Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: NidgSWi0Mus9Wqw89jpTsGb77iClhXqw2idEo7dYZPo=
Subject key identifier: 70:96:C6:3F:CC:68:01:21:6D:2E:D2:E3:21:EE:2D:44:62:F4:43:61
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 01A18751DE337D0439CF52D87D959106D4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 08A9
Signing time: Thu 29 Oct 2026 11:00:51 +0000
Manifest this update: Thu 29 Oct 2026 11:00:51 +0000
Manifest next update: Fri 30 Oct 2026 11:00:51 +0000
Files and hashes: 1: 5InSNvZa6NPl2XUprALXEFXI9UU.roa (hash: 4bmKKFl9D3EfIWxPnS9UJq20YLXV0+HL+F87z2lo5Zo=)
2: Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa (hash: Ud/VdUNLwM8U8Wf4qqElLCvSQBMZGtbKM6rNdGJ2xtI=)
3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: IhOFZDIPlQsGrcp+fFKUeJhiJh88aZSStqlzvNSgfMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:de:33:7d:04:39:cf:52:d8:7d:95:91:06:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Oct 29 11:00:51 2026 GMT
Not After : Oct 30 11:00:51 2026 GMT
Subject: CN=7096c63fcc6801216d2ed2e321ee2d4462f44361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:3c:db:65:64:7f:0a:73:6f:8c:66:b3:1d:
ec:cc:23:f1:b3:13:a0:b6:62:e9:40:29:79:e2:00:
b3:7c:05:97:8e:c5:a1:17:f6:56:58:d3:e1:cf:ac:
fb:2b:08:98:e5:5e:87:d8:71:a8:05:08:05:9b:0a:
a1:35:16:32:2f:a9:a3:d1:08:6e:f7:7e:a5:09:6a:
4e:70:a3:af:02:3d:b3:6b:06:d8:e3:ff:af:5e:98:
c2:78:79:2f:b4:ae:35:0b:df:fa:68:d3:5a:d3:6a:
73:0b:b1:81:7c:2b:71:77:1c:38:5e:7d:a0:21:90:
d8:2a:1f:76:6b:3c:a9:ed:b5:90:e5:7d:b2:f4:c0:
e2:bb:12:0b:26:a7:59:4b:b4:a2:9e:4f:bc:4b:30:
09:c4:df:80:80:76:82:f7:da:31:12:11:77:4a:a7:
27:34:13:b2:c4:d2:82:5c:9d:52:8e:e9:4c:68:0a:
e4:a8:3f:c6:1b:93:aa:37:89:a6:48:27:f2:e4:d6:
c7:3b:9e:1d:9c:6d:93:12:94:00:cf:f6:34:c0:fa:
50:11:08:c2:67:84:40:4d:9d:42:91:4d:09:53:7e:
4c:12:aa:16:33:7a:56:6c:95:21:13:7e:40:94:82:
55:4e:db:09:99:da:a0:c6:cd:a7:f1:ee:13:43:2a:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:C6:3F:CC:68:01:21:6D:2E:D2:E3:21:EE:2D:44:62:F4:43:61
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8a:e8:16:3c:cb:88:e9:20:a0:6c:ed:7a:31:c5:17:ac:97:
b8:de:b8:4d:43:7f:c4:2b:14:f9:df:a4:b1:26:c9:51:73:0e:
2b:c2:92:ab:76:65:6e:07:a9:70:cf:3e:74:cb:55:a7:56:c6:
78:0f:7b:16:bf:bb:64:3a:af:80:dc:c5:9e:4c:7e:88:ab:6e:
61:8d:7e:50:89:d2:0b:08:88:53:ee:2b:e5:05:48:11:14:b9:
91:25:df:44:47:4a:15:7a:22:c3:54:e7:bf:cd:d8:fa:98:f1:
a3:fe:91:24:e9:ba:97:ec:87:3e:5c:73:f6:ed:de:cb:39:26:
1f:7e:dd:91:6a:db:1f:27:18:5b:70:bf:f6:04:3e:a9:e3:aa:
18:88:ca:64:f8:47:ec:06:8d:86:03:87:f3:fc:20:02:e1:d2:
2f:68:41:93:1a:41:fc:3f:54:06:ae:7d:d3:4b:09:f7:b0:8a:
c8:07:61:ee:3d:dc:c6:c3:f4:69:aa:af:b0:d9:3d:0f:a8:34:
c8:3c:e3:9e:fa:29:36:0e:e1:74:c6:b4:87:75:6b:d7:2e:6b:
95:a0:5a:a1:23:00:06:1d:99:db:bc:34:48:c5:71:f0:f8:41:
33:fb:f1:a5:61:66:6b:cb:41:40:ac:9f:d1:25:e7:f2:c4:dc:
47:c0:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:04 2026 by rpki-client