
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: Ha/vong/8OgzefqCTcDZmyZc6cisS4jk4M1TfVow7BY=
Subject key identifier: AD:45:1F:9F:78:64:8A:C4:67:10:A7:21:78:B3:F8:7F:78:83:01:86
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 01A0B5AD06237A68A7A9AB57FA907B344931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 0ADA
Signing time: Fri 18 Sep 2026 18:00:10 +0000
Manifest this update: Fri 18 Sep 2026 18:00:10 +0000
Manifest next update: Sat 19 Sep 2026 18:00:10 +0000
Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: yy5ocUKJTsTeD2t2S6nQvAqPhdE8/0mHqKYq1eI9Tuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:06:23:7a:68:a7:a9:ab:57:fa:90:7b:34:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Sep 18 18:00:10 2026 GMT
Not After : Sep 19 18:00:10 2026 GMT
Subject: CN=ad451f9f78648ac46710a72178b3f87f78830186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:65:4b:ca:79:e1:15:61:08:92:6b:35:67:
30:75:f1:2d:0f:fb:17:95:5d:4c:ba:b9:c0:d2:76:
36:e4:8a:10:9a:fe:32:cc:ba:ee:29:b6:0a:d9:7c:
a2:ab:e3:f5:ef:11:64:b0:9b:35:6f:6f:f8:42:e9:
6d:e9:94:2a:d9:a9:a3:34:3a:35:b7:31:7e:42:ed:
cf:41:d3:ad:bb:85:86:c7:1c:40:10:01:be:e3:41:
f4:6c:87:fd:a7:15:e1:47:09:1d:c5:3a:41:1b:06:
61:85:ae:33:6c:01:fb:4c:79:46:99:24:65:79:9e:
26:a1:c0:cb:e3:84:c5:6e:d2:f9:41:da:a1:25:cd:
dd:14:69:fa:62:70:87:82:5b:3e:4d:dd:b5:c6:23:
49:ab:89:43:bd:d5:5f:7e:ed:da:e2:eb:e0:98:01:
d4:d4:ef:44:7a:83:6e:bc:8a:dc:78:c8:5b:bc:36:
80:11:6c:1e:8b:02:53:ef:39:f7:6d:38:f7:40:22:
35:78:46:71:21:ff:92:85:69:28:e3:3c:6d:45:d5:
35:79:2c:c2:61:ae:79:a1:24:5d:75:a3:d9:7f:c0:
89:ec:55:0a:28:57:62:bb:c7:60:f0:7f:aa:fb:49:
19:46:55:a8:54:4e:4c:fe:7c:38:c6:f3:28:c2:38:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:1F:9F:78:64:8A:C4:67:10:A7:21:78:B3:F8:7F:78:83:01:86
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1f:85:09:40:1d:43:53:89:3a:6e:58:de:67:8d:81:1d:d0:
cd:51:ad:0b:0c:51:a5:99:6d:f5:25:21:38:ba:b0:24:58:5b:
82:d8:f1:bf:8c:dc:c8:93:1f:97:c8:10:67:0f:dc:62:6e:e6:
87:39:f7:91:d5:48:36:58:e0:d0:7b:5a:ef:2f:f5:82:f8:95:
01:4e:fc:9d:9c:f8:a7:ac:a3:e6:f3:f4:97:e1:1e:6a:d8:06:
7d:eb:95:81:c4:49:d4:a6:d8:b5:6e:a4:bd:80:10:60:fc:1f:
75:9b:ef:af:c2:85:c2:a1:eb:13:3a:d0:a1:5a:30:1d:e0:ab:
1c:a9:e3:82:d3:0c:17:2c:25:14:1f:b0:37:e3:44:c8:d6:26:
6a:a1:3a:8f:8d:69:c2:d2:0e:51:d4:5f:5e:51:1d:e9:66:fc:
7f:0d:2c:07:a4:1d:7c:0f:6c:db:81:4e:99:e7:4c:c9:5e:5e:
51:3b:10:f9:ca:bb:d1:b4:9d:43:62:99:8e:a7:29:04:1f:ba:
37:b4:93:15:f3:37:74:ca:31:b4:96:6d:64:8f:59:a1:8d:6e:
f6:82:7a:c7:0a:7e:63:05:d9:ff:20:5f:61:d0:2e:29:3b:70:
7b:f0:39:4d:d0:28:5e:a0:05:cf:25:3c:2e:e8:78:bb:e3:89:
6b:5d:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:37 2026 by rpki-client