Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: n34OIqkwYPA7hsW+sfUTdIawgx3YYpd+7S7KDEOYF+k=
Subject key identifier: 89:13:60:71:77:9C:44:A4:1A:F8:D4:7C:A8:28:C5:E3:2A:1D:2D:4F
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01A18BD352C8393FC769F6F63775DCF728F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0AED
Signing time: Fri 30 Oct 2026 08:00:44 +0000
Manifest this update: Fri 30 Oct 2026 08:00:44 +0000
Manifest next update: Sat 31 Oct 2026 08:00:44 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (hash: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=)
4: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: HyM28zfxMKgJ4VJ7XfOdEXyBoDFdhVmv0dZFj5VjuXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:52:c8:39:3f:c7:69:f6:f6:37:75:dc:f7:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Oct 30 08:00:44 2026 GMT
Not After : Oct 31 08:00:44 2026 GMT
Subject: CN=89136071779c44a41af8d47ca828c5e32a1d2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:fd:f7:11:d3:06:60:66:4c:72:d4:3f:f1:
83:9f:58:8f:e2:73:41:ad:f7:f1:ae:5c:00:c6:11:
d8:e8:5f:3f:6a:fb:8b:1a:f7:0d:60:2f:11:96:81:
a2:9f:71:b4:8d:8d:ed:70:bb:98:bd:c7:ab:01:80:
77:96:08:68:aa:5a:c3:d9:96:14:48:dd:ed:7f:e6:
7e:18:cf:80:cb:0c:41:4e:18:be:7e:e6:cc:c6:4f:
3d:57:b1:d0:ad:7d:de:af:d0:63:4f:41:e1:6a:58:
88:92:f6:b1:99:a1:80:26:c9:98:86:e1:3f:7a:8e:
a8:7b:2a:c6:cc:24:de:00:2f:31:9f:7b:35:c6:71:
28:8f:b3:44:62:4a:bd:1f:c7:a4:44:b7:55:70:a0:
f4:14:d9:70:cd:5c:bc:eb:8e:34:59:2a:5a:c3:f4:
38:c1:c1:72:86:16:5e:80:32:1d:fe:3d:86:20:bb:
8a:13:fd:46:9b:74:13:d6:bb:2e:f2:27:d0:e3:95:
c5:08:bf:08:6c:18:ef:32:da:98:ad:f5:00:b9:25:
d7:63:62:00:93:6d:e2:6d:31:3d:4b:c9:cc:ef:01:
20:7c:89:eb:79:59:b9:f3:82:1b:0b:1e:05:74:a7:
41:9a:00:46:b0:ef:d4:55:6b:8f:11:e1:6c:60:9a:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:60:71:77:9C:44:A4:1A:F8:D4:7C:A8:28:C5:E3:2A:1D:2D:4F
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b0:08:e7:b0:1d:00:49:df:f6:9e:8c:87:9e:f5:3a:81:59:
f5:a0:4a:a3:1d:6f:a9:87:46:1c:8a:56:66:ff:8e:54:e8:6b:
5e:d9:ae:f1:63:2c:94:a4:d7:5f:ed:f3:5c:c0:6d:06:5f:35:
96:9b:df:9b:e5:4f:f1:0e:c1:16:ba:8c:4c:24:66:74:c2:cc:
b7:a4:54:2a:a4:87:cd:bf:6e:06:bb:9e:bc:93:60:7d:7b:9d:
1e:75:19:22:ac:79:89:00:8d:9b:75:1e:0e:03:e7:d4:00:c9:
f4:b8:ba:fb:1f:74:ad:04:9f:17:cc:3b:8c:68:45:0a:80:b0:
56:fc:34:75:44:c0:93:48:d6:e6:e2:d6:4b:40:51:03:a2:62:
53:e1:60:05:58:83:ec:63:6b:91:a5:c4:08:bd:e4:9f:5f:48:
f6:1a:e4:6a:ea:3d:43:9e:04:f7:86:4b:83:74:16:eb:b6:8e:
7e:54:62:65:5d:ad:18:ee:30:ce:74:90:87:55:a1:ee:ff:01:
44:80:2c:dd:74:19:b6:24:cc:c5:da:7b:cb:c0:66:93:cc:ca:
4f:06:3a:be:1c:6b:d6:62:19:9e:4f:02:18:73:f2:45:f3:c1:
94:72:16:29:f6:7e:6a:ba:20:f7:13:e4:53:71:8f:f1:90:05:
a8:c6:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:07:41 2026 by rpki-client