Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: oUSjhcADb1/rDnz/3wE7ct9VeR1ueas11Qfz1BYrpGU=
Subject key identifier: 2D:79:F7:70:89:FA:37:EF:31:62:6D:07:8D:9E:89:7F:72:A2:D6:2F
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 01A11FAE687259D3192DB48A89F70788CD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 05A0
Signing time: Fri 09 Oct 2026 08:01:25 +0000
Manifest this update: Fri 09 Oct 2026 08:01:25 +0000
Manifest next update: Sat 10 Oct 2026 08:01:25 +0000
Files and hashes: 1: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
2: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
3: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: S6AmPyGTmtZlg9nAj/bfmZO+QbPB7iUYn4SbSqa6efQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ae:68:72:59:d3:19:2d:b4:8a:89:f7:07:88:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Oct 9 08:01:25 2026 GMT
Not After : Oct 10 08:01:25 2026 GMT
Subject: CN=2d79f77089fa37ef31626d078d9e897f72a2d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:5f:c2:38:33:aa:4e:dc:7f:52:f8:3e:e7:
45:8a:95:74:40:19:6a:2e:71:9a:14:0c:ab:2b:58:
07:13:20:cf:ce:8f:ee:b4:b0:4b:12:a2:40:55:23:
56:b8:56:5a:ac:f6:80:b9:aa:60:1c:da:60:c1:56:
5b:5e:3b:9c:8b:21:be:a3:d8:f8:2a:65:4b:69:99:
c8:08:05:32:34:fd:c6:be:e5:11:54:1e:59:d8:18:
67:66:81:22:cd:7a:7e:ac:48:44:11:eb:41:33:ec:
72:f0:54:55:2d:cf:20:10:17:4f:08:b2:78:b9:52:
c0:d2:ef:5c:c0:a8:a4:5c:47:fc:7b:c7:4c:85:87:
8a:73:79:3d:53:14:8f:cd:e6:62:8b:3c:e2:fd:a6:
7e:bb:e9:02:6b:21:61:4b:9f:1e:24:4e:fb:56:a9:
60:86:20:ac:93:47:a9:4e:17:e1:70:20:a6:79:a4:
18:d4:96:af:b7:21:e7:6e:5e:23:79:74:02:ee:64:
88:6c:94:2c:9c:b4:ac:cf:b6:f1:a2:6f:94:35:85:
da:fe:bc:c9:7e:5b:25:0b:67:33:73:18:8c:dc:4b:
5a:b1:d1:94:0d:e4:b2:ec:63:1d:ca:f9:41:4f:c4:
48:ca:a4:7f:d7:89:a6:15:e7:cf:f3:b9:5a:19:f8:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:F7:70:89:FA:37:EF:31:62:6D:07:8D:9E:89:7F:72:A2:D6:2F
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:52:e5:fe:34:56:c1:5e:51:c8:ab:c0:1a:b6:24:c9:b6:8e:
77:37:6f:48:ab:5f:e7:13:bb:15:d7:7b:79:7a:6e:50:63:6c:
a2:59:3a:45:f9:99:3a:3c:0d:89:1d:c4:0c:c0:86:10:84:cf:
0b:3d:4d:bb:5e:fe:8d:bb:36:4d:a5:d8:6f:c6:59:fb:b3:f9:
fd:4e:a2:3b:c9:b1:90:38:57:3b:70:b3:8b:2d:6e:f1:01:7b:
cb:c6:e4:4f:ef:68:5e:b8:3b:38:05:e9:5f:6d:98:c8:22:8f:
49:97:2f:26:ad:e1:bb:f8:1b:7e:ca:9c:f2:35:28:5b:e5:25:
ee:7e:57:60:76:b4:d4:84:7a:07:72:af:80:14:a6:87:6e:76:
1a:09:0e:b3:f6:f4:32:30:fe:a6:bf:7d:95:5b:ec:18:88:e9:
16:fa:4e:7b:52:01:6d:1c:38:33:76:42:0f:50:86:ec:34:46:
6b:d9:9e:99:ee:07:7b:b6:3f:47:f9:dc:d5:24:5d:1e:12:9d:
4c:fa:2f:74:f9:3d:18:f9:e1:c6:20:14:84:ec:bb:5f:76:2d:
d5:73:f2:73:98:09:44:96:6e:d2:29:be:a7:7d:78:af:b6:94:
ff:da:9d:6c:5e:60:9a:08:d7:a9:2f:7e:79:be:81:67:81:4b:
95:0a:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:41:31 2026 by rpki-client