Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: qnPgeGOP35+3eh1HITd6WcYP7lZqxU4NYS1qxXPAbSA=
Subject key identifier: 71:3C:E3:4D:24:72:03:CA:F6:8C:A0:C9:41:DB:B3:8A:30:9E:9B:3D
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 01A0EBF907B8F99DB108C21F99112DA5B89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 0415
Signing time: Tue 29 Sep 2026 07:02:40 +0000
Manifest this update: Tue 29 Sep 2026 07:02:40 +0000
Manifest next update: Wed 30 Sep 2026 07:02:40 +0000
Files and hashes: 1: NFcJoTbeoau-evP2UkrkFDUi_S0.asa (hash: c61fPUsVZ7p9Uk03SLvoaO2SkW7N9xFG1W2ccABcLig=)
2: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: q1Rjvq1sgWug4lVtxpNBO9IZFLyXgyltZ8YynMFFJtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:07:b8:f9:9d:b1:08:c2:1f:99:11:2d:a5:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Sep 29 07:02:40 2026 GMT
Not After : Sep 30 07:02:40 2026 GMT
Subject: CN=713ce34d247203caf68ca0c941dbb38a309e9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:37:44:2b:be:81:f1:63:ac:5f:58:a6:23:
92:db:89:f6:9f:8b:38:13:a6:bf:bb:0d:6f:be:bb:
9b:c7:e0:98:a3:ff:7b:e3:fd:e2:03:65:7b:dd:b0:
76:f6:95:9b:5f:7a:4a:b1:4a:fb:1e:04:1d:ec:d5:
b9:0c:ff:88:d3:3c:ed:59:0a:c6:5d:4a:87:66:96:
21:8d:61:98:32:43:de:04:21:6c:07:e7:ee:f3:d4:
18:a0:4e:cc:ae:ae:17:af:66:97:bc:16:59:f3:a6:
d6:ac:3d:6c:46:e8:c2:52:5b:e2:65:49:c7:0d:30:
15:e5:fd:f0:04:1f:b6:48:b4:69:43:18:03:e1:e2:
9c:3d:d2:4b:10:24:29:8f:8e:67:db:c5:04:ec:d4:
57:13:e1:97:c3:0f:7e:2c:54:69:7b:c2:b7:76:5e:
52:10:25:4e:c5:7c:df:70:c1:23:8f:46:b7:ba:b6:
4f:31:08:ab:27:2f:0a:76:4f:54:7a:12:13:ca:66:
c8:46:ac:2c:ba:15:a6:b1:fa:57:87:d3:70:f2:c0:
f9:1a:92:28:4a:cd:42:32:4b:56:fe:36:5b:7d:66:
3d:df:38:e5:ab:9f:70:66:3d:af:2a:63:0d:ca:69:
31:d3:12:84:49:4b:a8:a1:87:0e:8e:90:a6:21:fd:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:E3:4D:24:72:03:CA:F6:8C:A0:C9:41:DB:B3:8A:30:9E:9B:3D
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d5:2a:9d:24:14:6c:7f:99:1b:4f:7f:51:4c:59:04:93:64:
c1:33:ee:44:44:c2:ca:de:d2:ec:19:b5:66:10:9a:a9:ed:4d:
b9:ab:81:eb:e4:ba:44:3f:3f:e0:db:e6:a7:d3:d3:02:63:ea:
c1:45:15:63:ee:3d:2b:0b:9a:0a:8b:ec:8c:d8:8a:12:5d:0f:
35:a6:49:2b:0d:c1:5c:b9:e8:84:eb:f3:8a:22:d7:b0:4b:11:
09:a4:bf:02:79:9e:c0:78:c4:f8:e2:9d:b0:41:29:f1:ac:ea:
91:81:77:2d:74:9b:49:1e:d4:5f:99:ce:c0:3e:c3:36:a4:e9:
08:9d:66:20:df:7b:46:eb:f7:41:87:02:3d:bc:33:8d:42:cb:
2f:93:fa:6e:44:45:2b:db:1f:f5:de:44:eb:b5:21:c2:1b:f0:
97:c6:4a:f6:07:df:c9:31:2e:35:7b:b2:4f:1f:c6:07:ae:20:
76:7a:64:b3:da:d7:08:f1:0f:7b:00:b3:48:c9:ae:dd:02:00:
b1:cf:ee:d7:4d:ac:b8:46:85:01:4d:65:e9:c5:66:27:39:ba:
d0:de:98:ce:3d:ca:cd:a3:c7:3c:46:21:f4:ff:1d:3f:ff:1e:
46:98:81:30:d1:fd:63:e8:7c:33:fb:c6:c7:16:55:68:42:cf:
7b:0f:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:45:54 2026 by rpki-client