Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
File: Y56u7x9LomYtRYnGlhfCIjT8f9U.mft (raw, json)
Hash identifier: HoR++wFIBm01gNy2j2dMLHdIdrKYb2qbPKIRZL/BE5o=
Subject key identifier: 5A:88:DF:5B:66:20:51:86:57:9D:6D:A4:5D:59:10:52:11:8B:5A:06
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 01A0E2875E1E76E887C7E08A9FCD6984855D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
Manifest number: BD
Signing time: Sun 27 Sep 2026 11:01:57 +0000
Manifest this update: Sun 27 Sep 2026 11:01:57 +0000
Manifest next update: Mon 28 Sep 2026 11:01:57 +0000
Files and hashes: 1: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (hash: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=)
2: Y56u7x9LomYtRYnGlhfCIjT8f9U.crl (hash: q6k+eLDWf4+CkElS6LU6Ri8ZPlnGFyZ5dBBef2zQYXk=)
3: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (hash: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:5e:1e:76:e8:87:c7:e0:8a:9f:cd:69:84:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Sep 27 11:01:57 2026 GMT
Not After : Sep 28 11:01:57 2026 GMT
Subject: CN=5a88df5b66205186579d6da45d591052118b5a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:dd:68:16:9d:cf:38:e5:d8:37:45:11:23:
54:9d:8d:2c:3a:a4:a9:4d:0b:8a:38:b8:27:b5:07:
0f:91:b1:b7:d0:32:3a:cc:5b:5d:b3:fe:94:8f:3a:
82:22:0c:dc:c2:15:40:8e:49:1b:1f:f5:3f:dd:84:
43:51:4c:91:c5:71:d9:03:d2:a2:03:71:f8:68:b5:
be:8d:13:9b:b6:94:d7:0f:d7:43:59:af:1d:81:4a:
2e:02:f1:c9:94:f2:c6:81:cb:ff:99:35:8d:fd:5a:
bb:48:f8:d8:9d:dd:37:a2:e3:39:d8:cc:c3:35:6a:
38:fc:e6:1d:8f:cf:57:7a:dd:a5:7b:0f:c1:13:e8:
73:e8:66:5b:49:bc:56:e4:46:67:84:3f:c0:1d:78:
5d:d7:db:27:47:e6:42:66:29:6d:66:f2:f9:60:4c:
3c:eb:3f:3e:64:f3:ce:a8:63:6e:00:9d:31:ab:b6:
99:f1:82:27:8b:21:43:9d:81:bb:d9:62:00:b1:38:
cf:79:c1:ac:62:80:91:ee:ae:dc:b8:17:57:52:01:
cb:f1:87:0c:bf:80:01:1a:7d:2f:e9:5e:46:33:e4:
0d:75:64:69:7d:bc:89:4b:9a:2e:f4:bd:e1:ea:03:
5f:7d:97:97:a7:26:33:82:c3:ea:fa:b3:87:db:5b:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:DF:5B:66:20:51:86:57:9D:6D:A4:5D:59:10:52:11:8B:5A:06
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5d:0f:08:a8:37:74:86:fa:b6:da:5b:fa:97:0c:9d:8b:9d:
94:44:8f:fb:23:ee:3c:ce:1c:29:cd:c2:71:7b:df:76:97:b2:
25:da:bc:b3:bc:42:60:fc:51:72:12:e8:52:b6:49:c6:54:7c:
d8:74:6f:e1:05:64:0a:d6:31:85:77:29:b6:56:af:1f:bd:99:
c3:f7:e0:b1:24:f1:97:a3:74:8e:9a:d8:77:6c:b7:a3:35:6b:
a2:36:22:20:6e:be:dd:42:82:39:03:2d:db:95:a9:37:64:e3:
dd:74:25:19:ac:2c:9b:40:a2:ca:b3:3c:65:60:c6:41:6e:e7:
b3:fb:94:7a:49:6b:45:f8:56:7d:9c:18:45:b7:18:d2:07:22:
1c:c7:49:44:85:70:9e:83:ff:72:8a:c8:8d:82:59:fe:af:a7:
74:a0:61:8d:b9:d4:f5:25:d2:4f:a3:95:77:e9:fd:f3:ce:33:
47:2b:8d:48:34:a7:0c:9d:b4:e8:44:34:29:5b:fc:97:60:08:
53:fb:6f:8d:ef:eb:ec:eb:ea:e9:4c:2d:c0:23:bd:6a:f6:d7:
c1:7b:0d:4b:96:7d:4b:b6:98:20:e7:cc:55:87:f6:b7:8e:06:
3e:b1:c4:d4:2f:f7:a0:64:12:d3:de:88:af:8e:e4:33:b2:73:
40:f4:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:45:24 2026 by rpki-client