Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: VAQawHhdLInwfnpvfXaa7ecPEkEvULMCOznuZaPjqrg=
Subject key identifier: 9A:81:39:93:E3:9C:45:5D:29:72:D5:98:0B:D8:73:34:D6:89:E6:1E
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01A0EA40C837CB70657A7F74DB51A568087A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 23:01:49 +0000
Manifest this update: Mon 28 Sep 2026 23:01:49 +0000
Manifest next update: Tue 29 Sep 2026 23:01:49 +0000
Files and hashes: 1: hNF8tXFLZNTcaH0gIBkBAvcKbVY.asa (hash: iwvNN6FtVQiEqz8CUKwZlaVHqu5n7aizrJShOvIXCR4=)
2: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
3: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: kqPlx9xyWGI/MD8gySPomlIf/dNneMsZ37JCjXh/jxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:c8:37:cb:70:65:7a:7f:74:db:51:a5:68:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Sep 28 23:01:49 2026 GMT
Not After : Sep 29 23:01:49 2026 GMT
Subject: CN=9a813993e39c455d2972d5980bd87334d689e61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:cd:c8:bf:0b:f2:e5:5a:73:4e:89:38:39:
62:b0:d1:8b:57:97:aa:81:6a:de:52:95:61:08:36:
3e:9f:f2:ce:8c:a1:17:f6:b6:d2:e0:83:4f:a0:2a:
52:14:81:52:e5:8b:f2:40:b7:46:82:ee:6e:67:8f:
fa:b6:5a:1a:d9:1d:3a:72:eb:62:2e:64:86:7c:35:
5b:4b:f3:d2:61:e3:f1:aa:74:fc:df:be:3b:cc:c3:
74:2d:7f:38:cc:a4:44:82:8e:48:22:5f:16:67:dd:
82:65:11:a7:a3:90:68:d0:d4:ea:3d:93:69:36:db:
bf:9e:b0:96:55:cb:76:7c:6a:24:34:46:c2:ee:e5:
f1:26:e8:ba:a3:a0:15:ff:19:a0:10:ac:48:89:11:
87:6d:2b:2e:31:c7:29:47:cc:ff:d9:62:40:49:49:
67:89:4b:cd:e5:39:78:71:f5:b5:f1:87:4a:91:47:
26:e6:b1:08:e9:20:03:bb:ba:fb:37:f8:2e:f6:99:
b2:d2:c0:39:f5:ee:99:d8:4f:3b:dd:1e:92:57:4c:
92:9b:67:1d:ab:22:d5:3d:f7:b7:f2:e4:7f:84:e0:
c2:1e:95:ff:d8:4f:63:9f:fc:c5:8c:72:eb:56:27:
52:ee:c5:a4:a6:46:f6:f9:23:73:5b:dc:fd:0e:4d:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:39:93:E3:9C:45:5D:29:72:D5:98:0B:D8:73:34:D6:89:E6:1E
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:75:3c:ff:74:67:e9:e6:96:87:e4:66:26:ac:f5:dd:7f:
a1:eb:dd:fe:1a:fd:b4:36:c0:da:48:f2:a0:13:e0:da:c5:48:
e9:2c:f4:1e:ae:94:9d:59:8f:52:1b:e0:36:e1:bf:1b:ee:20:
4f:50:08:44:e9:5a:68:02:57:47:53:cf:6f:40:8b:06:56:4f:
a8:76:4f:32:0c:70:2a:89:d3:66:c6:9b:7c:0a:3d:24:f5:a6:
75:95:91:c1:4d:f7:fb:32:0d:f4:83:f3:43:ca:34:04:9e:a4:
81:33:ae:c6:db:5d:9c:2f:f9:f7:c4:33:c9:69:23:ca:9a:62:
68:78:75:30:45:91:75:97:37:37:ac:45:67:8e:8e:46:4e:17:
b5:a0:16:5d:65:fc:11:d5:b6:fe:66:9e:b9:f6:fb:d7:88:62:
59:da:e9:b3:ae:f9:77:b6:c6:cc:11:5f:3d:c7:22:9f:40:cf:
4c:58:6f:8f:cf:ae:60:3b:8f:89:c9:28:a3:33:b3:61:77:97:
bb:a2:9e:85:25:98:51:14:c5:06:72:4f:42:39:f2:bb:c8:94:
d5:33:11:9b:f0:40:a1:57:cd:72:d0:02:03:26:40:3e:b0:26:
cc:0c:e9:b3:9a:e9:c2:98:37:83:10:a4:64:8f:76:36:73:10:
22:8b:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:12:54 2026 by rpki-client