e:8a:f7:ed:b5:95:55:30:b1:ae:0e:08:9a:84:fc:
cc:7d:85:0d:0a:a5:f7:4b:1b:c5:2d:90:f9:f1:30:
53:c7:25:68:82:36:9d:0f:da:74:93:a9:2c:8a:8c:
88:0f:9f:fa:d7:18:41:13:9b:dc:08:bb:94:6b:2d:
22:48:c0:cb:46:33:80:eb:3f:19:47:fa:43:2b:61:
41:32:7f:2c:6a:8c:d2:14:88:09:37:4b:66:56:3b:
0a:7f:f0:e4:cf:70:a6:3d:29:33:72:15:5f:d5:47:
ea:87:cc:e0:c3:40:a9:04:a0:d3:d6:22:ab:de:4e:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:EE:A8:0B:BB:6E:42:00:52:5E:78:2C:C3:47:E4:6B:BE:78:34
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:5a:dc:3d:2c:0d:bc:92:fa:67:96:f5:e3:37:5a:0b:88:
0a:e7:1e:d6:52:b8:59:3b:82:2f:72:f0:75:33:ff:22:07:98:
57:8a:61:42:14:e8:28:ac:40:5d:45:b9:77:ae:e5:33:98:49:
cd:77:af:5f:87:e5:7e:5c:a0:1b:fa:49:20:63:dc:ec:35:a4:
65:83:aa:41:7b:28:8d:17:3a:89:ec:7a:bd:88:2e:a9:e1:16:
2c:f7:e4:c2:ba:7e:51:dd:16:c4:bb:87:b6:8d:ec:48:ae:89:
18:72:c0:ea:cf:55:f0:94:f6:b7:81:15:95:da:99:e2:21:34:
41:d4:ad:52:0b:8a:a7:6a:9c:5c:60:ad:8a:f3:39:29:1f:3e:
c7:f6:70:a6:db:65:26:70:01:1c:d9:48:f1:89:bf:f8:40:09:
fa:1a:87:9f:a2:3b:09:c3:ed:09:11:20:2a:4c:cc:88:da:9f:
ed:df:ca:88:5c:10:0d:a4:37:27:02:16:97:f6:34:e4:1f:53:
2a:a9:2e:49:6a:2e:8e:ba:78:23:89:84:43:30:4c:45:a9:2c:
8c:36:4f:8c:0f:63:16:d6:7d:9e:4c:6e:53:75:4f:f0:df:be:
c7:1e:e5:64:c2:49:26:c4:e7:9f:7d:26:64:58:eb:1d:27:3f:
74:00:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:38 2026 by rpki-client