Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: aNDRX5lMf4Iiz2Ff8IFYIde8loUYsCQLmekPeqyF5Aw=
Subject key identifier: E7:93:CD:AB:01:A9:9C:CF:04:C1:A4:A5:C2:06:33:95:2C:80:28:3E
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A0DFF36017356CE40C6B76EBB15A35FAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: CA
Signing time: Sat 26 Sep 2026 23:01:04 +0000
Manifest this update: Sat 26 Sep 2026 23:01:04 +0000
Manifest next update: Sun 27 Sep 2026 23:01:04 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: ZoLqBf2J2j/PJjxGusW4RKRrefhrMPHlu898+NDIXUw=)
3: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (hash: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:60:17:35:6c:e4:0c:6b:76:eb:b1:5a:35:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Sep 26 23:01:04 2026 GMT
Not After : Sep 27 23:01:04 2026 GMT
Subject: CN=e793cdab01a99ccf04c1a4a5c20633952c80283e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:ee:1a:bf:5d:2d:8a:6f:2a:aa:00:80:81:
8e:fe:e3:99:be:96:88:76:28:39:55:5a:b6:eb:a7:
46:f4:f2:5d:42:a2:ab:90:11:0e:f3:c9:4c:5f:28:
b4:1b:18:51:b1:a2:7d:27:af:a9:c0:44:a8:63:4a:
c7:b1:88:35:7d:45:90:a9:ba:7a:b6:bc:7b:7c:46:
8e:e5:1b:28:00:b0:02:be:64:5f:06:11:5f:74:6e:
9c:b4:41:8e:b9:e7:a7:00:07:f3:15:7d:c1:bb:25:
ee:e9:2f:25:80:73:be:0b:01:e4:00:9b:fd:bc:81:
fa:0c:5b:6c:d7:83:b9:be:32:0a:10:5c:96:ba:18:
8e:e5:51:0e:21:df:b8:f0:6c:f6:a8:69:69:15:1f:
27:f6:be:e7:21:4a:87:06:0a:08:fd:57:bd:35:fc:
b6:61:c2:b6:8f:3a:06:c3:35:29:27:ee:18:81:ca:
f5:ea:fe:e7:ea:ef:3c:e3:f3:86:4b:fe:76:e0:be:
b2:9a:b1:02:2f:ab:59:42:ca:13:1f:48:75:50:e6:
4f:57:a3:98:4c:b0:8a:0c:f1:38:1a:bc:99:72:d1:
d2:17:87:df:72:b2:6f:37:21:bb:d6:b5:83:a1:ee:
c2:65:3f:28:64:1c:85:f2:25:f8:60:98:cd:98:f6:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:CD:AB:01:A9:9C:CF:04:C1:A4:A5:C2:06:33:95:2C:80:28:3E
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f9:8b:8b:1f:a6:46:ec:9e:97:9d:bd:6f:d4:af:6f:25:61:
82:e6:33:ec:3d:43:7b:4c:da:c3:2f:7f:79:da:3a:27:12:7b:
ba:88:5b:14:58:de:e9:3b:76:7c:ab:53:2f:ec:41:41:a2:72:
b2:a4:7e:b0:07:02:ea:4e:a3:a9:88:a0:7f:88:82:91:4f:54:
64:23:a0:44:5a:10:1f:7d:d6:b3:0f:b5:72:60:a8:a4:82:9b:
65:c9:55:4f:78:83:01:62:eb:28:a9:1d:2b:2b:d9:09:72:83:
66:56:73:e1:74:9a:07:49:91:d3:de:b4:5b:1b:8f:69:ee:14:
e5:28:64:36:87:e8:05:f4:bf:88:8d:0b:9e:0e:6a:4d:fc:68:
2b:b2:e8:48:9c:8a:6c:e1:98:f7:7b:d6:4d:c2:de:49:e3:83:
d4:ae:09:d5:29:f5:e6:24:dc:80:23:db:96:a1:8b:3b:88:ac:
c5:79:68:1b:3f:e8:39:3e:1d:52:e9:14:65:3f:ab:3d:42:69:
ba:fd:ff:0d:f7:97:5a:f4:50:f9:5a:c9:17:1e:dc:41:68:89:
fe:ac:50:13:45:41:47:0a:8c:62:6c:fa:72:e9:d5:0f:4b:8e:
4d:a7:29:4c:44:11:f7:9b:10:60:70:55:6f:a6:3b:c0:42:e1:
c1:10:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:31:20 2026 by rpki-client