Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
File: yZh_r4QGhFO856CF9-JEFZPET2E.mft (raw, json)
Hash identifier: WZy80TouastO6XbwQosS+JQX9vTZx001jpNe/66AYFs=
Subject key identifier: 0C:E6:1F:34:5A:A8:4E:DB:A5:4D:31:ED:AE:27:12:4D:48:0B:CA:59
Authority key identifier: C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
Certificate issuer: /CN=c9987faf84068453bce7a085f7e2441593c44f61
Certificate serial: 01A1242FB8102E115101155A5EF073CE8BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
Manifest number: AF
Signing time: Sat 10 Oct 2026 05:01:09 +0000
Manifest this update: Sat 10 Oct 2026 05:01:09 +0000
Manifest next update: Sun 11 Oct 2026 05:01:09 +0000
Files and hashes: 1: 4zUuJLxbytA58yz_8CPQ-fCeE_w.roa (hash: Je10rxa6GNXBQyt5VGMNbKvaC26HJG8fWwTPdKlrmSc=)
2: yZh_r4QGhFO856CF9-JEFZPET2E.crl (hash: 46W1U8c2dlrudczvyGF19pGxkAXdDHb1907U7gXMtyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:b8:10:2e:11:51:01:15:5a:5e:f0:73:ce:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9987faf84068453bce7a085f7e2441593c44f61
Validity
Not Before: Oct 10 05:01:09 2026 GMT
Not After : Oct 11 05:01:09 2026 GMT
Subject: CN=0ce61f345aa84edba54d31edae27124d480bca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:d6:ca:1f:6e:18:5c:8a:87:87:07:67:90:
89:bf:96:78:f1:df:33:99:b7:6f:01:43:59:4a:32:
06:4d:e8:6f:4e:03:e8:25:3e:c3:88:c9:2c:c6:2b:
cd:29:0a:da:05:0e:63:71:25:93:15:49:99:55:20:
85:d1:08:ca:97:04:06:6c:9e:8e:fe:d2:39:52:37:
49:d5:24:5e:57:aa:f0:28:50:d4:03:ec:71:78:e1:
91:f0:63:b0:51:5d:8c:75:98:2a:a0:79:74:e8:cc:
b0:46:c6:70:6b:aa:63:7c:ac:27:0d:d2:01:66:0e:
46:9a:4b:77:33:f6:f7:3c:22:67:43:70:1a:37:16:
90:3e:d6:9b:fd:0a:81:ed:b4:ef:51:22:f7:13:a6:
f4:4d:3f:db:00:4d:81:77:33:6d:b9:66:4c:70:47:
32:6e:ed:0c:8f:f4:44:2c:38:3e:68:64:98:e9:97:
86:91:ea:fd:0b:6c:a0:55:b7:2e:b7:df:39:f4:84:
6e:a2:eb:bf:ea:b8:88:30:d8:1f:aa:06:fe:41:df:
f5:56:84:25:ce:60:26:e7:67:af:dd:c1:ee:7f:67:
e8:cf:b2:80:a0:85:d8:96:33:01:2f:f2:f3:2b:56:
03:42:19:09:5f:41:13:d3:a3:6c:a0:de:28:11:a7:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:1F:34:5A:A8:4E:DB:A5:4D:31:ED:AE:27:12:4D:48:0B:CA:59
X509v3 Authority Key Identifier:
keyid:C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:00:b6:d1:8e:f8:0f:f8:bd:5b:4d:80:be:69:c7:4f:21:
6f:fd:f3:17:47:a6:f6:13:f2:86:0a:37:bb:a7:63:c4:ad:97:
47:d6:17:84:9a:a4:20:df:ae:82:80:b8:b4:d6:03:9e:53:b0:
1a:25:21:02:4b:33:7b:94:b6:5b:ae:74:ec:53:d0:2a:6f:a8:
ce:4f:3c:4a:5a:e6:53:84:62:2e:00:c8:7b:59:68:45:a3:71:
91:39:dd:3f:f1:00:56:c1:c6:1d:80:c7:fb:fd:e8:49:c6:2a:
71:a1:2b:00:97:a1:4f:9e:1d:01:96:5d:b1:0b:ad:68:9e:3b:
63:c7:5c:76:52:9c:c3:36:a3:73:30:96:60:20:c8:6f:ed:42:
5f:f2:c6:76:97:cf:67:f4:03:9c:ef:5a:ec:be:49:30:a9:5b:
de:11:8f:d3:5a:11:f0:01:34:80:40:56:f8:da:6d:4a:35:08:
50:9b:ac:99:5a:31:4f:c7:75:6f:5c:fd:04:7a:6e:e6:a4:aa:
3e:5c:fe:f2:b0:1b:d0:aa:f1:29:bf:98:82:dc:9f:66:ff:d9:
5f:56:b4:5a:b0:59:a2:77:85:c1:04:dc:e7:da:5b:62:d5:dd:
95:44:e5:56:c2:d9:f7:73:50:66:c9:71:b9:1c:05:79:31:88:
8a:27:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:35 2026 by rpki-client