Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
File: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft (raw, json)
Hash identifier: B4XyoOd1wNaTETg2Dfyg3cnkLu0X+SBRQm8zZwZQtNQ=
Subject key identifier: F6:9E:10:C0:29:A9:9C:A1:7C:61:47:4C:EA:23:D1:AD:45:DB:46:57
Authority key identifier: C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
Certificate issuer: /CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Certificate serial: 01A180E219A2EA4536A816C4BC1F83D6DA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
Manifest number: 5F
Signing time: Wed 28 Oct 2026 05:01:03 +0000
Manifest this update: Wed 28 Oct 2026 05:01:03 +0000
Manifest next update: Thu 29 Oct 2026 05:01:03 +0000
Files and hashes: 1: seZEa9HD6L1qki5KhaAXkUiQOso.roa (hash: tF6XcB8iOSSA8S2CSCzo9TmsiQac4hB9BQ+U2m1E58Q=)
2: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl (hash: e+m2wKIkSavQcNUownjffzZYVqrXpnXrniUD7TpknTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:19:a2:ea:45:36:a8:16:c4:bc:1f:83:d6:da:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Validity
Not Before: Oct 28 05:01:03 2026 GMT
Not After : Oct 29 05:01:03 2026 GMT
Subject: CN=f69e10c029a99ca17c61474cea23d1ad45db4657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:a9:a7:1f:9a:cd:8e:56:f6:10:49:0a:06:
8e:40:f9:ef:7e:cf:b7:37:f2:f1:3f:54:ab:e0:6f:
5e:73:75:f8:94:4e:96:24:96:f2:5c:c3:40:9d:7b:
d5:78:41:02:62:f6:55:b7:33:0f:c6:87:28:c1:fe:
58:b9:ac:1f:4e:b4:fa:6e:2c:ff:d0:1f:be:95:77:
f8:a4:cc:a6:18:81:e5:e9:f7:b5:46:97:ac:9a:60:
2e:16:3a:90:b3:90:03:f5:bd:11:2a:78:a1:49:c9:
95:a7:1d:08:a2:e7:4b:e1:fe:41:b6:85:8b:4c:d6:
18:1e:a7:f6:eb:33:11:aa:60:ab:d1:b7:c5:6b:52:
7a:5f:84:72:30:f6:7c:b0:0b:d5:54:8b:62:91:51:
dc:42:a2:61:52:56:fe:04:db:d8:7d:e6:79:cb:4a:
b0:2c:14:bd:3d:a5:b5:26:dc:b2:ea:b9:ff:e2:4a:
04:d5:0c:22:6e:b2:d2:d2:34:58:c0:6f:2a:7d:1d:
19:a7:93:dc:11:f5:52:40:42:15:b0:83:54:b6:f3:
dc:4a:3f:88:01:7d:ec:1f:bf:cd:5b:b7:c1:67:24:
99:99:1a:9b:8d:b7:0b:98:2a:28:5f:12:b2:e4:fc:
08:ea:13:34:ea:23:27:47:76:3e:0c:c0:b6:25:99:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:10:C0:29:A9:9C:A1:7C:61:47:4C:EA:23:D1:AD:45:DB:46:57
X509v3 Authority Key Identifier:
keyid:C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:55:5f:1d:72:73:c6:f8:72:eb:35:7a:fd:27:31:fb:5f:
53:52:ce:4e:4d:7e:e5:c5:23:92:b2:ce:26:c6:d0:5b:5b:7a:
ee:4b:47:78:56:c4:66:05:d3:4d:74:1a:31:e6:48:54:b6:f6:
14:f0:13:fe:49:aa:46:4b:70:09:97:fa:c7:cf:c3:e3:30:7a:
99:e6:16:ae:83:c9:4f:1c:03:d5:0b:3e:fe:70:26:a5:72:19:
7e:5a:8c:e8:7e:aa:15:89:4b:34:1b:c3:aa:b0:cc:d6:c7:ac:
68:e4:34:d7:c8:12:8d:87:82:08:8d:f2:33:9d:f0:71:c5:b2:
8e:ec:4c:95:ab:14:b3:cf:f2:bd:2c:3b:93:82:4e:6a:04:1a:
8d:67:1c:74:86:af:c6:f1:61:ef:f6:99:d6:52:4a:1f:bb:f7:
f3:1e:5b:12:fa:77:36:39:e9:64:fd:b5:50:75:5e:6d:91:38:
f1:14:28:f8:64:28:e6:2d:e4:7b:bc:9f:40:ee:a0:ee:59:eb:
79:3f:61:a0:95:0a:83:b7:f1:88:ca:07:ca:23:c3:4e:4e:d8:
25:70:6b:14:ba:e8:31:40:1f:7f:d6:6c:30:2a:f5:9b:98:c6:
d8:a3:e0:e8:8c:bb:b1:cb:81:97:96:ce:b1:cf:67:52:cf:12:
a2:0f:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:04 2026 by rpki-client