Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: BFg84lLPmTI97KNjrMCXnmK0BJ2HIpflpehrM2FEfAM=
Subject key identifier: 9F:88:C0:57:00:FD:6B:26:E9:8A:ED:96:25:B6:35:4D:52:F3:75:2F
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01A05932945F12E53D57DDB4590F95919998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0AAB
Signing time: Mon 31 Aug 2026 19:01:22 +0000
Manifest this update: Mon 31 Aug 2026 19:01:22 +0000
Manifest next update: Tue 01 Sep 2026 19:01:22 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: fhK6d6zXI75WMff4Ma/09irYsYZsXj8J7JFFr8sIPj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:32:94:5f:12:e5:3d:57:dd:b4:59:0f:95:91:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Aug 31 19:01:22 2026 GMT
Not After : Sep 1 19:01:22 2026 GMT
Subject: CN=9f88c05700fd6b26e98aed9625b6354d52f3752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:b0:d7:2d:9d:04:41:8e:65:3f:05:63:f6:
07:7b:b5:6c:76:56:2e:f4:cb:9e:84:22:a4:f7:fa:
1b:28:59:b0:5c:b2:54:5c:c2:65:e5:07:96:9a:00:
1c:96:d3:ae:ec:43:0a:fd:bb:c2:a8:2b:1b:bc:29:
b9:e4:75:eb:27:9f:fd:de:74:ca:14:f5:d6:d8:7e:
4e:58:31:d2:fe:7e:29:4d:95:8d:70:cb:88:38:4d:
5f:7b:ae:09:01:b0:3a:87:d9:3b:b4:10:43:2d:a6:
9d:71:e6:65:c7:81:6e:80:ce:f4:3a:cd:7e:e5:0d:
7f:f4:7e:8c:6d:de:49:72:4c:39:27:de:69:e3:6f:
82:61:b6:51:0d:2e:b3:4d:47:ea:e0:ed:98:14:0d:
dc:d2:98:6a:e3:73:3a:05:50:ba:fe:2e:69:ca:3f:
35:a7:5f:8c:2f:19:29:57:ee:0b:55:55:c1:f3:fc:
68:9c:24:4b:0f:ca:62:fb:88:e1:f6:fe:9d:f8:88:
7b:bc:84:b3:ba:dc:2c:05:32:13:25:35:50:82:87:
ac:57:c3:ac:3c:d4:df:d3:fc:ae:e2:f2:76:42:4a:
56:a8:e8:cd:fc:cc:b4:d8:c0:45:e2:9e:3f:81:6d:
f4:f5:a6:0b:ab:00:42:c8:c9:f0:8f:6c:2a:76:51:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:C0:57:00:FD:6B:26:E9:8A:ED:96:25:B6:35:4D:52:F3:75:2F
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:ee:ad:75:f5:9f:bc:c5:99:93:2e:da:0e:f1:62:0a:f0:
35:23:47:e9:0c:b3:a6:be:2b:07:b2:53:36:4a:f8:74:92:3e:
c3:5a:b0:cb:1c:48:3d:40:60:97:11:1c:fe:cf:ff:3b:98:60:
a5:0a:a4:b4:99:37:ff:a2:1c:88:28:89:24:33:74:0a:13:38:
ab:76:52:81:b4:fa:e3:30:fc:8d:e6:b4:d5:13:13:29:14:94:
81:87:1f:d6:fb:25:d4:b9:59:99:e2:f3:cd:86:23:d8:ef:c3:
ce:38:96:94:71:0d:e4:34:2d:cf:74:f7:7f:bb:2c:e1:36:1a:
9e:8f:ef:61:c8:e1:07:53:da:d2:cd:ba:fc:8c:10:6a:04:8b:
39:3b:59:9d:8a:12:59:7d:3e:2f:25:83:59:b3:8e:ed:67:0e:
74:4f:c7:c5:3b:ec:55:86:c8:d3:22:0a:c4:d2:88:28:84:c0:
e0:07:63:f7:d7:38:75:85:56:c6:7a:6f:e8:88:c6:bd:cd:34:
ec:d5:47:37:1c:2d:9d:bc:43:42:50:b9:31:c1:ab:2d:00:a9:
d4:5a:09:e6:e1:a3:78:22:1c:7c:df:f9:d6:aa:40:ab:a8:28:
23:b6:e4:a8:31:b7:b6:73:56:06:b2:bb:f5:12:25:ae:a3:cb:
13:e6:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:19 2026 by rpki-client