
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: /b336w9bxfyIkRTT75jAhF/HY0Wc599nu529nOpdhMc=
Subject key identifier: BD:6F:CF:DC:6B:92:B0:C7:4D:73:FD:DF:FD:53:1F:A8:56:0C:87:1A
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01A11974D946BFBD72D2A4499146D96A26D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1178
Signing time: Thu 08 Oct 2026 03:00:50 +0000
Manifest this update: Thu 08 Oct 2026 03:00:50 +0000
Manifest next update: Fri 09 Oct 2026 03:00:50 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: V0qRt1QBBYx35BnfjrZv60pMQmokk5Qki3hk9/rvOcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:d9:46:bf:bd:72:d2:a4:49:91:46:d9:6a:26:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Oct 8 03:00:50 2026 GMT
Not After : Oct 9 03:00:50 2026 GMT
Subject: CN=bd6fcfdc6b92b0c74d73fddffd531fa8560c871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:02:30:d7:9c:3d:dd:7b:6e:01:b5:a7:00:
a2:6f:d0:f3:0b:54:f3:b0:89:cb:34:be:f5:04:b6:
df:2f:1b:0e:6f:15:e2:58:71:89:45:2e:0d:18:1b:
3c:2d:2b:5a:bf:b4:4c:51:85:7f:a5:4a:54:6f:78:
ef:ff:49:95:c6:ca:95:5f:57:1a:5d:3e:b0:62:1a:
89:c3:88:b0:6f:b8:6b:65:ba:49:7c:d5:39:61:0e:
52:46:00:07:5e:72:d7:af:ee:27:72:8c:01:c7:81:
98:e4:1c:0c:3f:37:09:51:54:86:35:84:67:67:8d:
35:fa:9b:80:5e:3c:dd:f7:99:47:85:c2:af:84:9e:
49:fd:f5:19:6a:24:8b:98:89:dc:96:28:3e:8d:da:
47:56:a2:aa:a0:2a:8e:18:91:a7:90:21:82:1b:1d:
4b:eb:f5:c0:79:54:ef:bc:a2:8b:3f:c4:bf:26:a3:
7a:50:67:2a:16:3f:1d:97:10:bd:40:56:ad:71:bf:
67:eb:39:43:64:e9:eb:bb:fa:24:03:14:97:13:f8:
90:0e:1f:82:61:41:45:a4:32:c2:80:d8:ae:ea:54:
6c:51:74:a2:1e:f9:e7:88:33:64:4d:ef:e2:d5:23:
c6:64:19:b7:f8:5a:fb:21:d3:a7:53:89:68:9c:1f:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:CF:DC:6B:92:B0:C7:4D:73:FD:DF:FD:53:1F:A8:56:0C:87:1A
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7a:fc:29:b8:76:a9:22:ca:7d:6e:49:18:69:25:e2:4e:31:
fe:78:cc:f0:e4:1b:ca:51:3c:d1:0f:e6:c2:f1:69:50:a8:29:
bd:e4:fa:aa:93:42:c0:bc:99:aa:0c:97:61:ef:9b:47:67:b0:
87:ff:a1:4d:20:08:44:7e:89:1a:c6:f6:a5:51:2f:c9:bc:68:
ae:7c:56:cd:9c:43:87:ff:be:60:44:07:64:57:9a:7f:d4:fb:
e3:b1:af:d2:b0:3a:0b:ae:df:6a:8b:9e:94:5b:73:e7:d0:29:
a4:ea:71:22:3c:42:4e:fc:37:8f:5a:3a:da:8d:c0:10:e7:f9:
9d:78:47:1b:72:9b:14:73:fb:10:ca:17:c8:56:94:7b:0f:16:
a8:1d:dc:cc:2c:4a:ca:d7:de:4b:74:b7:78:04:7f:af:73:29:
c9:0d:bb:2d:76:3a:f3:a5:f7:85:ab:37:c2:5e:bf:6a:03:4b:
7e:53:df:46:ae:b4:84:1a:ae:3a:8e:f1:95:04:02:8f:23:15:
6f:9f:e0:a7:87:2d:f3:02:69:0b:54:21:cc:d6:a6:b4:1d:f5:
87:a9:99:24:a4:95:6c:03:cf:b2:24:28:e9:14:22:0e:7d:2e:
3c:7e:7e:38:a0:8c:49:eb:f3:20:23:5b:19:47:bf:7c:84:02:
25:05:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:40:54 2026 by rpki-client