Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
File: yQOCdRxNpmg2pwsS5vX59gkDcJc.mft (raw, json)
Hash identifier: jITdBEIC5Sj2g7WY0NNjjVnt+8Z7A+9LsCzaFX1iIQc=
Subject key identifier: 83:44:99:38:B9:79:1A:B0:72:CE:43:AF:C9:58:17:D7:DF:C4:AA:37
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 01A02055B2CF4FB088387AE96263B8A4021C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:22 +0000
Manifest this update: Thu 20 Aug 2026 18:01:22 +0000
Manifest next update: Fri 21 Aug 2026 18:01:22 +0000
Files and hashes: 1: B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa (hash: DzSLMEFuOBEqMQodLY/kdl1XgZrJLKWCvwvjcgrKpKU=)
2: Peen3CtettZzC0PJ5pu05ABu0FY.roa (hash: 5jkaTX/MH1OVfcjWCZ4E7LeORQN6ZsvE/s7yqGM/joo=)
3: bi31Q0XO8XBmiMif1MfQZXUKbN8.roa (hash: MAQCwFvg1XrLXK/b8xx9RuAHmqdb0hXt9uketFPnkuo=)
4: dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa (hash: 0sKuxPi/M8NOaenb/QR3bdMnX+yJukAyGT+fktwdqXQ=)
5: yQOCdRxNpmg2pwsS5vX59gkDcJc.crl (hash: +IbP+MN4n3YrKFiDCVrVmc3IvHqS9pndX7CIQ5I0aO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:b2:cf:4f:b0:88:38:7a:e9:62:63:b8:a4:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Aug 20 18:01:22 2026 GMT
Not After : Aug 21 18:01:22 2026 GMT
Subject: CN=83449938b9791ab072ce43afc95817d7dfc4aa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:56:6e:e5:25:bd:0f:b1:75:9d:c4:50:bc:
0f:fa:64:46:86:90:b2:25:e0:95:8c:02:31:33:1d:
30:e3:52:e3:f5:c8:59:c6:95:ea:38:ad:54:56:ac:
7b:9d:2c:50:fc:e6:a3:fe:0c:35:23:18:d3:1f:96:
f1:aa:dc:cb:15:31:57:89:78:c0:df:83:fd:48:29:
f7:e9:a3:05:22:e7:49:f2:64:c1:c7:cb:33:54:b8:
96:2c:a9:66:32:66:13:ec:0a:54:e3:51:25:4c:b4:
29:cd:0b:04:b4:dc:da:02:a0:61:4a:b2:ee:e8:26:
e0:af:5d:3d:97:e4:69:2c:73:02:c8:36:c3:c0:78:
51:66:01:b1:b8:4f:5a:55:c4:a8:96:45:6b:f8:35:
bc:c7:24:eb:58:ba:b2:be:71:fe:75:09:74:8d:23:
98:46:c6:53:e3:41:74:e6:55:40:37:d2:20:b3:31:
49:d5:cb:c6:e3:fe:79:f9:ee:2b:4a:4f:5b:cc:fb:
6a:d2:7b:56:16:fd:c8:49:26:86:be:82:7b:c4:88:
d6:57:e8:c0:d3:fc:b3:2f:e4:d3:17:0a:2e:90:8b:
f0:9e:9d:c7:37:1e:e7:a2:a5:54:9b:91:78:b0:12:
ce:ec:0b:90:66:82:88:c5:fd:18:a9:82:59:cf:de:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:44:99:38:B9:79:1A:B0:72:CE:43:AF:C9:58:17:D7:DF:C4:AA:37
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:46:ff:f9:05:09:15:cf:0f:b4:c1:90:1a:2f:2a:8c:82:
ab:d2:51:77:67:81:55:d5:76:5d:8e:27:6a:2c:74:db:cd:0d:
84:7b:d2:29:35:2f:06:81:82:9f:e1:7b:1f:54:f4:b4:51:28:
73:de:a4:1b:e3:13:e5:18:18:cd:5b:62:b2:0c:ef:fd:b3:a8:
6f:f8:3d:7d:b3:5d:c8:42:32:2c:72:ab:0b:89:14:cf:82:15:
e4:5e:ea:7d:da:99:85:4b:40:44:c7:44:96:44:c3:e5:58:ec:
1d:10:6d:73:3a:3b:9e:23:ba:e1:e6:41:93:8a:4a:b1:00:6a:
77:aa:3b:90:f0:b8:28:72:dd:23:6f:10:89:58:63:59:05:f1:
21:61:ef:4f:52:04:22:eb:2e:05:66:92:e9:aa:28:95:00:31:
2c:67:92:31:1c:5e:09:41:3e:f7:c3:72:1e:36:a0:c0:b2:c1:
af:da:87:50:7e:16:20:fc:8e:cd:43:f8:45:72:87:93:bd:e1:
67:4c:64:87:72:a4:8f:fb:f2:90:79:87:59:29:7f:ae:08:66:
3d:f4:74:6c:f9:e3:40:ca:3d:86:e1:49:f8:38:3e:59:25:24:
f1:de:0f:b8:67:74:40:05:34:98:97:7c:b1:02:39:9c:d0:8c:
12:db:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:58 2026 by rpki-client