Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: Nrp+vuT8RceNnLvWycMY/TxFxSP7X598eiPoUE32Edc=
Subject key identifier: 37:76:14:26:19:76:F8:A1:D3:2A:EA:36:3D:5A:99:1B:95:FC:7B:D6
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 01A0F6E970DDB4F79330022F2BEE1782B9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1A83
Signing time: Thu 01 Oct 2026 10:01:28 +0000
Manifest this update: Thu 01 Oct 2026 10:01:28 +0000
Manifest next update: Fri 02 Oct 2026 10:01:28 +0000
Files and hashes: 1: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (hash: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: ytWy9IPtOPSqOOUGHLKflJKnYefjbfTd0qTmLGonFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:70:dd:b4:f7:93:30:02:2f:2b:ee:17:82:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Oct 1 10:01:28 2026 GMT
Not After : Oct 2 10:01:28 2026 GMT
Subject: CN=377614261976f8a1d32aea363d5a991b95fc7bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:6a:35:11:ce:db:74:3f:c1:b3:7b:fd:38:
26:cf:7a:80:ea:d9:c6:3c:1d:de:d0:c4:f2:f5:df:
39:7c:94:9d:49:06:b7:12:4b:ad:3a:75:8a:52:d1:
2b:96:d7:ee:f4:47:9f:3d:f5:af:38:29:f8:17:46:
e5:3f:dd:76:18:4c:45:48:f2:e6:2a:cf:f8:1c:1c:
44:30:7c:bd:0d:8e:1e:30:1d:dc:ff:24:e5:eb:0a:
5f:bc:cb:f9:a2:c9:a4:41:8c:13:b4:d3:1b:00:34:
07:8b:92:6d:b0:df:22:46:26:2c:e9:db:71:20:f5:
cd:a0:8e:7c:74:77:55:d0:4e:9e:01:4c:3e:9a:aa:
02:74:03:53:30:43:e5:7b:ca:2d:83:b2:3f:eb:73:
b3:8e:ba:58:9f:ad:ce:fe:8b:47:d6:63:6c:94:51:
34:1c:65:ec:e2:65:5e:1a:b9:ea:35:85:00:15:bd:
6c:12:37:1a:9b:dc:34:b3:60:20:cc:b5:d4:60:d0:
b1:c9:e4:a1:64:28:86:ee:d2:27:1a:6d:63:72:83:
77:eb:b0:5b:97:0d:38:af:d8:33:15:63:78:85:41:
aa:70:c3:5e:cd:4f:f7:82:d9:9f:6d:52:86:91:15:
dd:e3:85:55:b4:06:1f:56:76:59:79:4f:13:57:91:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:76:14:26:19:76:F8:A1:D3:2A:EA:36:3D:5A:99:1B:95:FC:7B:D6
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bf:57:49:19:1b:65:9e:96:b0:3f:00:46:d3:6a:8d:b5:d3:
e5:e3:ad:2e:e9:10:41:b4:02:ae:13:24:ba:fa:23:63:bf:58:
b3:0f:8e:c2:6e:e5:32:8b:ba:24:40:d7:3d:eb:99:1b:bc:11:
a9:36:fd:43:02:39:59:b6:3c:b6:41:6e:7b:6b:87:32:60:64:
c9:25:d9:17:9e:bc:b5:bc:c5:5f:e2:95:d5:41:b1:05:43:ae:
df:b1:25:73:f2:f4:0f:7b:2d:f5:ab:db:6e:24:ca:e3:45:28:
d1:5d:87:54:65:a4:51:52:d6:da:28:db:4d:59:4c:a8:fe:80:
b3:19:88:6b:f7:c0:5d:8f:e1:8d:18:40:d8:10:24:49:9c:e7:
34:aa:64:b3:0f:f1:37:7c:5b:ed:c3:46:f0:ec:50:88:82:49:
0c:01:66:7f:58:05:c7:30:0d:1c:29:e1:30:20:2f:c6:2e:e8:
09:e2:ab:97:b3:8b:5e:fd:55:8d:8e:63:68:71:1f:56:32:64:
2f:a5:0b:1a:1a:51:b0:74:ab:bf:33:d0:2e:1d:5f:8e:da:03:
0d:0e:71:1b:ac:66:fb:ff:4b:36:9f:f8:5e:ff:94:4f:9a:ae:
fd:5f:5e:42:85:61:05:5b:1c:71:d8:03:88:8f:e5:1b:31:ae:
a5:06:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:27:07 2026 by rpki-client