Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: QnQcxl3ms4U+JRIdC7cIdsxXeWBqhqdNP4psmZnM4gQ=
Subject key identifier: 9D:EE:A1:D4:B4:32:90:BA:32:D8:4F:E6:FD:4F:45:37:CD:0E:D3:10
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 01A102EDB8E398E4B72535221490FE60AC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0BBE
Signing time: Sat 03 Oct 2026 18:01:36 +0000
Manifest this update: Sat 03 Oct 2026 18:01:36 +0000
Manifest next update: Sun 04 Oct 2026 18:01:36 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: 07GohB4qu374eIWGR6Y094y3XokrsBR4A5vslEmdmKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:b8:e3:98:e4:b7:25:35:22:14:90:fe:60:ac:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Oct 3 18:01:36 2026 GMT
Not After : Oct 4 18:01:36 2026 GMT
Subject: CN=9deea1d4b43290ba32d84fe6fd4f4537cd0ed310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:4c:08:ee:59:a1:fd:6a:4f:45:63:50:18:
6d:77:49:e6:86:d5:f3:49:e9:2b:be:4b:73:78:cc:
a6:2b:c0:08:4d:b5:97:13:fb:85:da:d9:b2:1f:4e:
f1:ff:76:50:1a:60:2a:08:bf:d8:9f:ce:75:76:93:
cc:6f:0a:ee:bc:84:3e:23:90:e8:c6:c4:65:04:93:
9e:db:2f:10:db:f5:ae:fd:79:27:97:a6:7c:70:46:
e2:50:f4:d6:be:ab:03:e7:a8:22:c6:19:3c:79:27:
7d:48:c5:81:f7:fa:88:f7:63:69:c8:e5:08:cf:d8:
16:8a:43:37:c2:da:03:56:62:f6:66:d8:e3:41:6c:
ba:44:23:6f:17:f2:4d:07:95:43:f4:dd:87:b2:9b:
db:36:f2:3d:3f:26:a1:40:6a:b4:30:8f:2a:49:ed:
f5:2a:95:f7:9a:f0:34:43:f4:bd:97:d2:b8:bc:86:
7d:a8:1a:61:56:de:c7:d9:2d:64:0e:70:0f:53:29:
1e:31:e9:fd:9d:ba:e7:85:f9:5f:5d:ba:31:4d:6a:
b0:21:c2:60:e4:dd:1e:77:e8:bf:6e:d7:de:0e:e6:
3a:81:1b:2f:d3:10:46:66:bc:50:db:75:22:e6:ea:
0a:66:68:45:92:42:24:1d:01:4c:87:33:68:a4:0b:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:A1:D4:B4:32:90:BA:32:D8:4F:E6:FD:4F:45:37:CD:0E:D3:10
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:8d:6c:82:df:a4:a9:87:77:41:5a:37:2a:27:3d:2c:57:
0f:21:e6:e4:ab:8b:5c:56:09:75:d1:27:c9:98:b3:fd:8c:69:
ea:05:f7:c7:fb:25:2d:08:49:fa:da:8d:7a:e4:50:e7:7b:98:
61:ed:45:be:6a:60:43:b9:a3:c7:94:0a:f8:e0:6a:0c:b4:f0:
a2:76:89:75:7a:b9:39:9a:7d:12:b4:ad:c9:03:c6:15:a2:8d:
73:c7:c2:2a:8f:16:d3:f2:ca:47:73:17:90:f6:98:da:60:78:
28:c7:c1:eb:d0:d7:e9:37:80:bb:48:d4:b6:00:b8:3a:d3:41:
92:0d:cf:de:17:24:31:cd:b3:84:01:ae:10:97:1c:9c:6f:32:
f7:22:4e:de:b5:32:21:c5:03:5e:57:ff:77:5b:09:03:79:ff:
cd:36:13:89:e7:9c:d1:aa:24:21:f2:25:66:34:84:dc:41:c5:
db:c3:22:fe:1e:f8:2e:3c:86:5d:59:27:8d:88:4f:50:b0:73:
b1:ea:75:9b:b4:7d:d8:4a:5f:a1:7d:0e:cd:81:3c:87:6d:d6:
0e:b0:97:f0:f2:f4:e3:68:fb:28:28:34:bd:a0:f5:e4:c9:e7:
3b:e0:27:9a:0f:dc:14:f9:38:00:9e:72:42:14:fe:ee:72:2d:
fb:f1:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:11:16 2026 by rpki-client