Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: gCnjAX+DZO1ZOs3hxVn/Gs2T4r6Gmm3UgbOD0nNn2sE=
Subject key identifier: 07:C7:39:D0:DE:18:6B:5D:FC:B3:EF:67:92:98:7D:4C:CC:0E:23:E5
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 01A0DC4DC3A75321E924466815305CD33646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 135F
Signing time: Sat 26 Sep 2026 06:01:18 +0000
Manifest this update: Sat 26 Sep 2026 06:01:18 +0000
Manifest next update: Sun 27 Sep 2026 06:01:18 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: GXbaHIJlr+DYH0EigoBsA+8klx2uGnqlGwZ6NTCIvpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:c3:a7:53:21:e9:24:46:68:15:30:5c:d3:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Sep 26 06:01:18 2026 GMT
Not After : Sep 27 06:01:18 2026 GMT
Subject: CN=07c739d0de186b5dfcb3ef6792987d4ccc0e23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:8e:3b:29:b6:c4:b4:e0:54:41:6b:15:74:
cc:36:f6:49:e7:8c:b1:ca:0a:b7:00:2f:4f:2c:9e:
c4:76:f3:35:fc:ce:95:95:a2:6e:55:0f:cd:28:54:
90:bc:a9:42:78:9e:ce:6b:b7:32:8c:31:42:fd:1a:
95:a0:93:1a:dd:db:6d:99:7a:34:e9:ba:8f:84:4d:
c2:83:e9:ef:92:65:9c:e1:e0:89:40:7e:a8:7c:75:
ce:97:55:20:96:25:0b:2c:54:f7:13:fd:18:e0:17:
60:3e:af:7c:7c:70:22:c3:7f:84:90:5c:d3:12:e2:
71:df:67:76:79:1e:02:15:85:68:74:2c:e7:d5:b6:
6a:e0:b3:b3:55:9d:62:b4:5f:c9:a8:6a:d7:ef:7b:
29:7f:b9:1b:59:df:f9:55:e7:38:1a:fb:81:48:43:
71:e4:ea:90:48:9b:a5:bc:97:a3:89:50:38:ec:f4:
aa:d6:e0:51:89:5a:72:84:da:bd:47:ea:d3:9d:54:
fd:64:72:74:be:8c:d7:46:a7:6f:19:51:73:5e:3e:
6c:99:f9:8e:ca:9f:a8:bb:94:4b:61:2f:7e:63:b5:
9b:69:83:17:7d:58:ed:be:dc:d1:0a:fe:7b:41:48:
b0:18:9f:f2:9e:e7:6b:45:c8:03:e6:e8:96:58:f7:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:39:D0:DE:18:6B:5D:FC:B3:EF:67:92:98:7D:4C:CC:0E:23:E5
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:be:e7:13:6b:e7:55:d3:9f:01:24:e6:b1:fb:b5:b8:b6:e5:
5d:e3:ec:73:1e:a6:c8:da:7e:2c:77:bc:09:a2:99:75:f0:fc:
a8:79:4e:2f:03:05:47:9f:49:44:02:9b:66:eb:78:45:bc:e4:
ae:0b:b9:37:00:65:33:e6:00:28:69:7e:78:df:18:a7:f6:29:
2a:2f:1b:f1:e9:00:7a:51:75:dd:a8:2d:d2:5c:13:9e:39:13:
86:80:f1:cf:41:b7:6a:87:be:9b:ad:b3:25:32:67:bb:20:ec:
47:2a:a5:3d:c9:d0:2e:7c:38:e3:5b:6d:a5:dd:72:00:b6:19:
11:8e:f3:57:5f:b5:5e:46:97:52:0b:d3:17:46:0f:9f:f1:4c:
9a:47:ee:a6:fe:7f:10:ca:1d:6a:9c:36:fb:a2:d3:66:84:f7:
dc:3f:03:46:3e:5b:6e:9d:3d:2f:28:4a:4d:57:f1:c9:50:7b:
79:2e:11:fb:9c:b6:ac:74:71:ec:db:ed:ef:ee:8b:33:53:07:
66:13:3a:5b:c1:fb:67:c3:fe:b8:26:93:02:b5:64:a8:5d:42:
93:b4:9f:6a:b3:0a:79:57:d2:c0:0e:4f:71:84:c2:d2:b7:f3:
54:b3:ae:c3:a8:5a:80:1e:db:93:c2:d4:0c:a4:7a:6c:b0:3c:
c0:05:f3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTcOnUyHpJEZoFTBc0zZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjYwOTI2MDYwMTE4WhcNMjYwOTI3MDYwMTE4WjAzMTEwLwYDVQQD
EygwN2M3MzlkMGRlMTg2YjVkZmNiM2VmNjc5Mjk4N2Q0Y2NjMGUyM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTSOOym2xLTgVEFrFXTMNvZJ54yx
ygq3AC9PLJ7EdvM1/M6VlaJuVQ/NKFSQvKlCeJ7Oa7cyjDFC/RqVoJMa3dttmXo0
6bqPhE3Cg+nvkmWc4eCJQH6ofHXOl1UgliULLFT3E/0Y4BdgPq98fHAiw3+EkFzT
EuJx32d2eR4CFYVodCzn1bZq4LOzVZ1itF/JqGrX73spf7kbWd/5Vec4GvuBSENx
5OqQSJulvJejiVA47PSq1uBRiVpyhNq9R+rTnVT9ZHJ0vozXRqdvGVFzXj5smfmO
yp+ou5RLYS9+Y7WbaYMXfVjtvtzRCv57QUiwGJ/ynudrRcgD5uiWWPfonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfHOdDeGGtd/LPvZ5KYfUzMDiPlMB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfL7nE2vn
VdOfASTmsfu1uLblXePscx6myNp+LHe8CaKZdfD8qHlOLwMFR59JRAKbZut4Rbzk
rgu5NwBlM+YAKGl+eN8Yp/YpKi8b8ekAelF13agt0lwTnjkThoDxz0G3aoe+m62z
JTJnuyDsRyqlPcnQLnw441ttpd1yALYZEY7zV1+1XkaXUgvTF0YPn/FMmkfupv5/
EModapw2+6LTZoT33D8DRj5bbp09LyhKTVfxyVB7eS4R+5y2rHRx7Nvt7+6LM1MH
ZhM6W8H7Z8P+uCaTArVkqF1Ck7SfarMKeVfSwA5PcYTC0rfzVLOuw6hagB7bk8LU
DKR6bLA8wAXzbg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:22:10 2026 by rpki-client