Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: Zi5jYmG3IDzmmeqvc8BCCFy0m+x8YooQkg+ysPf+YA0=
Subject key identifier: 17:5B:E0:DD:5B:C3:5C:BA:4B:33:2F:BD:20:DA:33:91:0E:4A:AB:0B
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 01A08B312E608EB09DC167CF3BA3CE8F824D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 108B
Signing time: Thu 10 Sep 2026 12:00:51 +0000
Manifest this update: Thu 10 Sep 2026 12:00:51 +0000
Manifest next update: Fri 11 Sep 2026 12:00:51 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: 9KjeRn1LfvpEjIM4iLMBmo30MvmNYBWfZ171AUILfdM=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:2e:60:8e:b0:9d:c1:67:cf:3b:a3:ce:8f:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Sep 10 12:00:51 2026 GMT
Not After : Sep 11 12:00:51 2026 GMT
Subject: CN=175be0dd5bc35cba4b332fbd20da33910e4aab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:e6:9b:ef:00:e0:80:0d:dd:4b:2a:bf:9e:
9b:f8:5b:fe:75:3f:de:a7:bf:46:7f:45:95:b2:98:
c4:a2:80:9a:e7:5e:60:65:16:b8:4d:36:ab:2d:f8:
a4:da:9d:3f:6c:65:7a:32:1d:b2:a7:ec:72:09:0d:
f4:96:1f:4c:ac:34:d7:6b:47:d8:ef:0b:c2:ac:c5:
70:77:f7:3e:55:ec:9a:1b:1b:b2:a9:a3:33:a3:29:
db:02:72:87:db:af:05:03:a7:18:0e:74:3f:fc:19:
15:fc:12:90:9c:ea:a4:ef:23:e7:6f:2f:eb:7e:57:
74:cd:a6:39:46:ad:8d:c0:6c:2b:62:73:13:e3:c0:
9d:49:02:00:3b:6c:a6:dd:fd:44:de:36:41:cf:49:
ee:fa:7b:fc:82:7a:3b:ad:4f:4e:59:3c:8e:68:38:
5b:17:66:40:54:42:a4:d7:f8:9d:05:f2:ea:1e:b5:
6e:99:9c:e6:e3:d9:ee:cb:2d:be:2b:21:48:42:f0:
46:7c:3d:66:83:c7:8c:9b:23:73:29:7e:8f:df:30:
b0:55:b3:ef:98:82:f5:95:75:c7:fa:62:60:42:b4:
59:fb:87:7e:f0:d7:e1:fc:dc:de:ff:1e:c2:a9:a1:
34:51:a8:d5:c0:07:5f:ee:6e:4c:65:a5:02:2a:a2:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:E0:DD:5B:C3:5C:BA:4B:33:2F:BD:20:DA:33:91:0E:4A:AB:0B
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:c8:d9:dd:8b:bb:9b:43:57:c3:64:d2:4a:2f:19:db:12:
ad:38:84:6c:3e:a6:7e:82:92:8d:72:4c:e0:10:77:cd:e5:fe:
46:3d:c0:88:59:a7:2e:69:f6:1e:c1:9e:cf:20:89:b2:0c:2e:
7a:e0:8a:0a:18:e5:e7:ee:48:c0:48:15:ef:10:fc:f9:f6:75:
1e:a7:d3:fb:c9:dc:89:08:9b:5a:d8:42:d2:53:89:fa:cf:fe:
45:9f:f6:3c:bb:52:82:15:de:5c:49:67:fc:0d:7d:10:9e:4c:
09:c9:f0:74:1c:af:f6:a5:f8:e3:ca:83:e7:74:27:c7:ff:dc:
0f:7a:bc:81:64:f4:5f:f3:a5:98:06:c3:ee:40:bf:3c:d4:7a:
84:40:56:5c:c4:52:84:bf:47:96:ea:f4:6d:7c:64:bd:16:d2:
53:25:7e:22:17:32:93:93:19:56:a7:79:8f:a0:36:8a:4e:00:
63:5d:11:7a:01:9b:b2:5d:5f:b8:04:77:88:90:10:c7:d3:4a:
10:74:84:a7:1c:3b:7b:15:3c:aa:52:ad:c5:8d:e3:6c:da:bb:
9b:b3:a6:28:5e:67:6a:c7:4a:d8:46:98:0e:bc:04:23:20:bf:
2d:fd:0d:11:a8:b8:42:b9:fe:1d:01:a8:f8:dc:54:eb:58:51:
bf:23:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:48 2026 by rpki-client