
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier: Fwq5dK5hZzuqkXftPaQNqefYmmFewc0auVHwPlApAmU=
Subject key identifier: ED:48:AB:5A:CB:EC:F6:55:A6:61:03:C7:A0:6C:8B:47:BD:AE:E3:4F
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial: 01A04160E211437EB405BB33B57E5BED8E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number: 05CD
Signing time: Thu 27 Aug 2026 04:01:03 +0000
Manifest this update: Thu 27 Aug 2026 04:01:03 +0000
Manifest next update: Fri 28 Aug 2026 04:01:03 +0000
Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: xP9Yh4RZHk1flGCeO2ytF/p59fZbaXRlZ9256kuV5J4=)
2: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (hash: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:e2:11:43:7e:b4:05:bb:33:b5:7e:5b:ed:8e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Validity
Not Before: Aug 27 04:01:03 2026 GMT
Not After : Aug 28 04:01:03 2026 GMT
Subject: CN=ed48ab5acbecf655a66103c7a06c8b47bdaee34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:c6:3e:8d:5c:ff:1a:37:61:6a:72:43:c6:
aa:86:ed:ae:96:b7:cc:ba:a9:f8:24:d9:ab:5f:d6:
b7:6d:8e:36:1d:8f:58:c1:37:dc:04:de:e8:59:9b:
0f:49:57:b8:03:0e:bb:e4:42:16:71:0d:31:91:16:
4d:b8:be:a8:5c:ad:89:96:f8:3d:8e:78:13:65:a5:
7f:9c:25:98:d6:43:a8:4b:2f:7b:c6:cd:58:e3:7f:
9b:17:93:75:8b:10:51:79:96:01:f4:95:58:98:99:
24:de:6b:0f:ee:f4:b2:9c:7e:68:47:64:f3:ea:dc:
c4:39:79:0f:6f:98:20:8f:4c:b1:b7:e2:24:36:23:
cc:b0:5b:71:31:c6:88:2d:d2:5f:cc:cf:68:d7:19:
59:ae:e0:40:98:ff:ff:d8:ae:cd:42:38:fd:94:f0:
c7:d3:e9:15:0c:95:0c:12:78:18:b0:11:c0:e9:a4:
17:86:e5:99:a1:a8:24:eb:f0:01:89:6e:2b:2b:e4:
2b:5a:6f:e3:0b:50:9d:18:a7:53:91:f2:bb:fa:d9:
a0:e9:e2:fb:1b:f3:60:1b:8c:4b:87:1d:50:87:f5:
c5:bd:7f:74:7e:82:86:fa:e4:bc:91:0a:05:92:f3:
19:1b:5b:d1:b3:5d:25:45:7b:66:39:fd:26:6d:d7:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:AB:5A:CB:EC:F6:55:A6:61:03:C7:A0:6C:8B:47:BD:AE:E3:4F
X509v3 Authority Key Identifier:
keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:36:5f:65:ac:07:2f:0a:4c:06:a4:35:3e:97:12:d6:06:
0c:e3:ba:92:75:93:e5:55:60:25:71:11:62:a5:48:9b:5d:4e:
12:1e:42:e2:8c:6d:44:8d:fe:d3:3a:c8:46:7d:85:36:9b:6a:
87:83:a0:9f:97:2b:22:12:14:54:f8:af:01:1d:5e:8c:9c:77:
dc:12:b9:4d:e8:c1:4c:ea:b3:6a:88:3f:7f:8b:69:91:fa:7a:
16:82:b6:18:39:92:00:8d:9a:72:a6:2d:b4:d4:6c:28:1f:a8:
c6:9a:3e:eb:c3:4f:af:0a:43:45:ca:4d:be:05:74:e2:9a:0a:
51:e3:7a:c1:47:ce:a5:bf:01:e8:e7:7b:bb:b5:11:e8:17:b5:
5d:33:a4:6e:74:2e:61:a4:98:da:98:a3:fa:c1:6e:88:53:be:
38:26:9d:4f:be:a2:6d:3a:b7:e2:08:29:b3:5a:1c:0b:55:17:
d3:bf:8a:cf:a4:03:a7:72:a4:6c:4d:77:92:87:85:c8:dc:03:
57:4f:a5:8e:6d:23:27:4e:92:14:19:ea:4b:fd:8c:2e:26:94:
84:cc:19:9a:d8:57:5a:1a:34:86:d4:aa:88:af:e5:c0:94:38:
dd:5c:d2:73:3b:af:43:a8:1a:4c:a4:34:78:21:7a:f9:c0:9b:
73:58:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:23 2026 by rpki-client