Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: cNMPmp5sPQHSunTm8QLSLJZmZufBlXASQHuKLxIpFv0=
Subject key identifier: 55:25:F4:E7:B5:DB:B4:5F:3A:B0:10:74:A7:DB:A3:92:F8:5F:C5:2C
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 01A1DE71506059029787D99EEF117C07473F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1AF0
Signing time: Sun 15 Nov 2026 09:02:10 +0000
Manifest this update: Sun 15 Nov 2026 09:02:10 +0000
Manifest next update: Mon 16 Nov 2026 09:02:10 +0000
Files and hashes: 1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: PMZCLKgnXPD2oeZibayjvf5PjPqxsgWS4K+isRZ++EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:50:60:59:02:97:87:d9:9e:ef:11:7c:07:47:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Nov 15 09:02:10 2026 GMT
Not After : Nov 16 09:02:10 2026 GMT
Subject: CN=5525f4e7b5dbb45f3ab01074a7dba392f85fc52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:39:c1:9e:51:18:cd:fc:01:6c:76:56:9a:
96:e8:26:84:29:dd:f8:41:a4:ef:44:4c:a4:ab:65:
a5:3e:af:26:e9:85:f0:2e:b5:43:2f:6d:bc:cf:70:
14:34:cf:ea:70:72:4a:f4:bc:4c:b3:c5:3e:91:63:
f4:b0:b4:ee:36:ac:e1:a3:86:22:cb:87:0c:d2:1b:
21:30:0c:eb:78:36:c1:9a:85:28:ca:50:c0:2f:d1:
82:2e:da:aa:58:09:aa:03:1f:59:c8:50:2f:d6:b8:
6b:9b:69:53:79:e9:1d:bd:28:96:94:c8:31:8b:a3:
cb:e9:5e:04:9c:a3:d4:19:c1:6b:0d:53:14:1e:68:
6c:ea:ed:57:5e:e3:49:a3:3e:ff:1f:0d:57:ac:bf:
a4:c1:52:ae:e5:f0:3b:3e:52:40:c2:97:4f:8c:9c:
97:1c:d3:91:2a:49:d7:68:0c:e1:4a:b5:29:ae:5d:
58:03:74:c1:cb:8c:ac:4f:d9:48:7f:0c:6e:a4:da:
d6:0d:35:3b:4c:0f:b5:a6:b9:f0:2d:a4:3f:4d:29:
0f:14:29:19:c1:a3:77:c4:b6:23:48:88:0d:4a:e6:
34:3c:e1:ee:f1:75:58:ef:d7:8d:30:4c:4c:da:3b:
f5:ed:0d:d1:9a:b3:13:66:07:b1:ae:ed:48:c6:a0:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:F4:E7:B5:DB:B4:5F:3A:B0:10:74:A7:DB:A3:92:F8:5F:C5:2C
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:fd:af:06:a5:7e:0b:39:2e:60:ed:1c:94:ed:f4:61:0d:
ff:61:ab:24:70:b1:2d:b4:1c:cf:9f:cd:26:5b:fc:7e:3f:f3:
dd:9c:6c:e7:96:d8:00:19:45:28:fd:4b:30:6b:8c:51:fe:20:
c7:2a:d4:62:a0:fc:68:d2:28:5e:29:a7:18:38:48:28:7f:ee:
e3:54:6a:b1:21:d8:2b:04:89:92:7b:34:ea:d4:37:38:43:3e:
90:88:2c:0e:42:85:a3:46:ea:53:ab:80:be:32:bd:84:c5:37:
09:97:92:9a:6a:08:f1:c3:be:dc:cd:2d:be:a8:6f:1b:c0:32:
d9:69:02:86:bd:07:bb:9f:c8:02:06:c4:2a:10:fe:01:d1:b0:
77:4f:f2:b6:5a:aa:df:81:9c:c2:64:b2:ee:8e:ca:06:d8:24:
98:0e:89:a8:93:11:37:d5:7c:ee:a5:47:fd:97:4a:5b:9d:0a:
19:87:c2:f2:57:73:d8:e4:1a:ef:d1:28:5f:05:b4:fb:7b:87:
b8:8d:34:30:0a:56:cf:f3:0d:7a:52:d2:3f:16:28:a4:e9:c7:
92:19:ba:aa:22:c6:8a:e1:cb:cc:25:dd:34:b1:df:84:35:b7:
01:bc:9b:da:a5:69:24:f5:2e:64:d4:33:a5:d0:35:d8:b3:6e:
0f:d4:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:19 2026 by rpki-client