Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft (raw, json)
Hash identifier: H0KkD/f/fkVjWakRr5zVXJU1su8wbe5DKGFSy2dSO40=
Subject key identifier: 3D:6B:69:B8:73:D9:D8:96:38:AC:CB:05:18:8D:BA:E5:61:87:C4:D0
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 01A08C7B553688E7005654BDB0AC11243F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:27 +0000
Manifest this update: Thu 10 Sep 2026 18:01:27 +0000
Manifest next update: Fri 11 Sep 2026 18:01:27 +0000
Files and hashes: 1: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (hash: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=)
2: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (hash: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=)
3: yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl (hash: Gqzn23/QQasbzMFDUC2ZCspjJrxSwbwwQvOLmXCqT0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:55:36:88:e7:00:56:54:bd:b0:ac:11:24:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Sep 10 18:01:27 2026 GMT
Not After : Sep 11 18:01:27 2026 GMT
Subject: CN=3d6b69b873d9d89638accb05188dbae56187c4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:ad:82:83:b0:47:55:c1:9a:c1:26:0f:02:
d5:ea:c9:f6:22:f1:41:2e:9f:67:ca:53:25:54:c7:
7b:0f:7d:c2:ca:70:40:f0:1e:3f:4b:fb:66:e1:3d:
3f:20:6e:ac:26:9f:13:92:5f:90:38:f2:0a:20:2f:
5b:a3:6f:37:a9:18:84:e3:ef:a3:f0:ca:07:e7:87:
03:86:41:27:74:85:89:75:d7:b3:34:49:e4:4c:59:
f1:cd:2c:1c:02:f2:e8:bb:bf:e1:de:a6:54:9b:57:
78:b5:8e:63:06:57:54:c3:06:8b:b0:80:49:ca:1c:
b7:9f:10:a7:7c:76:65:a0:42:42:85:56:aa:a6:42:
61:4e:c7:f6:0d:2c:4d:74:26:2a:8a:4a:b3:f2:3e:
38:29:4c:26:4a:d4:05:25:70:fc:c4:ec:53:4e:64:
a8:8b:a5:37:b5:9d:fa:8a:8d:a5:93:2d:50:85:42:
1c:ad:40:32:c1:58:fa:53:55:c1:c7:20:9a:1a:78:
de:df:46:1f:de:fe:26:4c:90:fc:c8:58:40:c2:74:
b4:46:01:58:34:63:6f:5d:f2:f8:25:67:d7:e8:f5:
07:43:03:c9:e7:c2:85:cf:36:11:a7:06:11:3c:3b:
cf:cc:25:a0:2a:65:79:9e:cf:ee:23:d9:54:0b:81:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:69:B8:73:D9:D8:96:38:AC:CB:05:18:8D:BA:E5:61:87:C4:D0
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:4d:8a:31:43:74:16:41:fd:7c:34:eb:fb:e0:28:67:3c:
8f:97:ce:8d:97:b5:fc:6e:2c:c1:0f:9a:33:ea:b6:e3:b2:ff:
37:ef:6b:ef:7b:9c:7a:8e:f4:9f:6c:0f:5f:5a:a6:0d:a8:ce:
00:35:d9:21:76:af:9e:5b:14:09:c7:25:01:51:99:fa:13:b2:
62:04:12:b3:f2:b4:ba:5e:e9:d6:12:ab:b7:53:c3:17:56:20:
cb:57:28:a3:d5:4d:9c:79:5e:d5:05:db:e6:fc:62:a6:94:06:
06:bc:cb:76:68:ff:26:be:a9:1f:52:87:ce:13:2a:d1:f0:df:
5d:32:cf:07:9d:56:98:c5:1d:30:24:60:d8:2d:3a:05:cb:16:
16:a8:8b:10:2e:94:35:08:33:3f:5c:64:2a:54:54:7c:6e:09:
f9:d7:d0:83:81:0a:35:c6:49:af:f2:87:33:dc:32:bc:ed:5b:
a3:ea:65:8f:55:79:ef:a6:1a:00:9e:40:d5:ff:ba:41:ac:3d:
ea:9a:37:9b:80:4b:e2:79:aa:a6:ef:05:16:f4:77:87:69:25:
24:3d:f8:d8:3d:54:c3:1f:47:b4:af:4c:d8:b5:d1:be:2f:3c:
10:59:7e:57:d9:70:65:17:f8:87:73:14:82:12:a8:d3:88:94:
21:27:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:25 2026 by rpki-client