Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 9p1Azk2OnEshVNfNSTirsLwkSzQ81knvk6AB74YkyF8=
Subject key identifier: EC:A0:4B:69:CE:C9:6D:EC:D3:C1:72:C9:F2:64:54:29:E4:28:5B:09
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 01A0CEC872123FA4357E43309004C4031F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 15:00:37 +0000
Manifest this update: Wed 23 Sep 2026 15:00:37 +0000
Manifest next update: Thu 24 Sep 2026 15:00:37 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 6Y7SqWuZIHIoOzhckPtL2QZvdKB7oESFyhnDs6HwoUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:72:12:3f:a4:35:7e:43:30:90:04:c4:03:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Sep 23 15:00:37 2026 GMT
Not After : Sep 24 15:00:37 2026 GMT
Subject: CN=eca04b69cec96decd3c172c9f2645429e4285b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:f6:31:e0:30:27:6c:dc:26:99:16:49:87:
4c:7b:33:ad:b6:2c:ec:73:de:5d:34:81:13:5e:a3:
f5:0e:2d:aa:59:8a:dc:d0:22:1f:7e:1a:7d:1d:44:
66:f1:0a:3f:fd:db:9c:82:26:8f:93:00:76:50:ef:
56:16:e2:ea:9f:47:06:63:c1:55:00:df:9c:b4:5f:
2f:92:fe:ed:b3:5b:71:14:83:b4:4a:a7:ee:54:9a:
67:52:ee:56:26:62:9b:4d:29:59:50:96:6c:91:23:
b0:6f:0a:5b:f9:fb:82:a4:3f:7a:b5:2e:2e:43:a4:
8f:b7:cc:4a:6c:f0:68:ca:09:90:6c:22:ec:3b:a8:
21:a5:ee:bf:1c:55:f6:16:cf:c6:38:2e:57:51:c3:
0e:a2:a3:07:0f:4c:c1:89:7d:7c:59:66:c3:b5:83:
79:fb:4a:fc:ff:ad:40:96:c0:53:de:2b:31:a8:d2:
8b:9c:39:ef:4b:26:9e:2c:4f:dc:9b:06:53:f0:6f:
61:a6:21:ed:81:36:f3:e1:90:22:c6:db:fa:59:ab:
b1:5d:ba:60:12:3d:34:09:ac:f2:c5:e4:a0:46:ec:
f9:6e:31:fb:1a:8e:cb:55:31:b1:d5:44:1e:5a:de:
81:97:d6:8a:c9:c8:aa:90:1d:e0:d2:06:53:20:70:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:4B:69:CE:C9:6D:EC:D3:C1:72:C9:F2:64:54:29:E4:28:5B:09
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:ef:e7:79:cf:50:70:bb:fd:3c:6e:07:c2:f9:f6:c6:f7:
41:9d:8f:24:23:dc:12:72:14:ef:e5:a2:37:18:7c:fc:f0:5d:
10:cd:05:ee:03:58:76:6f:f4:37:40:9f:68:64:59:70:2b:04:
bb:e6:2c:3d:3b:e5:be:de:0d:46:5b:61:69:70:9a:e9:55:40:
ad:88:81:fa:17:da:d1:49:bc:2c:c3:2d:8a:8d:ee:82:08:19:
60:43:3c:03:99:ec:24:46:e1:a4:5c:30:d4:cd:ef:19:02:e0:
8a:cc:f3:15:90:2c:a1:19:c1:da:93:63:fb:bf:b9:f3:80:5a:
2d:ec:3d:6a:1e:5a:70:6a:3b:9a:80:ee:a7:7f:2e:a4:1c:dc:
f7:dd:0e:25:c6:d6:ea:60:2e:b1:55:6e:5b:21:e7:8e:b6:b0:
ca:1f:28:9b:f0:31:15:c6:d4:36:14:c9:38:a2:81:ec:17:ed:
2c:97:5c:47:eb:f2:68:20:02:52:a4:94:90:10:a9:1b:24:c6:
b9:2e:81:00:a7:85:72:04:b4:2d:d4:cb:d6:db:f1:28:fd:dd:
98:e9:42:57:22:c2:15:0d:b3:9e:44:9d:c8:75:85:b7:c7:c5:
ea:ac:46:c5:5b:b2:9a:f1:a5:cf:38:12:1d:b6:3f:31:0b:89:
93:8a:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:16:21 2026 by rpki-client