Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
File: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft (raw, json)
Hash identifier: i8uysNkU+nsV1oltsDdY1TIpgF5kdWeh3p2+nBnWW8I=
Subject key identifier: 21:35:7F:2A:8C:45:FE:85:05:25:77:AC:B7:F6:C4:43:AA:B7:B6:B1
Authority key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Certificate issuer: /CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Certificate serial: 01A0DA281C9B44207BFFCB974DF8E62F7EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
Manifest number: 47
Signing time: Fri 25 Sep 2026 20:00:56 +0000
Manifest this update: Fri 25 Sep 2026 20:00:56 +0000
Manifest next update: Sat 26 Sep 2026 20:00:56 +0000
Files and hashes: 1: 4Ymkv_Ino49ll3TxCeRrFSB03b8.roa (hash: EC6epXR7lNi/qPuSWHGUkvfRI6ulV/puQ8edzleZuv8=)
2: b8i9m0axPxDDGMlomU5lSF5dPuA.asa (hash: KBEJeBNE2I2oG4USPi911JF+fPhQ4JykHrbwTuwUzCM=)
3: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl (hash: 6rhkO1NuMy0J6A+rfovgwBmNK64H8KDvne6v2vnT2fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:1c:9b:44:20:7b:ff:cb:97:4d:f8:e6:2f:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Validity
Not Before: Sep 25 20:00:56 2026 GMT
Not After : Sep 26 20:00:56 2026 GMT
Subject: CN=21357f2a8c45fe85052577acb7f6c443aab7b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:72:d2:1a:e5:37:d6:d9:27:a2:9d:21:5a:
e7:0b:54:ad:0d:ac:3b:4f:e3:cf:42:25:f8:63:a2:
6d:cb:60:58:74:1c:3f:a5:38:99:8f:ef:9d:2b:5a:
f9:0d:e3:76:e6:b0:a7:86:a7:23:fd:b4:e7:2c:76:
bf:e6:b2:ea:61:ed:7a:ad:34:20:48:fe:0c:b6:db:
8d:5b:a7:98:b1:a2:91:be:c5:5c:6b:4a:fc:0b:09:
a0:6e:69:74:b9:37:a8:95:e8:8f:3f:82:13:f1:a4:
14:db:49:f6:89:4d:5d:48:15:08:67:32:f9:75:c4:
e4:4c:45:0d:11:14:63:30:50:21:e4:22:ce:d5:5e:
c4:94:d6:94:12:8b:56:67:ea:32:5b:af:78:07:29:
8f:b8:25:2a:20:b0:90:c7:87:d8:6c:46:07:ee:98:
e5:4d:07:09:4f:54:d2:5b:db:d0:3e:a8:e0:a1:f7:
8e:1b:48:67:8a:51:65:82:d9:da:f5:5c:7a:49:b8:
b8:a4:17:cd:38:55:67:e0:55:53:e9:a9:d4:3e:bf:
08:47:52:66:f2:45:36:4c:30:f7:e8:1e:39:c8:f1:
49:b1:0c:94:88:c4:f1:09:21:0d:ac:35:04:60:3b:
43:9e:3f:8d:2c:69:60:41:4a:76:60:28:8a:79:cc:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:7F:2A:8C:45:FE:85:05:25:77:AC:B7:F6:C4:43:AA:B7:B6:B1
X509v3 Authority Key Identifier:
keyid:71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:8e:d7:eb:01:b1:5d:12:de:1e:42:32:55:3c:3e:82:c3:
5a:5a:5e:ea:a7:97:24:47:6b:0a:29:79:48:24:b6:2f:52:2c:
51:71:98:33:bb:7e:d8:0c:1e:37:99:4e:4a:15:f2:40:18:39:
73:ab:d2:f5:11:62:b5:a6:cc:ea:7d:67:0b:60:99:8d:a8:63:
ae:d2:62:74:86:38:25:02:4f:70:d7:12:ef:4f:1a:f1:2b:45:
83:75:d2:df:d2:3e:fb:8b:39:14:12:42:13:c1:39:86:30:e8:
c6:b2:2f:ef:ae:cb:74:87:e8:c3:43:37:d9:ef:e6:b3:68:a1:
90:d1:32:6a:2f:d0:81:87:4c:ec:a8:e6:41:89:1d:0d:c3:cb:
8f:a1:ca:1d:36:19:f7:29:3f:b6:f8:bb:dc:b8:69:39:67:b0:
11:f0:34:e7:2b:a8:34:3e:85:54:67:36:12:73:b1:9c:a5:ad:
48:c8:05:13:1d:93:1c:e8:49:7f:f6:3a:21:9a:d7:a3:c1:81:
7f:72:dc:6e:84:86:b0:04:fc:c7:12:70:e9:47:81:09:99:a2:
ef:99:37:47:aa:c1:1b:1f:cc:66:d4:51:90:90:0d:6e:0e:c1:
fe:0b:26:ed:3f:c9:70:c9:86:39:be:fc:66:2d:7d:b7:9b:1d:
bb:1a:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:59:59 2026 by rpki-client