Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: c7SuHx7XzBS9zmJMQfz+gO0za990NU6/FTWavPPKDIo=
Subject key identifier: D6:0D:F2:B7:40:E8:C8:EB:78:C1:62:E8:D0:AF:7D:4A:57:66:2B:0E
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 01A0EC2F520F857F23A3C09D7E64BBC7C141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0447
Signing time: Tue 29 Sep 2026 08:01:59 +0000
Manifest this update: Tue 29 Sep 2026 08:01:59 +0000
Manifest next update: Wed 30 Sep 2026 08:01:59 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: WbnUSE+rZs2alh2M2gecbEUq66mpy1RWIfkXRiWPDUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:52:0f:85:7f:23:a3:c0:9d:7e:64:bb:c7:c1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Sep 29 08:01:59 2026 GMT
Not After : Sep 30 08:01:59 2026 GMT
Subject: CN=d60df2b740e8c8eb78c162e8d0af7d4a57662b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:3d:c4:5a:47:a8:3b:8b:a0:bb:a2:6a:83:
e1:ac:4f:48:b8:ab:fd:b8:63:43:32:18:0d:47:21:
66:88:de:89:1d:50:ec:dd:ae:a9:f5:2d:e0:cd:e3:
14:98:90:e6:31:3d:8c:3f:b5:32:58:02:ad:be:79:
04:63:d1:de:15:a6:fc:65:bb:69:ae:c4:60:d0:d0:
50:ab:9a:87:a6:4a:20:5c:43:68:73:11:d2:c4:af:
3d:dd:74:e4:31:6a:1d:30:10:b4:e1:53:78:3f:ef:
43:b9:7d:27:91:b4:eb:5b:0d:ed:df:17:a8:61:29:
2f:14:fe:97:54:c2:f5:df:7d:f4:1a:4d:9a:d3:fc:
fe:d0:25:4a:1e:dc:73:1b:22:45:40:c3:f0:3d:f7:
22:0d:51:9c:b7:83:38:11:d1:69:0e:9e:17:21:62:
3d:54:25:46:ee:de:31:5f:4c:8c:1b:b1:8a:59:0e:
d6:10:62:4c:9a:a6:43:e2:0d:4c:ee:0c:40:ef:74:
26:a4:4e:ff:ac:0a:d1:9c:ac:45:65:06:24:cc:7d:
59:bb:8f:94:c8:97:39:ca:32:47:ac:ef:28:87:0e:
80:e1:25:f6:96:3e:d3:91:89:e0:ec:08:27:46:97:
44:d2:14:19:35:6b:11:ff:6b:12:0e:85:eb:b7:88:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:F2:B7:40:E8:C8:EB:78:C1:62:E8:D0:AF:7D:4A:57:66:2B:0E
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:57:eb:ba:ce:75:73:ba:4c:2b:b4:b9:43:c7:7b:43:b1:
2b:0d:e7:a4:90:a6:2c:c8:e8:61:6e:5a:97:7e:3f:ab:df:19:
45:b2:ed:04:9d:cf:ff:58:d8:52:1c:41:38:cc:5d:20:b1:03:
6c:68:2f:e8:e3:7b:44:90:25:c5:06:db:23:00:97:a1:20:69:
85:12:5e:bd:6f:79:3a:e4:41:63:aa:d1:23:0c:0d:d8:95:2a:
a6:54:9a:4a:ba:fe:00:a0:ce:0b:6d:55:db:1d:b2:39:e6:dc:
b2:5c:a6:9b:54:e0:0d:e2:e3:a0:7a:fe:91:3a:9d:46:10:fe:
b1:6d:7d:36:ff:38:02:3b:e9:4e:8d:0a:0c:00:24:ff:7c:36:
89:98:8c:69:bb:d7:16:a0:02:f8:47:85:46:5c:a1:6a:c6:58:
31:00:85:49:32:a5:55:e3:7d:e2:4c:4b:ab:51:a8:28:b5:6d:
70:fc:aa:3c:9e:d4:10:e3:81:8a:10:ef:83:a2:1b:ab:d5:59:
63:2f:8f:e0:d5:2b:08:ad:4f:d4:fc:b5:29:af:f0:66:a9:81:
32:c1:90:08:46:d3:57:53:03:6e:ff:77:54:90:af:74:e9:94:
a5:d7:f2:ff:47:47:35:68:12:20:dc:49:44:1f:db:72:29:dc:
2f:2f:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:00:20 2026 by rpki-client