Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
File: yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft (raw, json)
Hash identifier: E7b0h5Bsgz+YjkiPPI/X3px/671PWQgI1CUriPJnSRI=
Subject key identifier: 24:32:1D:42:05:10:0C:AB:0A:81:36:9D:80:53:9F:71:22:75:D0:6B
Authority key identifier: C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
Certificate issuer: /CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Certificate serial: 01A152BF7F6D44977AF559E2CB028003B17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
Manifest number: DF
Signing time: Mon 19 Oct 2026 06:00:43 +0000
Manifest this update: Mon 19 Oct 2026 06:00:43 +0000
Manifest next update: Tue 20 Oct 2026 06:00:43 +0000
Files and hashes: 1: 3Yg8ZI_M55yTnDX3fw66DFkuevk.roa (hash: 9HTIHR/0mEzqSqmXuRSbxyoZq8o5zsBm7Dh1wZjR4mc=)
2: yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl (hash: fN/d5Ng8U4NlRCcDk9jGvwuHMG++T3WZ50MDKBOxDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:bf:7f:6d:44:97:7a:f5:59:e2:cb:02:80:03:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Validity
Not Before: Oct 19 06:00:43 2026 GMT
Not After : Oct 20 06:00:43 2026 GMT
Subject: CN=24321d4205100cab0a81369d80539f712275d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:83:40:8e:e7:32:50:0a:07:be:69:cb:e1:
66:9d:84:6d:2a:e4:71:7b:6a:a0:45:81:4f:97:20:
22:be:49:3b:2c:d6:17:f3:17:37:9b:de:fd:f4:3a:
5a:a1:e2:a3:ab:26:54:42:36:14:fb:d6:83:8a:a1:
c8:7f:de:5a:74:7a:3d:6d:bd:b5:80:90:21:b5:9a:
9f:c6:9b:4e:4b:80:8c:76:fd:66:7f:c7:b5:a5:00:
88:93:92:a7:ca:76:06:b4:13:cf:84:40:36:fa:99:
54:4c:2d:d8:57:86:d4:32:da:cf:e3:ca:84:fc:5c:
e7:91:2f:b3:1d:b4:0e:73:17:53:9c:08:62:34:db:
ef:4e:e8:4f:25:68:6f:d6:a1:05:bf:2e:e4:64:a2:
cf:ff:1c:af:1d:4e:7e:58:52:94:0c:25:88:56:e1:
74:ea:00:24:a0:ee:7c:1d:1c:cf:50:d4:63:d5:b5:
61:1d:37:f4:1b:d0:f2:84:12:b1:4f:86:39:f8:62:
65:c0:ae:65:16:7f:7b:6e:b7:59:35:6c:17:96:4e:
29:19:26:fd:0e:bd:0f:b7:3a:23:0e:2d:17:85:b2:
f0:d1:17:01:16:de:ec:a7:58:0d:49:e2:ad:99:27:
94:7f:93:f0:0f:c8:3a:11:ea:28:88:b6:15:01:ef:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:1D:42:05:10:0C:AB:0A:81:36:9D:80:53:9F:71:22:75:D0:6B
X509v3 Authority Key Identifier:
keyid:C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:01:64:01:d2:f6:56:18:1c:1d:4a:66:80:cc:ca:2e:ba:d2:
a9:a7:ae:70:e9:26:51:5b:39:b7:54:99:79:cc:3d:d7:d2:df:
07:89:7b:08:5a:0d:45:8b:b9:73:7d:71:c5:8b:7b:23:7f:ee:
0b:1a:d5:f5:f8:d7:71:8c:78:0f:a2:6f:bc:5a:11:3b:fa:33:
79:01:01:f7:1d:a5:fc:c6:f0:74:e9:76:d1:13:ff:84:33:b5:
4b:ee:66:45:06:1e:f2:14:ca:a5:cf:18:7c:0b:ec:8d:dd:5d:
b3:e4:04:a4:52:75:9e:d4:b5:15:5a:0e:9a:8c:3d:b5:e0:09:
94:f4:ab:35:29:19:75:a9:06:83:87:f0:61:24:56:bb:b1:36:
f9:10:0e:52:4d:84:ce:4d:de:05:ab:db:66:cd:55:c4:b7:ec:
18:a8:39:81:ec:94:49:99:13:2d:a2:92:b0:31:07:fc:65:87:
26:68:90:34:85:97:3d:85:da:59:38:5b:d6:c8:88:6d:e1:2d:
e1:92:d1:86:f0:f5:b5:68:36:c6:14:6d:f5:53:af:8c:36:bf:
02:73:4b:7e:8a:fa:ef:9b:90:10:ea:6b:aa:d4:c8:34:23:4d:
66:1b:db:ce:8f:1c:38:4c:1e:36:e4:48:9d:45:75:62:93:9b:
45:2f:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:07:11 2026 by rpki-client