Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: iQiJkeIi2kVUanR8q4JyCr7wrBph8UWaTKft1Tzv3FU=
Subject key identifier: 8D:93:3B:4C:62:23:E2:7D:51:06:E9:33:95:E7:1B:20:64:E8:44:DB
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01A08B67DE5B61D8AD1B7CAB95FE956FE8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 12A4
Signing time: Thu 10 Sep 2026 13:00:35 +0000
Manifest this update: Thu 10 Sep 2026 13:00:35 +0000
Manifest next update: Fri 11 Sep 2026 13:00:35 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: slngLIkqUHCZSWlPN80Jljxe85viLgVjB/ZPMuQWg0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:de:5b:61:d8:ad:1b:7c:ab:95:fe:95:6f:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Sep 10 13:00:35 2026 GMT
Not After : Sep 11 13:00:35 2026 GMT
Subject: CN=8d933b4c6223e27d5106e93395e71b2064e844db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:0e:85:fb:7c:4e:f6:50:b1:d7:e2:f8:74:
a4:3b:7b:b6:8c:9a:30:0d:84:49:f1:f0:7b:b6:70:
b7:45:0c:03:16:8e:3a:d1:0e:85:80:65:01:7d:e1:
4d:9f:24:d1:59:23:c3:d3:ef:de:51:e7:c5:db:7a:
c3:34:bc:29:a5:b5:a5:6a:53:fc:ed:fa:72:9d:3c:
54:3f:5b:58:54:ce:a9:6b:d9:2b:2e:bb:d7:30:bc:
63:27:a2:29:fb:b8:da:45:0a:63:bc:aa:02:fc:a3:
a5:e7:ed:49:3e:34:95:2c:73:69:15:bd:54:31:bc:
89:2c:04:84:e3:12:b2:2a:7c:2e:d2:ee:bb:84:44:
50:ef:aa:c0:2b:97:87:a3:45:b9:86:32:83:ed:9d:
ed:e6:23:18:06:db:ac:ee:7c:c8:d6:65:f9:57:34:
93:05:2f:72:d3:dd:23:ac:9c:2f:fd:c0:1c:9a:37:
42:16:cc:cd:81:79:93:c7:9d:37:9e:b1:02:2d:fe:
86:6c:d6:bd:86:8d:27:3b:d5:ab:91:0f:c9:c7:db:
37:e8:45:95:98:4f:17:cf:55:77:6e:47:07:82:78:
66:08:40:88:0c:ff:af:c2:e2:26:60:86:80:62:80:
54:62:89:28:8b:27:54:49:7d:e6:66:69:cf:23:ac:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:3B:4C:62:23:E2:7D:51:06:E9:33:95:E7:1B:20:64:E8:44:DB
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:75:8e:1b:06:55:64:b2:26:fb:12:58:64:5e:19:c6:e1:01:
4f:7b:18:c1:2b:4c:4e:19:c0:b2:6f:ad:2a:7b:bc:b2:68:15:
0f:70:da:d3:f4:3f:de:af:37:8c:3f:b2:ba:6c:da:95:8d:b7:
2a:7f:40:33:52:ed:4c:a9:da:8f:46:22:bd:5f:98:a6:f6:08:
2b:ab:69:83:51:17:ee:78:6b:11:ee:50:bf:c9:a7:48:73:95:
87:59:e4:2c:9c:bc:b3:82:8f:a5:17:d2:10:e8:64:a9:02:ff:
90:dd:a4:8c:70:d9:75:09:68:58:a3:17:55:47:f5:b2:0f:ae:
2b:c9:6d:c2:0f:f5:a9:15:fe:4e:50:72:f1:df:e0:a5:c2:7c:
df:0b:3f:a3:74:df:0c:1f:aa:b0:f5:b3:34:38:6e:fb:75:aa:
77:6c:23:2c:42:0d:03:e9:84:e6:54:66:6f:c4:61:b3:60:39:
1d:f7:15:68:7e:e4:fe:ba:41:13:e3:23:30:29:f1:f7:ad:64:
e8:3e:69:30:ff:b1:9e:59:7e:d1:d0:3e:0e:82:2a:42:71:31:
f0:e0:a4:2d:bf:e7:45:bd:27:53:93:cc:be:b6:93:9a:f0:fb:
22:1d:2c:d9:2e:72:66:45:73:8b:d5:11:56:0d:d3:0e:21:07:
1b:f4:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:58:24 2026 by rpki-client