Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: 8lYtdMjcG0vFrgU+h+D7bAqk6uvG4gC1/d0gvGadIhw=
Subject key identifier: 98:92:F0:32:37:4D:31:AF:D5:21:B3:D5:A1:13:5B:3D:B2:00:68:F5
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01A15A0BAB5132C2E73AF5A48A51D4D03FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0B30
Signing time: Tue 20 Oct 2026 16:01:16 +0000
Manifest this update: Tue 20 Oct 2026 16:01:16 +0000
Manifest next update: Wed 21 Oct 2026 16:01:16 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: EWGPxlDfJ2aGXhsP/w6tJDIG8O3bj2MAwHEWQ5xzLyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:ab:51:32:c2:e7:3a:f5:a4:8a:51:d4:d0:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Oct 20 16:01:16 2026 GMT
Not After : Oct 21 16:01:16 2026 GMT
Subject: CN=9892f032374d31afd521b3d5a1135b3db20068f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:62:8f:56:da:a3:62:14:58:66:ef:2e:5d:
4c:5b:6b:b0:bf:d6:b7:41:59:97:a2:96:bc:cd:ba:
f1:c2:0f:5c:27:28:c1:08:e2:af:84:2f:62:db:c7:
55:20:41:6e:74:95:e0:84:49:74:6e:ca:ef:26:81:
5f:e7:77:21:d6:ff:a1:0b:6b:fa:86:76:62:c0:86:
11:ec:23:35:cc:f4:4c:07:c7:ee:3a:8a:aa:5a:c9:
ca:72:bb:dc:b0:10:00:17:f8:cd:aa:46:64:ff:6f:
e2:21:ff:0f:fc:8c:de:2c:6e:bd:4f:0d:59:cc:d7:
83:79:6b:c7:26:e6:76:4f:8b:2f:28:13:e6:f3:16:
9e:a3:c8:e1:33:63:49:f8:ca:61:83:54:be:6b:33:
0e:25:80:94:d3:f4:a8:a6:52:08:c1:07:48:cb:d7:
31:1f:2c:f2:d0:a8:85:11:d0:38:45:13:1a:89:cb:
a6:63:9a:d9:a4:90:af:3d:1e:dd:0d:49:62:c3:b0:
71:60:38:f9:3b:67:4d:5f:2a:0a:f2:98:5a:d4:57:
40:4c:bb:e7:a8:2c:72:cc:01:3e:55:48:26:95:88:
3a:72:54:19:ed:91:b5:99:21:df:e8:d8:df:25:fb:
ec:02:61:b7:cc:c8:81:90:63:d3:3a:fc:e5:44:bd:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:F0:32:37:4D:31:AF:D5:21:B3:D5:A1:13:5B:3D:B2:00:68:F5
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:01:6a:fc:7b:ec:ee:57:4b:09:6a:cc:f6:f9:24:0a:32:
b6:f0:29:c1:0e:43:be:09:f6:aa:10:7c:e6:7d:5b:54:bf:eb:
07:71:42:b7:e9:b9:50:64:1f:46:07:44:e8:a4:07:4c:8c:87:
d7:ac:4c:77:61:49:db:0e:6c:f1:81:13:0f:22:bf:57:5c:29:
b0:69:ae:e0:54:36:fc:bf:f1:56:d9:3e:98:f0:1a:01:2d:59:
b6:23:b3:9b:c7:2c:5d:dc:2a:48:72:12:13:6f:c1:19:13:39:
73:f7:f6:ab:93:c0:8f:c8:41:2f:81:69:3a:ed:7a:8e:bf:ae:
f7:16:9a:3e:aa:28:7f:08:93:8c:1e:fb:f5:ee:1a:e0:c9:9e:
f1:91:40:6b:eb:86:4b:92:f1:76:a9:c9:35:f3:c5:1e:1b:47:
1c:5d:c7:3d:67:89:81:4a:74:21:51:2e:63:8b:37:3b:69:d7:
25:e4:21:c4:d6:ff:73:4a:0d:8a:11:60:fe:5e:8e:5d:42:da:
df:7a:4a:20:3d:e8:d6:ae:a2:fd:8a:1c:e1:c3:97:45:5e:98:
8b:78:2d:27:87:9d:ac:c2:a5:dd:e5:c1:99:72:d2:f0:be:61:
f4:ef:f8:f6:47:98:fe:52:27:7a:75:80:07:89:35:91:97:a5:
00:f8:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:49 2026 by rpki-client