Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: HUDpp/ofk0xch7SMztVs9lXI9EGAKqs3IQAL5VtYaAE=
Subject key identifier: ED:E3:9A:AB:5D:8F:48:39:DA:51:32:0E:DD:73:AA:CF:4C:1F:B0:68
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 01A15930361A5EA7C64083AC1B1A88DB2EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1A47
Signing time: Tue 20 Oct 2026 12:01:34 +0000
Manifest this update: Tue 20 Oct 2026 12:01:34 +0000
Manifest next update: Wed 21 Oct 2026 12:01:34 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: hMCKtWDWZ7C4+dz7W1hRqso4imzX4uBPaqMCbpIwbDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:36:1a:5e:a7:c6:40:83:ac:1b:1a:88:db:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Oct 20 12:01:34 2026 GMT
Not After : Oct 21 12:01:34 2026 GMT
Subject: CN=ede39aab5d8f4839da51320edd73aacf4c1fb068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:88:fb:0a:45:95:e6:10:f9:da:eb:c8:b7:
6a:4f:75:5f:1b:06:21:29:84:3b:57:f6:fc:c6:16:
ff:90:30:eb:2d:aa:84:c9:8e:09:bd:71:35:e0:f8:
1d:1c:b2:ae:0b:a0:3e:7b:50:0a:6f:7e:82:fe:4b:
7c:0a:42:fb:da:a6:3e:97:9a:8f:f4:11:75:87:e5:
da:75:66:c7:40:de:98:90:33:6e:dd:3c:7d:9e:07:
2d:59:93:fe:66:27:b3:e5:fb:6b:5e:d4:e5:fa:69:
3f:0c:6e:fa:d9:d9:d3:6c:2b:e5:f4:2d:29:5f:d7:
73:cb:0d:8a:15:e0:be:a1:75:66:84:56:fb:c1:25:
00:8b:99:11:b6:53:73:34:61:59:5f:c3:57:f0:c9:
1c:54:ec:36:62:e4:d3:94:3a:ce:80:1b:82:54:68:
ab:ad:d1:4c:2a:f2:a1:aa:27:78:6c:2e:41:85:4c:
0f:d8:3d:dd:08:3e:66:54:97:dc:76:84:21:e7:dc:
a8:c1:dc:7e:08:e2:fc:37:e2:d6:6f:f6:ea:ee:57:
49:77:0d:db:cc:cb:db:6e:fc:04:c9:45:1f:82:87:
c1:2b:09:2f:5f:1d:61:fa:45:f3:6b:fe:97:46:e0:
69:38:71:3f:54:88:0e:a2:87:ef:25:2f:ca:3b:b5:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:9A:AB:5D:8F:48:39:DA:51:32:0E:DD:73:AA:CF:4C:1F:B0:68
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:0a:5d:df:dc:92:7d:87:0d:68:fd:dd:5a:a4:d8:2b:88:
fa:16:01:0d:9b:fe:87:97:ee:bf:39:01:30:67:65:a4:a2:62:
b2:b5:b3:a0:8d:3c:8c:4d:be:07:9d:ae:6c:bb:4d:41:dc:6d:
44:88:2c:b3:4e:99:f4:b4:86:95:f0:b0:20:dc:47:17:dc:0a:
67:8e:ee:a5:a6:8c:45:ed:da:16:db:d9:36:e4:a4:07:1e:6f:
88:bc:dc:d7:73:c6:98:63:e8:38:bc:56:27:2f:59:34:08:e0:
6e:97:eb:a1:91:6a:a8:e7:46:a5:ad:a8:67:fe:27:96:f7:ac:
37:6e:1b:dd:85:98:36:d5:56:c2:52:0c:bf:34:4b:82:35:f2:
93:88:a0:5e:52:cf:b7:46:80:f6:f3:ed:47:50:cb:bd:04:41:
44:36:3f:f5:b7:0c:af:85:dd:d3:73:8b:b2:f0:be:b7:08:f0:
3e:c7:dd:f7:db:70:fb:8c:3a:4b:bd:6f:7c:d1:e4:35:d6:9e:
d3:3a:a7:87:b5:5b:3d:92:1f:73:5c:bb:b1:2a:e8:5a:0b:45:
04:75:eb:24:07:cb:c8:06:c5:f0:ff:db:fd:9c:db:44:dd:94:
ac:f0:ff:cb:c9:eb:c2:fa:46:64:a7:79:6f:bc:6b:b0:a0:89:
21:3b:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:21 2026 by rpki-client