Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: OaxcjaHJDXw34JzBuAsdk9DiET2ptzGW0BxwthuFt10=
Subject key identifier: 5A:A3:2E:67:60:45:56:5F:27:A3:1E:59:DE:4F:97:50:A8:74:16:E7
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 01A0D4264D7C63E53C34F17031F84D40C520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 140D
Signing time: Thu 24 Sep 2026 16:01:14 +0000
Manifest this update: Thu 24 Sep 2026 16:01:14 +0000
Manifest next update: Fri 25 Sep 2026 16:01:14 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: bUKe8ugMyd/8ElLfF9VpJM23e2Qi/gKePMRD/Yyga80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:4d:7c:63:e5:3c:34:f1:70:31:f8:4d:40:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Sep 24 16:01:14 2026 GMT
Not After : Sep 25 16:01:14 2026 GMT
Subject: CN=5aa32e676045565f27a31e59de4f9750a87416e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:e4:f3:56:fe:c2:19:aa:8b:31:40:43:b4:
17:3e:c2:a7:74:14:c3:7f:48:88:ad:1d:bf:e0:d5:
03:e3:fc:18:2e:33:7d:ce:4e:09:c5:f8:98:04:f3:
cc:71:f2:1e:5b:5e:1b:7f:5e:6b:77:70:c9:fe:a3:
9b:56:b0:a2:35:cf:d2:e9:c7:c0:9d:d6:47:fe:e2:
a4:f6:e7:bf:86:bd:72:83:fc:94:e6:71:19:31:1f:
69:8c:98:22:31:b3:92:f1:c1:6b:2b:2c:fd:db:f4:
4b:c5:9f:a7:65:ee:9b:e2:71:ce:87:94:5e:c4:f9:
8e:56:a7:66:47:30:80:e7:ef:11:22:6a:85:fc:50:
c2:ae:2c:90:20:69:41:56:b5:10:12:19:d9:80:99:
e4:32:01:4d:a6:3d:7f:09:f3:81:8f:ea:7b:b2:b7:
69:ca:6c:9b:51:0d:65:d7:d2:dc:5c:3a:e8:b6:75:
32:c4:5c:af:b0:d8:2e:c5:eb:42:08:f8:0c:1f:2b:
68:7a:9b:2f:d8:55:a6:64:d3:11:06:6b:86:43:0f:
cd:62:e4:88:63:a9:f9:ea:1b:fc:1b:97:a2:20:65:
a1:1c:83:6b:22:a8:57:c5:7c:5c:b1:9f:2f:e0:65:
95:19:cf:54:79:46:aa:51:49:99:51:3f:52:53:75:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:2E:67:60:45:56:5F:27:A3:1E:59:DE:4F:97:50:A8:74:16:E7
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:3f:ff:24:c4:b4:eb:3a:f7:fb:22:c0:d9:ce:78:02:96:
9d:7f:b6:ac:77:f4:5f:c8:f7:06:e9:46:bd:a4:f6:82:54:da:
eb:09:58:2d:e8:97:49:26:91:4a:31:8a:ee:90:8d:6e:e0:41:
b9:38:cb:cd:8b:23:4c:78:75:eb:16:ec:8e:ff:72:00:0b:5c:
97:6a:ca:22:ff:91:63:d7:6f:ef:79:dd:24:03:74:f1:e2:b5:
11:86:81:50:26:58:65:40:72:c7:de:a7:61:22:21:86:41:a3:
9b:c7:9d:cf:19:b1:61:52:cb:62:c1:c1:86:22:19:3b:b3:58:
98:12:ac:75:2d:49:bb:36:71:2d:56:1a:29:16:85:44:b8:f3:
1e:67:05:ca:fe:ce:90:cd:3d:20:18:f6:cf:44:48:95:48:90:
05:01:57:0e:21:4f:90:ec:a3:0f:31:20:41:ae:60:ca:05:54:
fb:ea:38:ec:e0:e0:ad:70:19:c9:33:ef:d5:ed:7e:24:bf:ab:
d7:4a:2b:8e:f0:85:90:0d:69:62:b8:b7:12:43:77:1c:46:b0:
ce:d0:dd:a7:97:e0:f8:85:ec:c2:d8:7b:29:9a:66:81:07:85:
db:2a:86:9f:50:3d:9d:5c:3b:19:91:8c:b8:4c:43:5f:11:ea:
ea:62:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:35:11 2026 by rpki-client