Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: rD5QgQinn7UVTZKzsburSUb/goFXWuh0o6IBxSAGves=
Subject key identifier: F1:01:3D:44:AE:96:2C:75:8E:56:A3:FC:09:13:CB:5E:A9:50:2F:84
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 01A08AF9E3C85576FC5BDCAC028CF225E3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 11:00:27 +0000
Manifest this update: Thu 10 Sep 2026 11:00:27 +0000
Manifest next update: Fri 11 Sep 2026 11:00:27 +0000
Files and hashes: 1: NkhNpoa7Mava_QXc8cJpKFD-6x0.roa (hash: NHb2sZxdiKyxH3v4fGC8EWYo7uPMfDDnkonpIAR9yAY=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: 2FbR7GIQEvxL2rX8AW8jkHMrhBiUPPsm7JT3jV9CnjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:e3:c8:55:76:fc:5b:dc:ac:02:8c:f2:25:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Sep 10 11:00:27 2026 GMT
Not After : Sep 11 11:00:27 2026 GMT
Subject: CN=f1013d44ae962c758e56a3fc0913cb5ea9502f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:f6:52:55:85:1e:36:28:4d:6b:11:e9:e4:
cc:7b:af:28:d1:af:06:0f:83:12:57:ac:dc:3d:83:
a2:51:ba:46:47:33:bd:f2:93:22:e7:dc:73:4b:44:
f2:20:3c:49:7d:9a:d5:61:80:99:ef:d0:eb:0d:b4:
4f:ca:96:dd:17:23:01:1d:75:2d:ac:ef:ba:70:ec:
12:61:96:2f:19:ab:b6:45:1f:2a:dd:19:3d:03:a4:
78:38:23:b4:8c:f4:e6:1a:de:e7:ff:e6:c6:1f:c7:
58:d1:be:82:a3:36:db:bc:58:94:03:3b:7a:cc:75:
f5:41:30:d8:67:b9:e7:42:91:f5:e6:9a:91:a4:1c:
c8:20:1e:a1:66:f2:17:c4:85:23:84:d0:47:88:3c:
80:01:6d:d9:ae:bc:2c:e7:75:c2:6f:0d:6f:4e:c1:
c7:ba:81:ca:20:c5:61:48:74:98:56:36:fb:71:c5:
e7:73:77:29:97:ee:a9:f3:7f:c3:e8:dd:cd:f7:c5:
2f:37:fc:d1:70:b1:e4:47:94:56:ba:b4:ed:ce:72:
4a:63:63:b0:4a:e2:84:5a:15:27:89:52:fa:c5:90:
2b:37:e2:ea:78:de:cf:ce:b0:12:ba:78:60:95:17:
64:e9:0e:66:33:5a:d2:70:27:3c:d5:3e:94:c6:76:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:3D:44:AE:96:2C:75:8E:56:A3:FC:09:13:CB:5E:A9:50:2F:84
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:e6:c2:6e:09:62:4f:4f:25:6c:75:e6:ea:cc:0d:2e:53:
06:9d:af:b3:b2:79:8a:db:69:17:c8:d9:ed:be:28:7a:14:3b:
d2:62:b4:67:c5:d9:43:42:10:a1:36:3e:92:c0:c6:58:d6:02:
c6:5a:9b:e2:8b:a0:e3:52:37:b2:1d:74:f7:fa:fa:14:7d:3f:
9e:e4:f8:df:d1:51:ca:67:70:f0:99:35:69:1f:ce:bc:37:47:
8b:8c:50:cf:b0:fe:6c:70:ab:29:8a:77:8b:24:00:2b:79:46:
bd:4e:22:d4:06:a1:ab:d6:a5:04:1e:e6:28:4d:59:5c:c7:8c:
1f:54:34:0f:14:c2:32:95:1b:56:65:c7:a7:e6:c3:07:1f:37:
51:05:8e:9d:d4:40:5f:31:44:71:49:88:26:58:2a:b1:9e:96:
32:fd:cb:d0:66:6e:02:8a:ec:16:a0:21:82:f7:02:df:c5:4d:
76:86:cb:36:c2:2a:08:8e:53:3b:c0:2d:dd:ec:1f:6e:19:f1:
5c:ce:84:a4:55:a5:1a:96:87:8f:9e:db:94:f5:06:ac:1e:10:
13:6d:00:0b:70:58:b7:4e:b3:a3:e0:00:70:47:52:cd:28:4e:
be:0e:d0:db:a7:16:b4:37:df:eb:35:e9:f1:56:14:f3:17:58:
db:33:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:33 2026 by rpki-client