Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: h0cu/DN5mY6UIt4M9TPphmj2ur8Ys7jiCpSaFNPJoBY=
Subject key identifier: 7E:17:B4:84:3A:6F:8C:52:4D:DC:85:3F:32:FB:79:A4:C0:9E:9D:E4
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01A08AC3C523CC0FD14A44B965C74DD0788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0E04
Signing time: Thu 10 Sep 2026 10:01:20 +0000
Manifest this update: Thu 10 Sep 2026 10:01:20 +0000
Manifest next update: Fri 11 Sep 2026 10:01:20 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: GOvZrQ7y/QqM1r/kTigL2PSiPtwqrgDtgrM1elKzG6o=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:c5:23:cc:0f:d1:4a:44:b9:65:c7:4d:d0:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Sep 10 10:01:20 2026 GMT
Not After : Sep 11 10:01:20 2026 GMT
Subject: CN=7e17b4843a6f8c524ddc853f32fb79a4c09e9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:ec:9f:73:fd:4d:98:91:90:8b:af:75:0c:
25:5a:73:d7:09:2d:2b:7c:4f:8e:76:e5:bb:bf:64:
27:86:56:7c:45:85:43:3b:96:a1:bf:df:c2:51:6b:
4d:68:1c:d1:d0:84:48:75:22:be:8b:bd:fe:f6:dd:
0a:5f:fb:84:c1:dd:b6:7f:0a:3a:51:ae:e2:d2:fb:
52:5e:3f:b3:f1:81:4c:c9:64:ed:7f:be:1a:3d:81:
47:f0:1f:16:9a:e5:e7:cb:4d:65:94:93:83:af:8b:
5d:72:df:e0:55:39:dc:21:19:7f:c7:2f:90:b5:36:
8c:59:1b:ba:a5:15:8d:08:61:fb:fd:9e:ed:e0:75:
01:b5:e1:3e:90:5e:be:5b:10:59:1c:b6:46:88:77:
c4:70:4f:4b:fe:79:8c:99:67:6e:6c:03:d3:ea:28:
5e:4d:3d:76:3b:c7:f8:68:ba:34:b8:5c:50:b3:77:
3a:4c:12:dc:8f:40:37:1f:f4:c4:1a:00:48:2e:f2:
ad:8a:cb:52:fa:17:0c:04:fd:b0:f2:05:8a:4c:eb:
36:91:32:34:7c:d5:c1:a3:4b:44:cc:cb:9b:d7:53:
00:65:48:ee:86:ba:82:94:0a:57:73:7d:87:61:5b:
ed:6f:53:c0:9a:11:7d:1e:43:4d:d8:14:63:09:f4:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:B4:84:3A:6F:8C:52:4D:DC:85:3F:32:FB:79:A4:C0:9E:9D:E4
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:e2:2c:60:dd:9a:85:57:ff:77:92:bd:d1:c1:8b:0d:d9:
40:ea:7c:f4:72:f4:ee:f8:38:b5:ec:bc:74:41:6b:5d:ef:17:
fc:dc:76:3f:f9:6b:b4:41:4b:23:e8:db:a6:42:1f:25:37:c5:
41:4d:d9:69:fd:9e:40:86:f1:6e:bd:1a:76:0f:9b:63:5f:f7:
ed:ef:05:4e:bd:70:07:ba:60:13:5b:f5:01:1b:da:b3:1e:3f:
90:14:0d:96:93:33:81:7e:81:8f:d9:44:d9:06:1e:0a:09:a6:
eb:d6:4a:18:7e:29:bf:1c:6d:fe:26:6a:8b:45:7c:60:44:86:
d1:e5:86:fc:5e:23:af:a5:57:b9:70:07:37:f5:e9:5f:3c:9e:
cb:6a:1d:71:08:8d:af:5a:1a:87:07:21:ac:d6:77:e1:5f:a8:
0c:5a:63:ca:16:d0:d9:98:af:8c:29:9c:18:d3:5e:20:92:81:
50:a9:14:1d:45:ce:1b:c7:5f:06:cf:16:33:5d:80:89:b8:bf:
5d:9d:47:08:79:db:b2:d8:61:40:79:c6:92:ae:a1:27:e8:4f:
da:43:47:b0:ac:29:f2:08:c7:79:b7:1a:ee:d4:c4:34:39:38:
11:a4:29:a1:4b:f1:82:41:d8:03:de:3a:71:f5:15:dd:28:6d:
ff:96:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:19 2026 by rpki-client