Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File: y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier: hPrraqofZ/kjOxxHuxlysVG5P1ENJxHKQSjsfauHZgs=
Subject key identifier: A5:90:36:04:85:41:6F:8D:C2:5E:E1:D7:6A:C5:98:E2:2A:CC:60:98
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 01A0D916DDCCEB8010BD4BA33AAE15F039C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 15:02:29 +0000
Manifest this update: Fri 25 Sep 2026 15:02:29 +0000
Manifest next update: Sat 26 Sep 2026 15:02:29 +0000
Files and hashes: 1: gTn5FRcz1WjHbFIUzmESIJRxMLs.roa (hash: 3+4+41QBJiY0s+CghRUoKRon+yDRu0Zt5Sbg75kXtZc=)
2: sxT3f0dvZnHHcSZ34lCIOZ9GuVw.roa (hash: pBbjOXEXTBhzJuJASEYw2dI37yzvRUATFTwvTf15Ndw=)
3: vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa (hash: sq7lKfoyNzXqh8ifJ6Y3jNbECu87UDlvl3/h5jz4zpo=)
4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: WvZj60xG4lQbszV7p7fLjrOfFGv1YyWy3YsW0pX5SeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:dd:cc:eb:80:10:bd:4b:a3:3a:ae:15:f0:39:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Sep 25 15:02:29 2026 GMT
Not After : Sep 26 15:02:29 2026 GMT
Subject: CN=a590360485416f8dc25ee1d76ac598e22acc6098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:3a:82:b5:e6:b4:c1:4d:35:19:11:1b:39:
28:61:e5:4c:29:ff:bf:f4:b3:9b:4e:18:59:c9:41:
64:5b:7d:b1:f5:18:f9:78:74:ae:93:c8:c3:2b:51:
be:3f:42:4d:1c:13:46:1e:76:4f:66:0e:32:bc:24:
2b:e9:64:84:d7:f2:ed:0e:7a:fd:b4:13:79:eb:3a:
55:f5:7a:22:9d:a0:64:1a:7a:62:d8:f8:7f:9f:5b:
c1:eb:62:54:57:7b:79:ef:c2:dd:2c:1e:b1:61:21:
fc:dc:2d:45:a6:ed:cc:86:60:56:df:64:88:a2:9f:
42:82:11:64:8c:76:c3:da:c9:89:2a:57:ed:ee:7e:
fb:26:a9:a9:ce:ad:fc:1a:ed:fd:93:b3:21:63:58:
e1:cd:03:24:7f:2b:0b:ed:93:68:a3:1a:f0:5c:29:
e6:a4:2b:f0:80:26:52:af:ee:12:26:64:0c:bb:00:
6f:24:28:15:ed:06:7d:ef:47:75:3d:68:95:70:80:
12:39:c7:13:f8:d7:06:9b:ff:73:38:69:36:0d:33:
2c:7e:0d:0e:7b:0a:dc:b0:32:eb:c2:73:d5:c7:20:
3a:1c:84:6d:1f:42:1c:1a:9d:75:37:e5:59:19:28:
41:7c:ee:04:e6:08:ce:eb:5d:9c:3b:da:c9:d3:51:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:36:04:85:41:6F:8D:C2:5E:E1:D7:6A:C5:98:E2:2A:CC:60:98
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f5:9d:01:60:62:c0:18:13:57:c9:f9:82:66:f8:33:cb:d0:
a8:e5:a7:10:8f:e0:a8:2e:15:d7:84:42:d9:bf:1c:a7:43:f0:
51:de:85:b2:fb:35:3a:62:0d:65:1d:f7:ff:20:4e:b1:02:50:
ac:dc:94:50:9d:9a:fc:2c:84:52:5a:81:16:af:8c:49:43:84:
6c:24:f5:66:3f:e2:11:c7:46:e1:28:c1:8e:0a:c3:fe:1c:18:
0e:bd:0a:94:a9:15:b5:99:f8:8d:11:cc:00:ca:d2:78:c8:4e:
4b:68:3f:bc:e2:55:96:8b:aa:87:fd:f9:43:c6:14:58:00:82:
1d:02:31:09:88:ae:e7:31:d4:24:35:5e:60:aa:cb:f7:11:30:
30:96:2c:37:70:51:32:47:ba:1c:6c:1c:09:c5:1b:2f:92:69:
af:ef:c1:2d:6b:93:c9:a1:9b:60:34:c7:a3:90:a5:be:83:d9:
27:5c:d9:b6:29:91:86:a5:c8:f3:43:8d:21:71:a8:d3:ee:3c:
65:33:2f:46:53:0b:ca:01:ed:c8:eb:21:19:a6:9b:60:9e:8c:
8d:ee:00:08:1b:1e:d2:79:ad:26:e9:e0:fa:2b:0b:0a:4b:1e:
35:ae:77:41:80:e1:54:8f:f3:58:86:93:ae:df:0c:5a:f6:1e:
39:aa:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:39 2026 by rpki-client