Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: dLjE2wUBQjaLydzRcFqNVHdCbOzYht8KlLHB2t1OxCM=
Subject key identifier: D8:1B:B7:BD:2E:B0:96:44:72:F0:42:C2:C8:70:A2:A7:0F:90:DD:1D
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 01A17703793B06B785476B8CD8CE5FB24F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 0A59
Signing time: Mon 26 Oct 2026 07:01:18 +0000
Manifest this update: Mon 26 Oct 2026 07:01:18 +0000
Manifest next update: Tue 27 Oct 2026 07:01:18 +0000
Files and hashes: 1: 1NUWXpfeKx0vRJ7W8ogpNV41960.roa (hash: 9JS+La/T01/6+T7nA2BAGzeWrsvulpV2YjF982PI0a0=)
2: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: mDt6jMWkiqHkkKCK83Vp478bEKulnE9yFO9esnFiF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:79:3b:06:b7:85:47:6b:8c:d8:ce:5f:b2:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Oct 26 07:01:18 2026 GMT
Not After : Oct 27 07:01:18 2026 GMT
Subject: CN=d81bb7bd2eb0964472f042c2c870a2a70f90dd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:e9:12:37:5a:00:49:06:85:ab:c5:f0:43:
1c:c3:b0:82:41:77:f2:9b:24:5e:42:0a:d9:2b:7e:
00:6f:4a:34:1a:07:95:af:0d:6a:26:cc:e7:af:4f:
cc:98:03:c2:9f:57:15:f6:5f:da:e4:26:53:71:7d:
b0:a3:bf:a4:0b:31:dc:0d:1e:a9:a7:7f:2e:aa:3d:
12:44:5e:12:7e:d1:db:4b:30:e4:ff:99:54:1e:cd:
fa:59:8c:d9:91:ca:73:c7:a6:8e:f7:e9:ab:c4:56:
63:64:97:fe:01:1b:f4:f1:09:9d:2b:fe:f1:ec:a6:
e2:ec:44:fc:43:d4:97:ad:e4:30:73:bc:8b:7c:54:
22:88:cc:b0:c4:3a:51:88:25:83:c8:4e:86:78:71:
cf:d6:da:e7:21:9c:c9:05:97:fa:7c:e1:8c:f8:80:
f3:0d:b6:a9:5a:3c:5f:b2:e4:18:5b:bd:a9:e0:0e:
94:fb:35:87:f8:c5:aa:6c:04:04:de:0e:ba:af:2d:
94:7b:03:b6:3b:26:d6:9b:15:8d:0a:11:ff:2b:73:
02:ee:22:e2:82:6d:80:6a:2f:0d:8e:1f:78:79:c4:
fe:9e:fb:c9:15:4d:88:77:f6:e1:84:15:5e:63:e4:
9f:85:a3:19:a7:de:5d:60:6d:ad:f1:1e:b2:e2:ae:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:B7:BD:2E:B0:96:44:72:F0:42:C2:C8:70:A2:A7:0F:90:DD:1D
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:44:90:61:73:eb:d1:2b:22:b4:0f:0c:af:94:17:47:4e:
b1:76:96:e6:1e:2a:67:4f:b7:3b:03:79:bc:3c:e6:9e:47:04:
7a:2e:fd:be:79:e5:11:84:a1:6b:77:d9:a2:39:63:31:e8:4e:
62:57:c4:c8:0b:04:ba:26:9e:d1:bb:e5:ac:02:64:5a:94:2e:
87:b0:fd:db:ec:65:98:af:ee:bb:d6:b1:da:05:01:4c:b8:ed:
cb:bf:42:e1:f8:81:73:a3:19:97:bb:96:de:7c:04:44:6f:dc:
99:b6:cf:d6:8a:5a:b5:c3:c8:f2:6f:25:b3:02:e4:1d:23:6b:
f0:2e:37:7e:e4:bd:7c:dc:04:26:45:a3:af:6e:b3:88:2f:ca:
80:c7:d8:d0:76:3e:69:68:57:2e:bf:86:3f:d5:30:cd:cb:b2:
de:51:00:53:f5:6e:1b:7e:c6:1c:36:80:a5:51:d7:46:9a:a0:
b0:bc:80:68:6d:f1:9a:43:1c:e9:71:66:d2:8d:15:41:41:a3:
b2:4b:6c:72:43:48:08:77:f5:e4:87:e2:0b:73:64:1c:5f:d5:
bb:23:48:32:43:6a:92:d4:9a:ba:44:a2:97:cd:2d:ae:d5:eb:
ef:e2:59:9b:bd:a4:b0:43:f1:d2:82:1e:89:be:a9:df:8d:e9:
7f:62:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:40:45 2026 by rpki-client