Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: TwnxMecmksP2KvozzNcw/QWQ0R050BdIGZ2CAxyBa44=
Subject key identifier: A1:64:87:D7:E9:4B:D3:89:42:00:E5:89:5E:BB:2F:D6:E9:80:6B:FF
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 01A08A8C7C24B46AB86092F6BFCD2D656DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 09:00:57 +0000
Manifest this update: Thu 10 Sep 2026 09:00:57 +0000
Manifest next update: Fri 11 Sep 2026 09:00:57 +0000
Files and hashes: 1: 2FrN58Szgu73eOaW5wzREjA1APU.roa (hash: eg4laZvDlSkpaWdKinkI+Xun4MLQfCIFg3SA+VvwdzM=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: gEzcpDpjg5olRNfW+CDFDQrOpq8HvUdjbKNi7OlQMD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:7c:24:b4:6a:b8:60:92:f6:bf:cd:2d:65:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Sep 10 09:00:57 2026 GMT
Not After : Sep 11 09:00:57 2026 GMT
Subject: CN=a16487d7e94bd3894200e5895ebb2fd6e9806bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:9e:a2:f7:7d:ae:f7:9e:1c:f4:51:82:ec:
3b:f8:03:cc:25:38:bb:bd:34:91:1e:fb:c1:ef:15:
29:5b:7d:ee:74:35:3b:5b:9b:e6:aa:7b:b2:6e:37:
99:c9:2c:67:b8:8b:ab:26:08:9e:a1:24:ea:33:31:
06:fc:d8:f8:05:4f:33:b7:b0:a3:97:02:68:9b:d0:
ab:8d:ae:a5:7f:dd:8d:b4:00:7f:ac:47:26:a0:0c:
2d:6e:d7:23:f8:f1:e8:96:0b:56:26:6c:aa:06:50:
8d:b5:10:fc:94:27:80:fe:f2:4c:4c:a1:8e:a8:4a:
9a:9d:9c:70:0c:c6:c4:3d:05:de:6a:80:d1:a3:ba:
94:a7:12:81:64:69:7e:0f:cf:28:06:76:ae:01:1d:
11:a7:70:7c:19:b9:72:b4:dd:c8:57:87:3b:3c:94:
ca:2b:42:04:4a:df:61:92:16:35:a6:7d:d0:1f:3e:
9f:7e:9c:ce:a0:08:25:e6:ff:bc:58:54:cc:f8:41:
d4:ea:df:b9:6a:36:fd:01:6e:c4:b9:ef:15:db:a1:
1f:43:4e:9e:ea:78:cd:93:54:f7:25:2d:65:bf:e2:
84:44:e7:3f:f4:25:b3:07:32:32:69:d7:37:33:51:
f5:70:ad:d7:9f:8d:5b:07:0e:98:6e:82:40:dd:56:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:87:D7:E9:4B:D3:89:42:00:E5:89:5E:BB:2F:D6:E9:80:6B:FF
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:4e:b4:fb:49:4b:f0:5b:32:4f:e0:34:61:6a:00:3f:30:
bb:b5:13:64:e0:83:32:7a:3b:86:80:f3:90:ef:d2:ab:8e:e6:
f7:23:3a:16:dd:92:c8:76:69:30:85:21:50:64:ec:96:80:7a:
cb:9b:29:65:75:9d:c8:7b:ff:ef:83:ca:46:2e:5b:22:8c:9c:
a6:f5:c7:55:17:5b:7c:09:a0:cf:1c:ce:98:c5:7b:55:19:51:
a3:b6:09:11:fa:02:55:17:5b:91:5f:45:80:69:d6:fb:24:6d:
87:47:ad:73:2e:8b:4e:60:9c:4d:6d:db:50:c6:31:90:16:2c:
bd:82:f4:42:4b:e6:6a:99:ba:5c:34:63:ef:6c:95:b7:c4:23:
1f:87:92:dc:e1:65:44:19:ea:80:5d:42:37:5a:75:11:27:5c:
bc:ee:5b:9b:31:28:f8:8f:37:d5:3e:76:2d:86:40:3f:00:8c:
d1:4e:49:aa:30:2d:47:a3:87:66:87:ad:d1:3b:35:cd:ac:b2:
99:41:ea:71:46:40:7d:ad:f6:71:4a:c9:9d:13:04:fe:b2:2f:
0d:11:ac:35:96:b3:6d:88:23:0a:79:97:f9:d8:5f:7e:ea:fa:
35:ff:bd:e2:c8:df:7b:12:ce:e0:d7:15:36:98:30:fa:83:df:
67:9b:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:17 2026 by rpki-client