Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: shG35eNG39QpUOEUJJ+M2VRBeWnL9dQEml6C6vNDCG0=
Subject key identifier: 42:EC:E4:6F:80:10:56:91:9C:1A:62:AA:DD:A1:58:90:91:54:93:6B
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 01A0FCEBBAFF4E594B1406409FE5ECFAF1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1AE6
Signing time: Fri 02 Oct 2026 14:01:42 +0000
Manifest this update: Fri 02 Oct 2026 14:01:42 +0000
Manifest next update: Sat 03 Oct 2026 14:01:42 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: B7ulKdczPGHQIZpjUzzoInJOpuOfiVOWPb3q4sNP8B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:ba:ff:4e:59:4b:14:06:40:9f:e5:ec:fa:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Oct 2 14:01:42 2026 GMT
Not After : Oct 3 14:01:42 2026 GMT
Subject: CN=42ece46f801056919c1a62aadda158909154936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:6c:48:5d:97:f8:c6:d0:39:3e:75:e6:88:
fa:6d:8c:47:92:a8:ba:17:d5:8c:dd:e3:71:47:f9:
1c:c8:ab:31:da:3c:14:23:76:4d:15:13:c7:6f:ad:
b6:dc:14:3e:31:5a:6a:0d:04:d9:47:4a:a6:05:d5:
be:92:ac:80:90:f2:56:63:c4:27:cd:47:da:27:ed:
23:68:ce:11:f8:20:c1:a6:6a:4f:1d:18:7c:ca:ae:
98:2a:7a:9f:72:aa:b6:7e:8c:e5:e1:6f:8a:08:da:
bd:54:09:b4:20:a1:6d:cb:89:86:27:ce:32:6c:53:
c6:f6:be:cd:ff:c8:07:9e:f4:b9:4a:6c:1d:df:20:
bc:38:00:0e:8f:5e:13:7c:05:a9:86:c9:c8:11:be:
2e:aa:df:d1:9a:f2:fb:3d:84:97:df:88:b6:07:57:
cf:54:53:4b:bf:e5:4f:0c:db:0f:1c:fd:e3:d5:2d:
18:2a:51:67:66:4a:03:db:84:2d:6a:46:8e:51:68:
63:7c:06:7f:c8:ad:b9:83:ff:47:61:d1:8a:3e:62:
4a:10:7a:14:2a:9f:8a:3e:4a:63:c1:b8:42:31:83:
7d:3d:1b:a4:5c:a2:1a:d6:6d:45:da:b9:26:a7:e8:
9a:d1:5c:58:c4:b4:b6:48:8e:80:6f:56:55:07:db:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:E4:6F:80:10:56:91:9C:1A:62:AA:DD:A1:58:90:91:54:93:6B
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e0:ef:1f:38:81:d3:27:6d:ae:54:1a:a5:da:c2:8b:4f:6f:
07:71:51:b4:a0:5d:41:fc:d3:81:80:46:c1:a7:17:fa:80:ae:
14:07:3e:ca:40:60:ef:dc:b9:e0:46:94:77:d1:6d:af:9d:c6:
3c:c2:68:1a:ca:5d:70:cd:51:74:1c:51:1f:38:45:01:1a:b4:
18:df:fe:6a:d8:ce:b9:82:38:51:7a:1b:81:f8:f3:7a:78:67:
c8:4f:67:e1:f3:37:76:e3:55:bb:af:bd:81:ff:a6:5a:38:82:
44:54:9e:db:22:d2:42:fe:53:65:8b:56:cb:81:57:ac:19:11:
b2:f4:59:8c:69:68:9f:d2:24:5f:0a:74:0b:39:e8:e0:51:e6:
72:21:c3:fc:77:2a:57:84:07:61:b0:04:9f:cc:91:a5:45:09:
f1:a2:37:f4:65:61:7e:a2:42:0c:a0:e7:6f:dc:7a:c1:20:d9:
f9:26:c0:52:c1:99:0a:de:8a:60:05:f8:95:06:cd:b5:83:97:
2e:22:96:17:a8:65:8b:09:c9:11:c3:01:c6:8b:d0:ad:54:7a:
50:de:c9:d6:0a:ce:21:7a:0c:a1:cf:7a:94:a2:2f:98:ce:63:
6c:e1:cc:54:6b:9a:69:65:67:60:28:b9:89:e3:70:ea:6c:8d:
9b:6f:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:57:56 2026 by rpki-client