Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File: yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier: e7sBp1l3IvKfsaMIKBzUk/6I4yB33a5w+skrOCCtmcs=
Subject key identifier: F8:99:F2:ED:F1:9A:B5:B1:E1:B9:E2:60:E1:13:98:F4:E1:05:DC:2C
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer: /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial: 01A08AFA37B5009A61AAC5F1B0CC6A156D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number: 0145
Signing time: Thu 10 Sep 2026 11:00:49 +0000
Manifest this update: Thu 10 Sep 2026 11:00:49 +0000
Manifest next update: Fri 11 Sep 2026 11:00:49 +0000
Files and hashes: 1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: 5urqf7l1DTbxj7W3WwA+CihQb7A854PIds4NLmjtSDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:37:b5:00:9a:61:aa:c5:f1:b0:cc:6a:15:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Validity
Not Before: Sep 10 11:00:49 2026 GMT
Not After : Sep 11 11:00:49 2026 GMT
Subject: CN=f899f2edf19ab5b1e1b9e260e11398f4e105dc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:66:d1:29:e2:bb:8e:a7:57:83:3a:80:87:
a8:1a:55:d5:ff:ab:f8:ab:8a:b7:24:25:2e:a6:da:
85:6e:fb:f0:03:b6:6b:49:f4:88:b4:2e:c2:57:9a:
16:81:ab:db:b8:08:5c:3c:10:d4:ab:7e:4b:8e:07:
22:14:4b:2b:18:af:59:3d:c3:1a:4e:73:b7:db:8a:
40:92:11:5e:6f:dc:41:f6:7a:55:e6:b9:ea:b0:fc:
84:a5:bf:c0:ef:a7:c9:17:42:be:06:7a:20:3b:f5:
19:68:09:97:46:c4:7c:3d:f8:6b:05:f8:1e:d0:aa:
29:d8:d0:5d:06:b6:4e:6e:2a:47:2d:2f:e3:be:dc:
94:6f:76:e3:fc:60:46:f9:ab:e9:07:75:c7:42:33:
f4:9d:bb:03:bd:e8:e6:9b:23:8c:a1:65:9b:ce:bb:
f1:d3:50:f8:df:d0:32:e0:af:27:d2:79:86:16:30:
87:5f:b2:7b:a1:54:e9:cf:e0:65:7c:c3:d6:22:fd:
dd:01:d3:a7:4d:3f:38:59:6b:1d:ca:09:ac:8e:f7:
6e:3f:0e:3d:26:09:44:33:e1:da:7b:07:cb:b2:55:
0a:31:65:56:84:98:04:43:3a:72:e3:96:27:32:60:
9f:cf:22:79:92:75:d8:9a:b9:42:c3:d9:aa:10:35:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:F2:ED:F1:9A:B5:B1:E1:B9:E2:60:E1:13:98:F4:E1:05:DC:2C
X509v3 Authority Key Identifier:
keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:0d:c8:63:6c:56:60:40:67:90:05:a9:93:98:38:74:58:
09:e9:cf:65:6e:b4:46:05:fb:27:08:e1:ac:26:2d:69:e5:e6:
05:c6:65:3f:1d:4c:d8:ef:8a:5b:c8:b2:17:88:c5:d1:48:fb:
8b:1e:ce:4a:d5:34:ab:f7:34:c3:57:3d:87:a2:55:dc:fa:7f:
71:5a:11:d8:ab:b0:a7:4a:eb:f7:9e:1a:81:a3:c2:33:01:f6:
25:fe:02:a5:b5:7e:69:74:60:08:11:e7:da:2d:e8:df:25:5f:
43:ec:6b:88:03:ed:04:70:92:91:a3:12:c8:0c:74:3a:1b:c1:
02:a7:a0:2c:3e:05:29:7c:de:1c:a3:49:2a:a6:50:af:ef:8e:
ee:68:c8:e6:cb:57:83:35:18:20:3c:23:bd:99:95:b3:bb:d1:
6d:ea:4d:7b:1a:a0:ef:4b:d3:9b:70:2d:73:46:5c:3e:90:31:
58:01:7d:ae:3b:73:ac:14:58:1e:76:f7:2a:18:4b:ed:92:30:
a7:c3:66:ee:07:b2:c5:b9:bf:ab:bc:35:63:27:98:90:90:0c:
2b:b2:88:40:de:96:38:c0:30:a4:1a:ce:52:a9:e9:df:94:f0:
ae:62:42:b8:e7:8d:b5:43:12:9f:6b:cb:47:7c:ae:c4:4f:97:
a9:60:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:16 2026 by rpki-client