Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: j6XcY/lgeYE8U3sXQHhgMkReWSVZ0sKlISC7HsGeCMk=
Subject key identifier: CD:AE:98:35:DE:B0:A4:7D:80:EC:30:DD:51:A4:10:96:10:9C:9E:93
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A05931F88C9AF9C94300EB2FF2597D47C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0D0D
Signing time: Mon 31 Aug 2026 19:00:42 +0000
Manifest this update: Mon 31 Aug 2026 19:00:42 +0000
Manifest next update: Tue 01 Sep 2026 19:00:42 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: THLrqZeMog708KO0OZOgDM30O+bAzLrZZR91B5bolko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:31:f8:8c:9a:f9:c9:43:00:eb:2f:f2:59:7d:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Aug 31 19:00:42 2026 GMT
Not After : Sep 1 19:00:42 2026 GMT
Subject: CN=cdae9835deb0a47d80ec30dd51a41096109c9e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:74:10:e8:05:25:fe:5e:23:8a:b4:0c:2a:
30:0f:08:83:84:92:77:a5:2b:05:d6:3d:d8:d9:a7:
1c:cb:11:69:bd:23:27:f9:9b:21:84:d7:6b:c7:33:
e7:d4:95:e0:b7:3c:68:b4:12:c3:79:44:e1:83:6e:
4d:b0:db:3c:2c:8f:fc:29:bd:8d:8a:4d:3d:3c:dc:
03:f7:33:b8:5d:d6:4b:51:2d:d0:a1:dc:05:61:13:
8a:be:f7:79:c2:10:54:b8:b0:c3:3b:f6:a3:2c:80:
b3:bd:c3:b4:22:ee:1d:8c:16:3e:7d:ad:0f:d9:32:
91:19:75:47:de:57:8b:3a:45:d6:44:f1:f1:1e:ae:
ac:cc:d5:28:7b:4d:9f:d1:79:ea:cc:de:d5:42:65:
60:68:6e:ab:76:80:5d:ab:45:ff:df:13:d4:c3:b8:
c3:b5:64:bd:60:40:f1:67:4c:8d:60:9e:13:ca:62:
1b:9b:d5:fe:43:08:1c:a8:9d:81:ff:ef:d2:54:c1:
95:21:93:3a:cc:b7:0b:d1:06:0d:83:2a:e6:03:69:
0c:71:99:68:b5:39:16:4e:dd:dd:78:92:e0:a0:78:
f5:38:42:1d:a7:b2:ee:23:24:dd:3c:b8:07:f0:67:
a3:27:af:98:14:45:d7:04:79:55:a4:ce:fe:cc:7e:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:98:35:DE:B0:A4:7D:80:EC:30:DD:51:A4:10:96:10:9C:9E:93
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:a4:3e:1f:6e:81:1c:9d:e2:c2:34:70:8b:53:2b:db:6e:
7c:ef:5f:4d:84:bb:b4:fd:9a:69:7d:81:e8:83:f5:ed:bf:61:
c6:82:06:b7:7b:d0:1a:05:d3:b0:93:5a:6e:07:2c:e3:48:70:
5b:80:c2:ff:e0:ab:16:5b:8e:b2:b2:3b:d7:de:9d:71:12:43:
12:e4:06:8e:59:02:8b:91:81:76:ca:87:97:f4:71:cb:8f:65:
e8:ed:d0:ed:1b:f9:67:89:2c:1a:49:17:c0:10:eb:4d:2d:e2:
dc:b5:d3:d3:02:f0:9a:24:00:67:a7:55:d3:7b:38:86:a1:13:
ac:e5:a4:f3:0f:4a:09:90:cc:eb:4d:c6:24:23:53:a1:a9:f8:
56:76:25:12:01:ee:bb:f0:12:f9:dc:af:ee:a4:d7:c8:27:da:
27:09:78:8f:28:b5:9c:73:69:bd:7e:7b:c7:63:ff:d3:06:4b:
f4:2d:6a:74:f8:e0:5d:5c:5e:0f:7b:de:2a:ef:73:c3:94:f8:
cc:1d:c9:5d:20:dc:58:38:a9:f3:a0:b3:d7:a1:85:fb:b8:0f:
a6:a0:d3:f0:65:a2:84:ef:b3:d3:85:45:92:1a:10:fe:0c:82:
fa:fe:f0:3b:c5:34:b7:a6:73:df:ad:5f:76:fd:fd:85:19:ab:
4d:cb:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:21 2026 by rpki-client