Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: CnCiohzhLQjNl1SrO/qBncvWhrqn9s8zc5UL1c11rrM=
Subject key identifier: 21:36:C8:ED:76:A1:4C:B7:07:8B:0C:27:D9:E6:C1:DA:7A:C2:D6:AE
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01A17C5FF4C86ADB116E043D96A67306E6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 08FB
Signing time: Tue 27 Oct 2026 08:00:25 +0000
Manifest this update: Tue 27 Oct 2026 08:00:25 +0000
Manifest next update: Wed 28 Oct 2026 08:00:25 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: Fbhfepz5y2mXLOB8PwGg+N5G79Ait4Z6lmsNFRJfV8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:f4:c8:6a:db:11:6e:04:3d:96:a6:73:06:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Oct 27 08:00:25 2026 GMT
Not After : Oct 28 08:00:25 2026 GMT
Subject: CN=2136c8ed76a14cb7078b0c27d9e6c1da7ac2d6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:e3:c3:d2:32:04:c1:4c:5a:b7:f2:b8:e7:
41:33:93:78:e9:df:5c:12:81:58:f0:7e:6f:0e:c4:
44:c1:33:e5:d2:0a:68:3e:9a:41:90:30:8b:ec:06:
a7:7f:2e:9a:db:ab:27:c6:ba:8e:48:f4:43:6f:91:
0c:bf:ae:f3:23:16:8c:7e:1b:da:38:44:69:7b:ac:
de:22:c7:ab:1e:bf:7b:6a:69:b4:05:19:d0:7b:45:
46:a5:be:1f:e8:62:4d:d4:31:c9:f3:f8:90:ba:f8:
fc:8b:91:d0:84:1f:50:26:75:3a:4c:fa:62:50:64:
d1:f6:3f:ac:65:58:fe:0d:8d:2d:88:22:01:07:f3:
b0:d4:87:ef:02:97:44:13:97:20:a7:2c:fc:67:60:
03:8a:aa:c5:18:94:e4:de:fe:a0:90:2f:66:3f:1d:
5c:6a:05:ca:d5:b4:85:76:58:01:1d:9b:f4:44:44:
10:e6:ab:d8:76:e5:bd:56:7d:fb:50:71:a0:30:e4:
ea:c0:75:34:9a:7e:09:e1:01:47:63:ba:bb:d2:36:
59:82:ca:b8:bf:25:a7:9b:36:da:bb:69:27:40:27:
37:54:f8:93:b5:d4:5b:04:1b:ba:cd:64:8c:4f:eb:
21:c3:ad:a5:8f:e5:cc:bd:e2:0e:5d:e2:04:a5:52:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:C8:ED:76:A1:4C:B7:07:8B:0C:27:D9:E6:C1:DA:7A:C2:D6:AE
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:9b:e2:95:85:43:c4:23:1c:be:82:56:62:7c:a1:71:84:
7a:b1:29:11:33:11:d2:3b:f3:63:d1:27:90:b2:e1:0e:60:60:
a4:9b:3e:a4:76:bb:5f:73:31:23:5e:3d:f0:9b:d2:b8:96:28:
1e:95:b0:40:01:35:0c:f6:27:5f:f9:00:50:51:cc:53:49:3f:
80:65:b5:a8:ec:7d:a6:cc:99:45:8d:56:f1:a2:ca:00:d7:79:
f5:88:8a:f9:b5:15:04:40:6e:72:10:1d:6f:ec:9f:13:0d:6d:
cc:51:11:99:8a:0f:ab:02:0a:75:46:91:5d:82:0d:a2:6c:b1:
13:ec:df:8c:5f:54:52:d3:8f:ed:ed:4a:37:cd:8e:b2:b4:15:
e5:ba:c9:ed:20:57:df:bb:43:1e:2b:61:87:57:b0:76:f1:b9:
8f:63:bf:84:11:d4:8a:b8:ac:db:29:64:f2:04:ce:21:22:4d:
38:67:ab:c6:47:f3:b2:00:b9:66:26:59:75:4e:36:51:c8:17:
65:0e:23:15:7f:05:d1:81:76:78:a9:8d:6c:9c:8f:9c:fa:8c:
78:4d:a0:b3:09:13:63:ca:a7:85:41:af:1c:e5:4e:7e:f7:14:
11:55:1e:7e:13:f6:38:01:20:1b:2e:d7:e4:9c:ea:5a:7a:34:
0b:95:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:52:20 2026 by rpki-client