Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: TRor5jll66hrsN11H/1ClKHFhv2Vy+wh1QgNmM8J8hg=
Subject key identifier: 69:BB:E8:D4:BF:2C:64:8D:79:63:C1:BB:EE:EB:9B:40:39:19:64:CB
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01A0BFFA0C1E6FB96C7BE46FFBDB50009D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1A69
Signing time: Sun 20 Sep 2026 18:00:30 +0000
Manifest this update: Sun 20 Sep 2026 18:00:30 +0000
Manifest next update: Mon 21 Sep 2026 18:00:30 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: I8yKiStR6ziIzAFe92cV1rUw1gClnkCO17Vd5d9ziD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:0c:1e:6f:b9:6c:7b:e4:6f:fb:db:50:00:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Sep 20 18:00:30 2026 GMT
Not After : Sep 21 18:00:30 2026 GMT
Subject: CN=69bbe8d4bf2c648d7963c1bbeeeb9b40391964cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:44:2b:71:93:ef:b9:03:ef:95:e5:bc:32:
55:fe:07:12:d3:f5:64:53:2c:87:eb:2b:8f:08:fc:
68:95:da:9d:03:f7:fc:02:48:92:c4:e8:9a:72:aa:
4f:41:f5:61:69:f9:91:02:5d:87:40:e6:fc:c3:cf:
d7:03:e2:b5:9b:64:5a:ff:ae:cf:34:8c:58:fc:9d:
ef:01:c3:7e:a9:c7:cb:49:29:31:a3:12:74:d8:05:
88:ed:b1:68:4e:3b:f4:8e:e3:d8:63:e6:4a:13:55:
0c:83:b7:0f:42:e7:2f:12:d9:5b:3a:b2:bc:fe:76:
c2:8d:08:22:94:a0:d5:d8:4f:80:67:bc:9a:f7:45:
98:67:bd:74:82:d7:c5:22:11:e9:60:a5:e5:b2:4c:
2b:71:13:64:70:34:6e:81:c0:db:6e:fb:cf:d3:68:
2f:1b:d9:22:7c:a8:be:24:48:fc:bb:f3:09:f5:81:
91:64:6f:88:e3:32:cf:b9:02:3f:5f:8a:11:89:7e:
b6:af:71:e3:bd:d1:3d:98:55:0c:4e:ca:4a:a3:27:
2b:67:c4:dc:da:43:21:9b:e2:bb:93:11:78:bb:92:
f1:be:4b:e6:f3:e3:67:13:26:50:bf:c6:1b:b5:b4:
63:94:93:b8:d3:d4:e3:31:d8:14:22:15:9d:2a:b1:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:E8:D4:BF:2C:64:8D:79:63:C1:BB:EE:EB:9B:40:39:19:64:CB
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:93:d3:ea:0d:f7:7f:f1:22:2f:03:9c:d7:b1:80:e8:fd:d9:
38:9b:f3:97:87:83:07:0e:89:74:b3:d5:06:57:1c:84:2f:bd:
3b:e8:56:ca:ff:9b:2d:f6:fe:8e:fb:ab:9c:54:5f:0e:92:f9:
2a:6a:d5:a8:77:88:0c:d7:41:f1:a6:e0:b0:7d:9f:27:90:ce:
5b:61:8a:a1:2e:a6:a0:97:6f:38:80:fc:94:ab:d9:b3:33:3c:
b2:52:32:ee:1e:4a:87:41:c3:2d:26:b8:26:e7:35:15:fb:b1:
3d:f2:56:23:9c:d3:fe:d8:13:d7:55:34:8e:11:4f:f0:83:ef:
6a:fe:0d:57:5a:f9:62:16:83:4f:38:2f:8c:24:a3:48:1e:09:
c2:f0:0a:c2:00:29:f6:22:00:de:23:de:b3:be:19:f0:8e:10:
ba:c7:e5:6d:67:e9:97:77:da:7f:75:30:3a:e9:c6:23:10:b3:
54:07:e1:7e:5d:d2:f0:a0:46:21:7c:8e:db:6b:61:3e:21:65:
16:f0:17:21:6e:b9:ad:30:fd:96:4a:5d:22:21:17:e2:aa:fb:
6e:61:e5:52:33:01:80:98:ee:78:2d:6d:fc:fd:0c:b1:16:ad:
fb:8c:1b:50:c0:52:36:90:e3:d5:7e:e2:bb:b3:21:92:c3:82:
ce:12:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:19:25 2026 by rpki-client