Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: z2RM61r+T9cFrR2I4BFVplMfkA18cZ16RgUIp3xpubw=
Subject key identifier: C7:84:8A:C3:32:22:85:01:60:25:03:F4:E6:14:9C:B1:82:E1:9D:9B
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01A08B68634FE3FB0E1794245B9C7460311D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 13:01:08 +0000
Manifest this update: Thu 10 Sep 2026 13:01:08 +0000
Manifest next update: Fri 11 Sep 2026 13:01:08 +0000
Files and hashes: 1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: hgf8uy6gIWdpkwWSFbj9M7FZJfHnlBn7re8p5ay3PSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:63:4f:e3:fb:0e:17:94:24:5b:9c:74:60:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Sep 10 13:01:08 2026 GMT
Not After : Sep 11 13:01:08 2026 GMT
Subject: CN=c7848ac332228501602503f4e6149cb182e19d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:cd:b5:91:4e:bd:e4:62:75:80:3b:29:51:
da:ca:32:05:a2:b5:28:37:e2:24:f3:f9:17:ce:12:
65:20:35:27:ef:6c:78:ef:22:6d:6c:56:cd:d3:5a:
88:84:f6:ba:3f:e1:4c:f0:66:8d:df:10:58:2d:7f:
09:1b:30:7a:5c:1a:0e:7a:aa:35:68:1d:d0:98:7e:
14:ce:b0:e3:fc:95:1f:5f:c5:f3:29:68:15:ac:41:
a9:3e:47:b3:51:a2:3d:b1:47:36:df:5f:9f:14:b6:
9b:f4:b2:8e:f8:cc:1a:de:ab:7f:63:c6:4b:40:a7:
ed:92:f0:b8:f4:18:9d:d1:58:b0:85:d9:c0:a6:14:
38:d2:7c:57:44:df:b9:78:d6:3b:f7:ee:71:9f:61:
8c:d5:32:6e:7e:b2:7d:62:c4:27:f4:dd:22:a5:94:
37:a8:e3:5b:a0:c5:15:bf:36:e6:6d:8e:01:a5:8d:
6e:90:ca:f4:70:7e:62:3f:9c:03:d7:1e:20:88:24:
db:8b:ff:8e:7e:85:fa:ef:af:e5:33:8e:22:a2:36:
54:6b:64:2c:ce:06:02:b1:a6:c2:85:ec:46:cf:66:
cb:3a:ed:ae:25:e2:fd:ee:81:32:94:bd:b1:f9:71:
1a:2f:a3:ac:fb:c0:23:80:12:d8:00:fe:24:a7:14:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:8A:C3:32:22:85:01:60:25:03:F4:E6:14:9C:B1:82:E1:9D:9B
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:84:c3:4d:df:87:2a:69:a3:38:5e:f9:88:bf:bb:f1:ff:
a0:4c:b1:37:80:64:6a:ad:2c:c2:29:17:ec:a1:32:32:c8:a9:
86:bf:b3:11:d2:3d:09:b6:4d:ac:a5:0d:88:d6:45:97:db:f7:
33:1d:ca:3a:fa:ea:0c:44:6e:17:1b:92:e6:f0:de:d2:27:2a:
24:fd:d7:c2:4e:5e:a5:f9:1f:ef:f7:20:9b:04:ba:dc:41:ee:
75:79:97:72:f1:98:86:9c:8c:22:45:96:9d:35:6e:b2:d8:29:
a9:c7:98:4e:23:8d:39:7f:af:b2:db:70:4b:92:cd:8b:a2:40:
b4:fd:2b:01:19:2c:50:df:5a:fe:6b:93:95:d5:33:95:eb:c0:
d9:6d:49:8f:63:f5:23:52:a0:cd:c2:7a:ff:90:ba:14:d5:54:
68:da:91:83:4b:f6:55:b6:b7:d3:0e:1a:c8:4f:30:90:50:23:
ff:f1:0d:5c:ac:17:55:7d:f5:89:2c:d0:4a:10:48:40:4b:96:
0d:fe:83:3f:0e:fe:32:76:00:fd:68:52:bc:42:e6:7a:b7:1e:
ac:d9:bb:30:61:31:74:0c:e7:6b:6c:b0:10:87:4f:58:3b:11:
5d:d3:32:83:ee:1f:05:eb:64:e5:3a:a7:b6:34:dc:7e:0f:34:
00:6d:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:50:24 2026 by rpki-client