Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: 4s0qsvKg/5Xg0tpaeJVLNzKFH0MIQZHHALPxVHc0V0k=
Subject key identifier: 09:E7:2B:5A:4C:96:7D:8A:2B:35:D2:7E:11:8C:FC:93:8D:99:F7:77
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 019D27A8B00549C90252013C4C85EE3A6CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 07E2
Signing time: Thu 26 Mar 2026 01:00:59 +0000
Manifest this update: Thu 26 Mar 2026 01:00:59 +0000
Manifest next update: Fri 27 Mar 2026 01:00:59 +0000
Files and hashes: 1: blvAUQ_vYzlmQ7upxenWGMgFKTU.roa (hash: yNaiIOARrLN2kHH5nOuqLzuUV9KxxDnEpy1TNN43VTU=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: yEsW1kmfXwNurrkVOLWo1xW7zWQWjSDU0tZMUuF5HBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b0:05:49:c9:02:52:01:3c:4c:85:ee:3a:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Mar 26 01:00:59 2026 GMT
Not After : Mar 27 01:00:59 2026 GMT
Subject: CN=09e72b5a4c967d8a2b35d27e118cfc938d99f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:fd:5f:ee:8f:57:33:7f:cd:c0:99:61:41:
a2:52:b7:ce:61:c5:98:ce:1d:f9:d9:95:1f:c1:f6:
03:b6:45:40:af:6f:e3:8e:58:5a:9a:c7:9f:24:31:
14:83:ca:4f:45:f7:b8:e9:08:5e:27:bb:6c:a2:44:
41:ca:93:82:24:e0:4f:e2:7b:79:98:73:05:67:12:
ec:d4:a0:c5:51:82:2e:8f:76:0a:d6:37:d6:eb:85:
cd:a1:61:aa:b9:fe:f6:a2:95:54:86:bc:50:69:83:
3c:fe:43:4d:e2:fc:e7:e6:ff:75:12:3e:d0:ac:40:
20:71:da:e9:61:5d:4c:f5:11:60:5f:aa:a3:ee:c3:
af:c5:82:b8:59:c0:c5:fa:a1:fe:b4:9f:db:5c:d6:
30:4d:5a:8b:88:00:d8:09:94:75:97:f9:11:4a:21:
33:ad:6d:8a:fe:e4:66:b1:2c:80:c9:6b:79:73:19:
d2:22:1e:ce:08:1a:8c:ab:e0:5a:f9:e0:26:bb:98:
78:dc:da:7b:18:e2:2f:f9:3c:3e:51:c1:75:eb:d0:
a0:d3:ba:32:3e:bf:a6:be:f1:5a:f8:c8:b3:20:bf:
35:ed:e8:29:52:49:99:41:1c:35:bb:93:42:bd:10:
c6:6c:cb:b3:9c:ec:d7:11:6c:85:63:ce:a8:6f:52:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:2B:5A:4C:96:7D:8A:2B:35:D2:7E:11:8C:FC:93:8D:99:F7:77
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:11:96:17:58:f5:d0:a1:fd:54:a3:4c:81:5c:3e:3e:9a:76:
73:19:d2:24:79:5d:e5:9d:fd:3a:f8:2e:39:61:ff:6d:17:01:
e6:2b:35:60:02:7a:d6:1f:c8:48:23:9a:2a:7e:3f:b1:d0:48:
00:47:2f:a4:1b:a3:dc:68:8b:91:70:32:93:b7:f7:27:5b:c5:
60:23:96:7b:40:a6:12:0e:c2:60:ba:46:bc:46:72:39:91:9a:
4e:2e:62:a3:b0:8b:31:c3:ef:04:60:39:58:a5:d7:65:c9:bb:
68:92:8b:e3:e7:33:a6:6e:d3:85:51:99:e0:a3:89:21:c4:34:
12:cc:37:6d:32:9d:1d:56:a1:49:04:ea:a7:16:86:99:7b:12:
b0:ce:b5:6b:d2:d9:27:62:d4:8f:21:9c:55:7c:08:c8:2a:04:
aa:9b:ee:22:56:a5:04:ad:ca:b0:01:80:29:1d:bc:2b:b6:a8:
19:54:10:65:5f:14:cb:46:68:db:34:4f:a5:0d:9a:e6:01:9c:
ce:9b:eb:b7:c4:18:55:5c:53:b6:59:8a:5a:01:e0:d2:5a:20:
96:7e:b2:ed:94:cc:d9:30:69:bf:a7:d8:4d:57:55:37:d8:ec:
dd:33:94:50:bc:9f:b0:78:82:61:7a:67:d7:42:b1:22:0c:e8:
d5:d6:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:15 2026 by rpki-client