Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: 8VU6qrH1t8Mdndxm1L5rIseb/hO8fwD5NF+3Vts0Pic=
Subject key identifier: 43:41:BB:7F:E4:07:1D:04:38:2D:38:A2:DD:9D:FE:A9:6B:80:02:0D
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01A06FF1E57B42BA39C12E913935BEE586DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0870
Signing time: Sat 05 Sep 2026 05:01:58 +0000
Manifest this update: Sat 05 Sep 2026 05:01:58 +0000
Manifest next update: Sun 06 Sep 2026 05:01:58 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: 3WVP4n3OJNTufDTvXe9H46WhX0D+y09FapgOAiL1pNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:e5:7b:42:ba:39:c1:2e:91:39:35:be:e5:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Sep 5 05:01:58 2026 GMT
Not After : Sep 6 05:01:58 2026 GMT
Subject: CN=4341bb7fe4071d04382d38a2dd9dfea96b80020d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:45:67:0c:d6:5f:93:b8:ff:e5:3d:5c:9d:
bf:45:0d:e1:e7:b6:ac:34:e8:5e:08:01:86:38:ee:
06:23:be:41:0c:0f:d0:c9:56:27:3a:24:30:23:d9:
61:e1:ad:d5:ae:8f:61:b6:c8:1a:22:76:4f:7d:42:
71:ef:8f:f0:26:59:4c:2f:d9:67:21:37:9c:3b:8b:
c2:81:62:0c:94:93:56:b5:58:9d:58:b1:f5:39:28:
f7:fb:e0:44:1d:89:9f:cd:cf:ad:b8:9c:b4:20:d5:
40:53:60:69:f9:b8:c9:8b:f2:2c:96:8d:29:a1:82:
3e:d0:39:89:96:65:35:35:1c:f5:bc:22:41:ac:aa:
bb:37:51:10:ab:cd:a8:c3:d8:a0:52:38:8f:46:9c:
2c:7e:76:8f:d0:35:2f:bc:44:ca:71:22:3e:4d:e0:
61:67:18:fd:95:95:26:09:c6:a0:32:bc:bf:9d:6b:
40:c8:2d:41:76:36:c1:52:b1:ed:f5:63:41:f1:5a:
ed:2e:ec:62:2c:83:a4:bd:20:b7:cd:41:ac:7f:da:
95:6e:88:51:65:65:aa:79:8e:f0:50:19:d1:73:0c:
5f:c5:b2:c2:88:e2:13:8a:31:20:0a:eb:3a:e3:46:
00:68:c7:64:ab:15:91:4e:04:d6:1f:02:cc:45:16:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:BB:7F:E4:07:1D:04:38:2D:38:A2:DD:9D:FE:A9:6B:80:02:0D
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:51:a1:00:0b:5b:4f:de:d3:f9:d9:84:27:41:ac:d5:99:
3c:9d:b1:cb:0d:42:fd:3e:42:6f:f1:b6:1b:94:93:83:f3:7c:
3e:d4:fe:a3:92:da:b7:7d:10:fb:d6:e1:cd:34:62:cd:40:6c:
c2:31:19:c6:19:cd:f3:4b:8a:54:bc:e8:22:4f:fc:18:42:9e:
22:52:fa:a9:00:01:2c:0b:cb:3c:8c:7f:84:62:2c:da:aa:9b:
50:ed:f1:7d:85:b7:32:55:37:7d:5c:35:25:fa:4f:99:de:84:
d8:a9:93:27:ca:99:6a:f0:94:c6:75:ab:cc:39:d0:16:a3:fa:
8c:47:b0:cb:c5:6b:93:33:ae:91:0d:6b:2f:c1:18:7a:f4:ad:
c0:84:be:7b:41:8e:57:01:64:78:57:d9:67:6d:f4:73:87:52:
77:56:18:8c:5a:12:ba:62:50:2e:8c:f8:ac:bd:1f:41:1b:02:
cd:70:10:08:8a:b3:6d:23:5a:b4:79:f1:2d:c9:f2:b3:bc:56:
5a:07:f0:0f:7a:eb:0c:de:b0:74:70:64:32:06:fa:38:3d:0c:
7f:63:e7:fa:f6:1f:48:23:cb:93:f1:62:c8:48:96:e9:3c:f0:
da:32:85:5d:83:0f:6e:ee:72:3a:f6:7d:4a:54:0d:65:14:68:
f8:7c:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:42:39 2026 by rpki-client