Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: 4u4zi7sdyI/VE1NtbUbeavX6v5LtipC4DOOGjk4MwHU=
Subject key identifier: 8E:87:98:DD:10:E9:D0:BD:93:D8:E5:F4:84:9C:86:35:01:3C:3D:B6
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 01A08AFAE4F719A73B42354FA0D874FBA7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 0A30
Signing time: Thu 10 Sep 2026 11:01:33 +0000
Manifest this update: Thu 10 Sep 2026 11:01:33 +0000
Manifest next update: Fri 11 Sep 2026 11:01:33 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: Ivp3NxH+CpwcsLFYATtQkQ8VCHVy8AT72Ou5T0TmHtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:e4:f7:19:a7:3b:42:35:4f:a0:d8:74:fb:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Sep 10 11:01:33 2026 GMT
Not After : Sep 11 11:01:33 2026 GMT
Subject: CN=8e8798dd10e9d0bd93d8e5f4849c8635013c3db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:62:5e:65:b9:7d:e9:d1:33:69:69:96:9a:
d3:bd:10:d5:a3:ec:71:b2:3a:c5:27:62:8c:05:c3:
77:f1:de:46:1c:e0:61:a4:d7:c1:66:d1:15:ae:20:
6c:eb:3e:dc:ed:fe:19:fe:3a:02:29:ea:5f:1c:52:
90:ec:c4:b7:d1:5e:1d:d9:9b:0e:b2:51:88:80:b1:
6f:d7:b4:cb:f3:37:ff:ec:c4:e8:f3:28:e0:b4:4e:
bf:a1:51:76:6a:66:3c:90:02:84:85:f9:12:2e:1b:
ea:c7:ac:62:eb:0a:7e:97:d2:57:76:f0:26:1e:fb:
5b:1b:97:20:48:a6:c9:b8:51:e2:81:33:bf:71:83:
f5:9f:83:e4:1e:78:c9:ec:d0:a1:46:39:52:1b:01:
0e:27:99:a5:8b:86:49:54:8b:ed:8e:7f:96:f0:b9:
ff:1c:53:de:63:f8:eb:37:b2:4b:4d:a6:58:8d:7c:
8b:6a:ba:5a:e2:99:26:51:fe:ad:06:e6:f4:b8:2a:
81:79:7c:fd:4b:48:f9:91:d0:9c:33:f4:03:d9:29:
9c:de:8f:7d:2b:f0:08:a7:e3:46:05:02:2b:7a:8e:
dc:2c:0e:28:ec:d7:83:07:26:c4:d0:c1:20:54:b1:
bc:b6:04:88:df:8c:43:ea:30:90:19:2d:c6:8a:d1:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:98:DD:10:E9:D0:BD:93:D8:E5:F4:84:9C:86:35:01:3C:3D:B6
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:76:b9:e2:08:da:1c:7a:e7:25:af:c0:8f:59:15:5e:83:
b4:52:11:df:da:2f:57:c3:0d:c2:b7:69:79:ff:2a:25:35:ce:
7b:c2:c0:e1:c9:70:df:e5:df:8e:3c:0b:42:f6:e0:a6:19:14:
85:f2:26:d1:6d:5e:03:a9:2d:50:17:02:39:74:2b:e2:64:87:
77:ca:6b:f9:d8:d4:58:ff:21:4e:1e:98:81:48:3a:31:96:b4:
76:24:21:82:78:32:ab:bd:68:0e:58:d9:a7:53:8a:d4:3f:bc:
ac:fe:0b:d3:9a:ca:63:64:db:74:fa:11:fd:59:87:2d:b3:bb:
0a:fb:03:3d:09:fa:db:c1:1c:4c:25:21:c3:87:44:7e:33:b4:
19:6a:c0:17:21:41:02:49:8d:b2:98:0e:1f:77:f1:85:7d:0f:
89:b8:8a:d7:0a:c2:de:44:f5:26:57:24:02:72:6d:67:af:d7:
df:da:c6:04:c7:bc:dc:ff:56:0b:0e:1a:7e:83:9a:65:ba:4c:
e4:06:71:cd:33:2e:a8:96:ac:3a:ca:0f:a6:3b:18:19:c6:ea:
9f:ad:04:4a:2d:eb:14:a5:2b:69:69:e6:6d:05:64:1e:dc:96:
2f:d3:51:04:fc:b8:f5:e6:ca:46:7c:50:b3:06:06:d3:64:b2:
5b:12:e9:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+uT3Gac7QjVPoNh0+6elMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTMyMjUxZjExYmNmZTk5M2QyNTQ3ODAyNGMxZTYxZGQ0
N2E3OWYwHhcNMjYwOTEwMTEwMTMzWhcNMjYwOTExMTEwMTMzWjAzMTEwLwYDVQQD
Eyg4ZTg3OThkZDEwZTlkMGJkOTNkOGU1ZjQ4NDljODYzNTAxM2MzZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/RiXmW5fenRM2lplprTvRDVo+xx
sjrFJ2KMBcN38d5GHOBhpNfBZtEVriBs6z7c7f4Z/joCKepfHFKQ7MS30V4d2ZsO
slGIgLFv17TL8zf/7MTo8yjgtE6/oVF2amY8kAKEhfkSLhvqx6xi6wp+l9JXdvAm
HvtbG5cgSKbJuFHigTO/cYP1n4PkHnjJ7NChRjlSGwEOJ5mli4ZJVIvtjn+W8Ln/
HFPeY/jrN7JLTaZYjXyLarpa4pkmUf6tBub0uCqBeXz9S0j5kdCcM/QD2Smc3o99
K/AIp+NGBQIreo7cLA4o7NeDBybE0MEgVLG8tgSI34xD6jCQGS3GitHaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6HmN0Q6dC9k9jl9ISchjUBPD22MB8GA1UdIwQY
MBaAFMrjIlHxG8/pk9JUeAJMHmHdR6efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDct
ODFmOTk2NmU0MjcxLzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDctODFmOTk2NmU0Mjcx
LzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv12ueII
2hx65yWvwI9ZFV6DtFIR39ovV8MNwrdpef8qJTXOe8LA4clw3+XfjjwLQvbgphkU
hfIm0W1eA6ktUBcCOXQr4mSHd8pr+djUWP8hTh6YgUg6MZa0diQhgngyq71oDljZ
p1OK1D+8rP4L05rKY2TbdPoR/VmHLbO7CvsDPQn628EcTCUhw4dEfjO0GWrAFyFB
AkmNspgOH3fxhX0PibiK1wrC3kT1JlckAnJtZ6/X39rGBMe83P9WCw4afoOaZbpM
5AZxzTMuqJasOsoPpjsYGcbqn60ESi3rFKUraWnmbQVkHtyWL9NRBPy49ebKRnxQ
swYG02SyWxLpxg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:00 2026 by rpki-client