Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: 5V0A0O3HnQTw03MY3W74Vwq+uIjohGgfjdWAWFj+zFg=
Subject key identifier: FC:17:49:CD:7A:4B:68:D4:8A:5D:1D:E6:BF:F3:36:4A:16:C4:CE:F8
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 01A0DD6070987C7B4FFD6D5A2D44F4CD4447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 177F
Signing time: Sat 26 Sep 2026 11:01:20 +0000
Manifest this update: Sat 26 Sep 2026 11:01:20 +0000
Manifest next update: Sun 27 Sep 2026 11:01:20 +0000
Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: ijV5ct3HHB2G94PUpAm/jxZjs5yvYkixorMruBjrJFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:70:98:7c:7b:4f:fd:6d:5a:2d:44:f4:cd:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Sep 26 11:01:20 2026 GMT
Not After : Sep 27 11:01:20 2026 GMT
Subject: CN=fc1749cd7a4b68d48a5d1de6bff3364a16c4cef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:6e:1b:ea:2d:e5:2e:24:1f:e0:5e:4a:20:
ce:63:3b:4f:a6:fa:b0:8f:c7:ca:16:1c:37:c1:d2:
26:fa:ef:b4:bf:ee:c4:35:9e:14:b0:65:50:1b:86:
21:56:4f:c7:09:d8:08:f5:8b:5f:de:e5:63:db:23:
ea:c6:ad:b5:ad:6f:c4:9b:e9:d2:a8:bc:e1:4f:ef:
72:ae:b4:ac:d3:f2:50:29:ec:29:1a:00:6d:7a:92:
55:04:13:60:f8:08:0d:e9:c1:97:eb:d6:c3:4f:df:
f8:4d:db:20:57:66:e4:87:4d:ce:cc:e6:44:d4:2a:
35:1f:3d:80:a5:9a:75:9c:d1:dc:91:c6:43:14:de:
64:62:64:e5:2e:5d:87:9e:3b:37:f9:db:a0:ac:2f:
24:0c:f9:ee:58:26:1b:9d:86:86:ad:da:27:c4:e2:
6e:92:d4:a9:cb:65:9d:06:8d:57:b6:91:1c:b5:7e:
64:f0:26:a5:9e:bb:70:ed:2c:84:86:a6:1b:a5:c4:
51:60:75:35:5e:f6:0d:e0:c6:01:5f:95:5c:32:28:
04:2c:e9:9a:f5:f3:3b:77:74:a8:f8:29:64:34:76:
55:b7:85:74:48:d6:f8:d9:94:ab:fc:72:a3:ce:ab:
f7:03:c1:e9:68:15:7e:b2:2f:e9:55:92:48:d6:33:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:49:CD:7A:4B:68:D4:8A:5D:1D:E6:BF:F3:36:4A:16:C4:CE:F8
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:69:da:05:1d:1c:e6:d1:5f:e9:7e:79:1c:70:98:d9:54:
80:b5:3f:47:34:68:bb:3e:a5:35:32:52:f6:49:b4:4a:4d:8c:
c6:0c:ab:05:bf:2e:09:8f:f7:30:dc:1e:39:45:8e:29:f2:5a:
69:e7:5a:bb:f2:e3:2b:20:da:1c:e4:b5:45:f6:45:45:be:17:
a2:5c:d3:ac:a7:56:c6:46:04:9e:71:a8:ff:5c:af:bf:b2:7c:
01:52:fd:95:2c:a4:59:7f:c4:2d:93:b6:ab:bb:dd:7b:a7:cf:
0c:15:04:c9:20:c4:22:c3:ea:ba:03:e4:c7:a4:ab:b3:97:52:
ee:61:0e:d3:00:6f:3c:30:73:c3:96:75:60:e7:cf:29:8d:46:
9c:32:d1:96:7c:ec:11:6c:a1:08:7d:18:68:76:0d:14:08:79:
cc:9e:76:d0:ba:9e:ae:42:b0:9c:3b:9c:21:89:d8:10:e0:13:
ae:d3:5c:6d:08:58:9b:ad:de:84:35:32:ae:90:af:a2:32:ed:
d2:20:85:15:53:93:fd:8d:ce:d4:17:d4:cf:52:fe:f3:d4:2c:
7e:e0:25:8e:67:9e:8e:7e:30:04:21:da:da:e9:a4:8f:03:86:
6b:75:bd:42:ad:9d:3b:5e:92:84:45:bd:19:2a:a1:07:c4:01:
0d:ed:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:31:41 2026 by rpki-client