Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: V0Z9p8wT4w1dXNxgFrPm94jsShjD+pad0cjqZUTDPPY=
Subject key identifier: CF:58:9B:AE:CC:CA:DD:6C:7A:C4:0A:76:FD:1A:13:D4:74:69:B3:F5
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 01A08CB1BBBA4EB2AE8A5D42DB019B838635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 13E8
Signing time: Thu 10 Sep 2026 19:00:53 +0000
Manifest this update: Thu 10 Sep 2026 19:00:53 +0000
Manifest next update: Fri 11 Sep 2026 19:00:53 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: qsJ9/JJx6o4jfu9mz5QpQKo1Z5m6wj35xaWJoKKwX70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:bb:ba:4e:b2:ae:8a:5d:42:db:01:9b:83:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Sep 10 19:00:53 2026 GMT
Not After : Sep 11 19:00:53 2026 GMT
Subject: CN=cf589baecccadd6c7ac40a76fd1a13d47469b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:8e:21:d6:49:0c:22:72:ef:9f:ad:c9:ce:
13:b4:ae:8c:45:a2:0a:45:60:11:69:dd:4d:f5:10:
78:24:44:b9:fd:47:aa:25:98:19:2c:97:3d:e1:7a:
59:d1:04:4d:35:9a:19:70:25:6c:e7:10:81:3e:79:
ea:ba:a1:44:63:75:d5:16:ba:21:b6:86:36:cd:ed:
4b:ef:83:53:02:18:dc:18:29:fe:a4:6f:37:b2:ce:
05:71:e9:37:63:4c:d2:f1:7e:8c:eb:e8:05:3e:d8:
01:66:56:3b:2b:a7:be:5e:12:23:ac:ae:26:cf:26:
3e:ff:01:7a:9c:84:d6:12:82:8a:f9:1f:17:a0:46:
15:ef:3c:64:f5:1a:95:5d:98:ea:ec:c1:1f:ac:47:
67:f3:ab:b1:a7:ef:37:42:60:26:e7:ed:6f:b2:01:
24:c9:4b:7d:54:a8:49:86:a9:5b:ed:06:de:1f:ee:
8b:0f:36:c5:b4:3e:2e:7d:22:a8:a7:58:80:07:ff:
b2:2f:82:20:d0:71:ea:62:3d:62:dd:d3:33:22:2f:
ae:d1:04:f8:88:ba:fc:cf:c1:cd:31:a8:bc:1a:76:
f6:34:99:96:41:cb:9a:b6:f8:cf:c4:eb:2d:05:be:
01:a0:16:f4:ed:3a:b6:05:db:99:20:e5:35:68:d9:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:9B:AE:CC:CA:DD:6C:7A:C4:0A:76:FD:1A:13:D4:74:69:B3:F5
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:8c:c0:fc:16:01:de:86:49:a1:31:c5:9d:c6:f0:4e:f2:
ff:59:bc:0d:99:0f:38:74:1a:07:02:9c:25:8d:5d:f9:be:2c:
48:c5:58:12:3b:5d:31:2d:0f:92:05:a9:14:69:52:9c:4e:de:
44:5f:f3:42:95:e0:80:53:ee:0e:95:37:1e:80:20:c8:db:4e:
81:9d:32:83:6f:31:37:d6:58:70:9b:6b:cf:b1:d0:f9:6b:61:
26:4e:1c:f2:ad:b0:ec:e1:4d:5c:22:b2:08:03:b3:b6:7a:37:
76:62:9e:a2:c3:8b:fc:eb:7b:5f:e7:e5:08:76:b1:c5:69:c9:
ee:05:24:7c:42:ba:77:c6:43:66:ff:52:c6:80:c8:37:c8:12:
5b:49:cd:0c:32:70:02:f8:41:df:96:42:7e:11:0d:89:30:5f:
ba:ba:9b:b5:a0:ec:6d:95:88:3c:67:77:52:a6:cd:a2:06:4a:
b3:dc:17:fe:13:78:7c:96:ab:8c:85:e2:42:09:cc:ee:0e:73:
06:67:5e:f3:61:39:5f:f4:92:2e:1d:00:fe:5b:1a:3e:2a:01:
35:69:8f:6e:02:14:31:a4:5c:60:69:ff:f0:67:7a:3a:26:26:
3f:42:52:d9:44:0f:18:95:ca:e8:75:a4:09:25:01:35:bb:22:
ac:30:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client