Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: fSnuxGOTyhWvlkLLrLB2tr2Kwy20y0imZ3bPdLgiIWw=
Subject key identifier: EE:9A:2A:E2:DF:1F:B7:95:B5:EC:4E:31:DB:E0:B9:E0:8D:E3:74:0E
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01A03F721C49B08D9CED95A1AF6D1D95FBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 1255
Signing time: Wed 26 Aug 2026 19:00:37 +0000
Manifest this update: Wed 26 Aug 2026 19:00:37 +0000
Manifest next update: Thu 27 Aug 2026 19:00:37 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: OYcSRSGSy/rstfCwx+TQwWyWCm9Sj+Pf5XacI4YUBD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:1c:49:b0:8d:9c:ed:95:a1:af:6d:1d:95:fb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Aug 26 19:00:37 2026 GMT
Not After : Aug 27 19:00:37 2026 GMT
Subject: CN=ee9a2ae2df1fb795b5ec4e31dbe0b9e08de3740e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:b2:1a:66:c4:0a:2e:47:1c:65:5e:39:ab:
cd:dc:58:b2:c3:8c:f2:78:f1:c9:69:5a:14:21:a8:
32:0d:fa:15:b7:94:bc:39:3f:d1:f2:a6:54:ca:ec:
5b:42:f0:88:b6:76:d9:c2:3e:2c:96:72:2c:25:0d:
b1:71:1f:31:67:94:2b:30:55:bc:e4:cf:55:b1:bc:
dd:4b:01:5e:96:c8:7f:6e:9e:14:a7:8d:91:f1:6c:
b8:a3:15:c4:dd:2b:b9:19:16:9f:7d:96:39:61:a1:
ba:2f:ae:6f:d2:b5:5b:05:df:d2:f8:41:a8:49:e0:
2b:97:5d:53:90:bd:ff:6a:e3:d0:d8:d3:fc:ae:fe:
75:d9:fb:ed:67:ba:bf:3d:c8:cc:81:14:59:5d:3c:
db:a0:8a:03:b9:a8:57:1f:24:45:57:35:00:77:2c:
b7:50:87:fe:f7:2a:7c:27:f8:38:b5:ae:98:d2:20:
8b:0b:be:6b:e3:4b:5a:0b:1d:fe:5e:68:46:86:4f:
be:fc:60:58:4d:35:16:6c:79:c0:59:fb:91:d3:0e:
72:37:a7:d4:dd:c0:c1:67:90:45:8f:25:6d:62:80:
81:a9:f5:6c:e0:42:84:a6:ed:79:75:a4:48:5c:00:
2a:76:4f:6b:55:03:ea:fa:65:b0:db:65:46:be:7c:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:2A:E2:DF:1F:B7:95:B5:EC:4E:31:DB:E0:B9:E0:8D:E3:74:0E
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:82:8f:58:21:b8:ab:3f:29:07:44:ab:80:b6:cd:c9:18:
3d:fd:b6:a2:28:da:d8:af:ef:b6:26:3c:05:6d:a4:cd:63:99:
64:33:aa:10:f8:c1:2d:dc:76:73:33:b5:57:7a:e1:68:1f:24:
20:86:40:aa:90:7a:5f:6b:e2:dd:10:ee:ec:97:19:1f:60:36:
22:67:3f:b5:7a:2c:ae:23:26:ea:37:0a:37:5a:e6:d8:47:0c:
04:b0:97:6a:3f:35:27:df:4b:09:b2:e5:04:73:cd:a6:cc:be:
c8:b1:3f:41:70:b0:0e:49:e2:92:36:6e:4e:bd:31:b7:ef:ad:
cc:ac:e1:2d:c8:25:a2:da:30:8b:ad:54:c0:44:6b:a7:ed:e7:
46:be:0d:33:46:6a:00:cf:7a:e8:4a:5d:48:37:e5:34:1f:64:
bc:88:43:12:0a:15:c5:ca:f4:60:c1:1d:7d:17:70:d7:93:c5:
15:7d:62:57:0c:4c:8b:64:be:73:77:37:32:6c:db:a8:39:28:
40:54:32:60:2f:c1:e5:1c:3f:0a:7e:d8:0f:83:12:72:d6:84:
b2:6d:13:04:02:f2:be:79:82:7e:16:cd:65:a7:3e:21:26:e4:
9d:10:1d:06:a9:2d:47:f6:85:2e:a7:a6:67:09:ce:29:d2:c6:
f8:88:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:09:57 2026 by rpki-client