Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: C+MRaos2UjlafrPk2FF6ltVBCn8AJOvHNMcFDGBSoFA=
Subject key identifier: 56:51:33:D8:C9:EB:14:0E:F8:C9:B1:C8:49:39:C7:05:44:F1:A8:B3
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 01A17EF43594FB4588D4BDEA0CB198A64956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0EE9
Signing time: Tue 27 Oct 2026 20:01:35 +0000
Manifest this update: Tue 27 Oct 2026 20:01:35 +0000
Manifest next update: Wed 28 Oct 2026 20:01:35 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: YUyPhbOg/N3cARXc9BEZ8NyqoOmBL0ESsJAYf2FzwGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:35:94:fb:45:88:d4:bd:ea:0c:b1:98:a6:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Oct 27 20:01:35 2026 GMT
Not After : Oct 28 20:01:35 2026 GMT
Subject: CN=565133d8c9eb140ef8c9b1c84939c70544f1a8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:e1:77:ef:1f:42:be:d9:ec:bf:d9:e1:a5:
c1:89:d1:1d:e7:8a:1e:e9:a6:ae:62:ea:d6:be:db:
1d:6a:1c:59:a6:23:7e:df:b3:e6:e1:ab:f1:a9:90:
ea:e0:6b:4f:17:89:26:c2:03:78:e2:5e:4f:3a:8c:
23:00:08:ea:f1:e6:d3:c5:1a:3a:0b:e2:1d:aa:83:
8d:1e:a0:7a:82:93:a0:7e:f7:08:8f:d9:bd:ed:1e:
b9:dc:f2:5b:b4:a8:6c:ad:52:93:49:c8:31:57:7c:
34:d6:8b:3f:52:d6:4d:a6:79:b4:65:9a:3c:78:e3:
4f:27:74:d7:be:5e:79:46:51:74:a4:65:67:29:2b:
4a:69:a9:5d:06:01:1a:a1:fe:d1:2d:d3:f6:14:cd:
d0:c2:f2:c8:66:ef:30:41:e4:e8:5d:5b:0f:72:14:
b8:6f:b4:4a:66:12:cd:4a:c7:37:36:ab:b4:df:04:
c1:4b:12:2e:58:5e:26:19:8d:db:50:17:c5:98:5b:
75:2e:7b:a2:70:f7:0e:1a:7d:04:4a:bc:ed:1f:1f:
da:61:44:f2:5f:a5:99:5a:2e:de:37:27:e3:cc:2d:
6d:4f:96:cf:00:fc:d3:d0:14:72:f9:9e:c9:be:6c:
02:4a:1b:61:21:46:d4:6e:a2:24:8a:25:33:ae:f4:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:33:D8:C9:EB:14:0E:F8:C9:B1:C8:49:39:C7:05:44:F1:A8:B3
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:b5:4f:f5:68:8b:63:fa:f6:69:f9:f7:dc:83:0c:5c:7b:
ce:85:a1:a3:25:a6:46:19:e8:98:92:4b:76:79:e2:b5:de:5f:
bd:6d:05:01:93:5f:15:14:2b:73:0c:82:0e:d9:de:27:df:7b:
dd:9e:7f:38:c9:a9:cf:74:6b:fd:42:24:c0:4f:2a:19:92:70:
7d:b7:ce:01:03:31:68:1a:08:56:50:65:80:8c:2a:95:e5:a8:
08:2b:e1:18:31:84:73:8b:57:83:4c:cd:82:b6:6d:0d:8c:49:
9f:9f:ca:54:8d:23:1c:3c:1e:7a:79:4e:a2:60:97:16:c2:ea:
69:05:9a:7e:37:90:b2:64:a6:e9:fd:d4:d6:a9:06:a8:02:0d:
a6:1e:85:7f:7e:5c:37:1c:e7:bd:6b:bb:4f:f7:35:a6:84:e8:
9b:58:f6:b4:73:5e:4a:94:b1:99:da:66:ba:f9:91:85:6c:ba:
8e:da:27:46:a0:1c:4c:a8:5b:1f:52:19:0c:f2:33:23:e8:ae:
c1:2d:e0:67:3c:e3:2d:bd:60:38:d3:29:e6:fe:05:bd:d9:b2:
a7:18:b4:b2:4c:c6:4b:45:32:b1:cc:de:12:e8:d0:b6:ba:03:
2a:76:78:73:09:bd:36:d9:3a:03:05:22:b7:bb:30:af:5b:47:
c3:7d:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:41:21 2026 by rpki-client