Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: u7FlfRc2ibTDwoWcyYuGdxp1MvhjGvtpzM4+TfpnFyI=
Subject key identifier: 8E:38:D3:10:5E:B5:09:0E:31:0D:5D:74:24:62:04:50:80:3B:F2:34
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019FFDFFE1249F84FEEFA9A5A49619E6CF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 02:00:32 +0000
Manifest this update: Fri 14 Aug 2026 02:00:32 +0000
Manifest next update: Sat 15 Aug 2026 02:00:32 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: s7bLHjtJ2wKIv3RCzLieRR3HOnrK/1Igc7sSe0ro36Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:ff:e1:24:9f:84:fe:ef:a9:a5:a4:96:19:e6:cf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Aug 14 02:00:32 2026 GMT
Not After : Aug 15 02:00:32 2026 GMT
Subject: CN=8e38d3105eb5090e310d5d7424620450803bf234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:b2:2a:dd:19:48:d0:80:93:77:08:e3:1a:
4e:97:d7:70:ad:28:d0:a2:54:84:ee:75:e7:ff:18:
b4:69:2c:3f:d0:98:67:57:c9:bb:0c:b2:cf:3f:27:
d5:a8:25:73:e7:f0:43:af:29:e8:48:eb:58:c3:7c:
77:7f:4b:82:cd:7c:a9:2d:6d:45:15:fa:35:77:0b:
29:fd:fd:71:c1:14:f8:08:b2:21:4c:7b:e2:24:11:
40:8c:05:44:ff:01:b8:77:ba:47:a8:bf:52:aa:89:
3a:c9:7f:92:b7:fd:df:89:a6:8e:0d:cb:30:9b:c9:
87:d2:1c:e0:f1:ae:3c:b7:20:3e:7f:84:8e:93:a6:
42:02:c6:e5:d1:f5:41:2e:c7:7f:fd:8d:4f:3e:cb:
46:53:ca:29:90:67:68:c9:30:d6:1c:ba:03:17:30:
8c:75:39:80:5c:30:63:9f:01:9d:99:34:98:b1:76:
7f:bf:b2:13:a5:7b:58:b3:50:84:9a:95:9a:ef:40:
b3:c1:98:a6:2a:ea:8a:6e:b5:4e:ee:b8:bc:95:29:
52:9f:39:52:47:ea:7d:43:1d:73:73:92:b9:42:5c:
da:47:f3:a2:6c:fb:25:8b:dc:4a:4f:61:c1:b8:9f:
5c:1d:91:00:c2:65:75:a2:af:dd:05:25:74:3a:31:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:D3:10:5E:B5:09:0E:31:0D:5D:74:24:62:04:50:80:3B:F2:34
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:dc:13:73:39:00:28:da:fa:66:3d:cb:fd:58:8b:74:98:
60:88:3a:c8:59:d8:54:32:0c:3c:ad:26:db:4d:3e:d9:1c:b1:
db:45:a5:d4:84:e7:08:76:1c:f7:b5:00:29:8e:db:19:c6:ec:
14:6d:31:55:b5:3a:09:21:53:65:6d:37:f5:bf:46:19:4f:2f:
29:c7:01:de:7b:c7:ef:ac:a4:1a:9b:8a:1b:69:23:79:b6:89:
28:49:10:04:68:e1:78:b6:05:59:65:92:b9:17:ae:80:a5:67:
4e:bb:ee:90:23:68:0a:c2:e0:4c:58:c5:99:ba:f7:e3:f7:0d:
ef:42:cf:21:25:ef:af:6b:6a:f5:f7:5d:12:b0:be:a4:d8:f1:
bd:03:83:b9:1e:e6:3b:aa:6b:25:86:d5:19:c6:f5:4e:bf:73:
70:c3:de:da:04:27:76:df:6e:88:1c:92:b1:46:1e:76:5a:26:
4d:ac:a4:60:0b:ad:0c:ed:61:5e:59:d1:13:3a:b9:34:c2:9f:
0d:3b:c7:99:21:4e:72:fe:a2:f4:c8:a7:f3:d7:7e:e0:3f:3f:
30:5b:44:90:a1:66:b1:71:b1:1c:d9:ec:09:6e:06:15:50:f3:
87:23:d7:d7:0f:cd:bb:43:00:e2:f8:5b:6f:c1:89:3c:1d:02:
ea:47:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 04:24:32 2026 by rpki-client