Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: o95nJl//mhMGks0R/3JiZrZqb39FG3S/zJc8mPz4bpg=
Subject key identifier: 5E:82:09:E6:79:7F:11:2E:EA:E1:72:1D:B6:EE:93:E0:82:07:36:05
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 01A1569C9013BFF3DD1AFE7192B7584B9EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 1A26
Signing time: Tue 20 Oct 2026 00:01:03 +0000
Manifest this update: Tue 20 Oct 2026 00:01:03 +0000
Manifest next update: Wed 21 Oct 2026 00:01:03 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: A4eHQKAxgKHIkB1iW+f9PBwNkFDQrlU5BarhpXsux5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:90:13:bf:f3:dd:1a:fe:71:92:b7:58:4b:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Oct 20 00:01:03 2026 GMT
Not After : Oct 21 00:01:03 2026 GMT
Subject: CN=5e8209e6797f112eeae1721db6ee93e082073605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:30:4a:3f:85:e3:06:25:6e:62:1d:d8:60:
24:89:b9:11:33:d9:1c:a4:b3:bf:ce:45:89:39:cf:
3e:86:4e:28:65:e3:20:08:84:60:b0:59:4c:4f:74:
12:b3:91:6f:bf:8f:1d:92:3a:fe:0e:b4:51:d1:e7:
5e:56:30:3b:f8:35:b5:51:aa:7c:ea:ae:f6:40:c3:
43:76:bf:1c:00:ac:57:22:c6:0c:31:d1:46:43:41:
2f:95:46:ea:0d:b2:de:44:2c:ca:b2:c5:51:5f:be:
5b:08:f4:e6:b0:0b:91:b4:cd:d7:95:fb:0f:9c:5a:
e5:4c:f4:18:b4:69:4a:21:d2:8c:90:cb:b3:f9:99:
d1:c4:7f:17:cc:39:f3:a5:76:55:5f:c4:18:76:44:
0c:7e:ef:06:f9:d0:c0:4a:ef:98:a2:92:13:be:a3:
65:a1:a2:b4:f1:fd:f5:99:29:fe:00:d4:4d:38:3b:
02:ba:91:03:37:1f:18:bb:78:2d:c5:37:43:c6:91:
89:a4:c6:a4:8e:6c:f5:c0:10:1f:85:2c:cf:85:7a:
33:78:bc:7d:a8:67:6e:ca:82:76:1c:22:31:37:b0:
42:15:53:c6:eb:22:c5:7f:0d:86:c6:92:75:6f:9e:
96:e6:f0:cb:9a:ad:be:84:20:db:22:0c:4f:6d:73:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:09:E6:79:7F:11:2E:EA:E1:72:1D:B6:EE:93:E0:82:07:36:05
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:67:10:c9:93:fa:5d:32:b7:0b:e3:9d:5d:91:53:dc:bb:
09:57:76:2b:17:ae:7e:32:be:9d:da:e5:dc:27:09:49:61:4b:
d4:5e:90:c7:21:1f:91:8d:07:94:08:a8:7f:44:98:c9:5a:57:
d2:01:cc:f8:65:a0:e1:f5:93:19:07:97:8f:8d:a4:c2:60:de:
8e:96:8f:7f:35:89:d3:06:97:f1:2b:84:1c:40:94:55:96:05:
03:cb:31:b8:f1:bf:8d:18:3f:9b:2c:8a:05:91:a7:06:fc:c0:
c7:e1:dd:0b:23:c7:ca:e5:b9:2b:a6:c9:cc:c6:b7:eb:53:c8:
8f:73:0a:e8:a3:ba:f9:be:a3:0f:8c:ca:59:ce:9f:b1:2d:8b:
9e:b8:8b:d2:09:33:1c:9a:c1:45:ba:4b:e2:d7:fa:bd:72:50:
e9:85:4e:8c:bd:d2:4c:f1:7d:61:55:13:50:c8:07:94:35:39:
c2:d3:36:57:0a:e9:a6:f8:df:21:2f:7c:26:5f:f9:85:45:de:
8e:a5:16:d5:cd:cc:ba:9e:fe:2d:25:39:24:9e:42:24:43:04:
61:24:b6:9b:da:b8:42:d1:5b:88:01:23:9f:bb:4a:25:be:24:
2d:5d:e4:e1:ef:2a:4d:9f:2c:9b:f8:15:85:ff:cc:03:b5:4f:
62:6e:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:39:32 2026 by rpki-client