Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: JQKbUzCDz49UBZERsNra1S7VxUUV5NPdTel+pL4cl2A=
Subject key identifier: 27:74:21:C5:EB:D7:8F:A2:39:34:D9:08:2F:F3:8B:97:9C:A0:8D:F1
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 01A0EA402A73BFCA4181DB799ECBDE4EFF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 09DB
Signing time: Mon 28 Sep 2026 23:01:08 +0000
Manifest this update: Mon 28 Sep 2026 23:01:08 +0000
Manifest next update: Tue 29 Sep 2026 23:01:08 +0000
Files and hashes: 1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: 6hsF8feYfYw0uy0xQ93L94Zj44IHKSCW+EXeeiWyXSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:2a:73:bf:ca:41:81:db:79:9e:cb:de:4e:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Sep 28 23:01:08 2026 GMT
Not After : Sep 29 23:01:08 2026 GMT
Subject: CN=277421c5ebd78fa23934d9082ff38b979ca08df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:cb:d8:02:26:7e:e6:f5:59:0d:90:12:7b:
9d:a5:bc:dd:70:fc:8e:98:c3:9d:46:e1:9c:2b:01:
f2:b8:f6:58:e4:bc:75:23:ab:fa:94:a1:14:01:cc:
35:9e:cd:17:f6:e2:6a:3b:70:8f:a4:5a:f5:c1:00:
84:8d:d1:71:57:75:30:85:ce:8b:06:d9:31:21:36:
84:51:30:cd:48:1f:89:dc:66:11:51:c8:f5:52:5e:
f4:08:e4:53:fa:24:d6:82:6a:40:03:30:05:eb:45:
b4:0b:4c:78:2d:2c:cb:27:48:50:ed:b4:e6:4c:49:
d1:9a:dc:25:a7:8f:7c:82:66:cd:9b:6b:15:ee:d5:
84:a4:d8:9f:33:49:fa:8a:d2:a1:77:6c:67:dc:d5:
bb:a4:c7:61:b0:ac:20:67:91:95:8f:d3:60:a3:0a:
32:ff:18:aa:ea:90:49:50:f8:6b:65:2a:96:b9:8b:
3e:4d:83:d6:59:89:1b:06:e9:c6:11:8b:2e:82:eb:
e6:bc:37:9d:a7:09:30:5a:4f:51:54:73:81:f1:59:
24:39:ad:ba:62:8d:40:87:f3:de:a5:07:dc:65:cf:
4c:26:f2:05:11:83:1b:d2:6f:e7:da:f7:c6:99:d0:
09:4e:0b:ad:56:f3:d5:95:d7:b2:ad:b5:5f:c4:01:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:21:C5:EB:D7:8F:A2:39:34:D9:08:2F:F3:8B:97:9C:A0:8D:F1
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:38:56:21:de:0f:e2:98:9c:0c:c3:c4:4a:98:76:1d:cf:
60:3f:74:5e:da:c8:8d:c2:44:9d:a4:50:2e:93:5e:1f:6d:e1:
21:44:b0:0b:0a:85:6b:e0:4c:c2:34:d4:6d:65:c0:bc:a9:01:
77:b2:26:b5:28:5b:6a:ae:42:19:a6:55:5c:16:c3:91:fd:12:
d4:93:b4:f4:e9:e2:2f:08:3e:7d:32:59:2d:21:4f:68:4d:b8:
43:bf:bf:62:5d:9a:30:90:6c:9f:da:78:8b:a7:ee:4d:6d:6b:
c0:76:f8:e1:06:d3:d9:82:59:d0:f2:df:9e:16:db:e8:39:bf:
22:e5:77:52:68:1a:c5:c6:4a:85:13:be:83:27:36:8e:51:01:
ff:d2:b1:df:b7:e6:1a:07:c9:90:09:6b:91:5f:f2:ec:95:aa:
00:a4:58:51:e9:e6:02:c2:94:09:39:37:20:89:5f:5e:d9:6b:
41:3b:44:fe:b0:e0:7c:05:f1:11:51:5e:ee:58:c9:04:69:2d:
28:be:e1:a7:47:20:df:97:96:e8:10:12:91:5f:dc:8a:43:d8:
15:74:70:db:cf:10:a3:ea:0e:3a:a3:60:03:6f:54:49:e5:e8:
3b:9e:bb:60:bb:f8:d0:fd:e4:f7:1e:4f:ae:5b:b7:74:9d:90:
52:9d:5f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQCpzv8pBgdt5nsveTv91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj
ZjJmNGIwHhcNMjYwOTI4MjMwMTA4WhcNMjYwOTI5MjMwMTA4WjAzMTEwLwYDVQQD
EygyNzc0MjFjNWViZDc4ZmEyMzkzNGQ5MDgyZmYzOGI5NzljYTA4ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MvL2AImfub1WQ2QEnudpbzdcPyO
mMOdRuGcKwHyuPZY5Lx1I6v6lKEUAcw1ns0X9uJqO3CPpFr1wQCEjdFxV3Uwhc6L
BtkxITaEUTDNSB+J3GYRUcj1Ul70CORT+iTWgmpAAzAF60W0C0x4LSzLJ0hQ7bTm
TEnRmtwlp498gmbNm2sV7tWEpNifM0n6itKhd2xn3NW7pMdhsKwgZ5GVj9Ngowoy
/xiq6pBJUPhrZSqWuYs+TYPWWYkbBunGEYsuguvmvDedpwkwWk9RVHOB8VkkOa26
Yo1Ah/PepQfcZc9MJvIFEYMb0m/n2vfGmdAJTgutVvPVldeyrbVfxAH0nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd0IcXr14+iOTTZCC/zi5ecoI3xMB8GA1UdIwQY
MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt
NzJjYjZiYWU0YTNkLzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUtNzJjYjZiYWU0YTNk
LzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDk4ViHe
D+KYnAzDxEqYdh3PYD90XtrIjcJEnaRQLpNeH23hIUSwCwqFa+BMwjTUbWXAvKkB
d7ImtShbaq5CGaZVXBbDkf0S1JO09OniLwg+fTJZLSFPaE24Q7+/Yl2aMJBsn9p4
i6fuTW1rwHb44QbT2YJZ0PLfnhbb6Dm/IuV3UmgaxcZKhRO+gyc2jlEB/9Kx37fm
GgfJkAlrkV/y7JWqAKRYUenmAsKUCTk3IIlfXtlrQTtE/rDgfAXxEVFe7ljJBGkt
KL7hp0cg35eW6BASkV/cikPYFXRw288Qo+oOOqNgA29USeXoO567YLv40P3k9x5P
rlu3dJ2QUp1f6g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:49 2026 by rpki-client