Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File: yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier: Mx/n1oXLfxhu5mrMEgsc9Vv8AotXyKSvV9H7MP7ufuc=
Subject key identifier: BD:03:E2:DC:74:F9:A0:1B:26:1A:48:0D:F6:12:D8:BC:68:FC:9C:50
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer: /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial: 01A17883D4F9A26A50D3F01D9998B478D5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number: 01C0
Signing time: Mon 26 Oct 2026 14:01:07 +0000
Manifest this update: Mon 26 Oct 2026 14:01:07 +0000
Manifest next update: Tue 27 Oct 2026 14:01:07 +0000
Files and hashes: 1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: 5aiF2Akk4OluDjAI65SpctrEbdtIO6Aw4Akl8hqXIJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:d4:f9:a2:6a:50:d3:f0:1d:99:98:b4:78:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Validity
Not Before: Oct 26 14:01:07 2026 GMT
Not After : Oct 27 14:01:07 2026 GMT
Subject: CN=bd03e2dc74f9a01b261a480df612d8bc68fc9c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:0b:bd:de:ff:c4:be:62:be:f6:9a:b2:19:
db:5f:02:8c:01:3c:8e:7b:05:c2:9a:a0:05:08:29:
ac:03:14:fd:a2:2b:2d:15:2b:63:e0:70:59:61:54:
bb:35:94:17:9c:87:2f:66:05:b5:10:f3:a2:60:e3:
0c:d4:19:24:11:a1:5b:82:f6:c6:a7:76:3d:c2:d5:
2d:c2:28:35:ae:45:89:72:1e:98:b7:aa:a6:01:bd:
ad:f6:2a:8e:99:d4:aa:41:9b:fc:64:16:c0:b4:40:
36:0b:c2:5e:9b:ec:fe:d4:e6:b7:93:8d:9b:a8:3a:
d6:03:09:42:95:a6:52:91:2a:28:14:35:06:64:a2:
ab:f5:bb:d3:bd:55:1a:e6:6f:51:0d:6f:9c:0a:4f:
59:cf:ff:a8:ab:27:e7:57:95:eb:25:1a:fd:44:1f:
bc:63:b1:46:a4:03:44:fd:ed:da:d2:87:0c:12:c7:
e0:e0:de:14:ba:46:25:8c:d6:95:e2:36:ea:e0:aa:
92:0b:28:c2:56:0f:e5:cb:63:d6:09:1b:af:be:65:
52:f8:20:cd:b7:80:e9:a0:b3:f2:25:53:2c:60:cc:
e8:5c:5a:19:87:ce:6e:54:01:85:1e:0d:37:19:37:
1b:d7:8e:e8:2e:6c:0a:7b:3c:5f:54:79:10:55:75:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:E2:DC:74:F9:A0:1B:26:1A:48:0D:F6:12:D8:BC:68:FC:9C:50
X509v3 Authority Key Identifier:
keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:50:5c:b2:6e:90:e6:8e:53:04:27:f9:4a:71:a1:9c:17:
12:e7:2a:54:b0:ab:c6:ac:5f:04:35:05:8d:0f:c1:2a:b9:b8:
1e:cd:72:42:dd:b5:b8:48:ab:ca:43:89:6f:20:74:39:9b:57:
e3:f1:df:45:51:6c:25:66:ec:3c:80:b0:1d:4a:23:fd:28:c0:
b5:02:e1:66:f9:27:e4:3d:fe:8f:f5:55:4f:c5:47:2f:15:ba:
e2:ef:4a:43:5d:53:d6:73:7a:00:bb:9e:c6:61:bc:f4:71:f5:
9a:1d:9a:dd:1b:b4:60:64:9b:b5:f0:71:fa:fb:a6:c5:90:2f:
02:cf:c6:90:e3:4c:60:0d:44:aa:eb:53:ad:aa:a4:42:e2:a7:
c4:68:89:b4:86:71:18:21:01:b2:a1:d3:e1:5c:06:a5:42:f8:
b2:f4:b0:1a:06:f0:ba:4c:9a:33:04:9c:a9:71:3d:54:f9:63:
fa:d4:10:25:63:96:ba:6e:d5:73:d4:72:cf:d0:2a:21:18:7e:
2e:6a:32:d0:cf:c3:e7:bb:28:7b:a9:1e:6a:57:36:a4:82:e2:
1c:a9:60:1b:11:b2:cb:5c:46:72:12:78:48:1a:24:4e:df:4b:
47:96:35:61:c6:7c:f5:b0:19:b6:5e:95:d3:2f:94:8a:5c:36:
bc:4d:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:02 2026 by rpki-client