Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: vb6GFXA8UqO1OFKqV/vgXoYb2fKHfj4r9k0OzQfRW9A=
Subject key identifier: 19:15:DB:92:A5:A5:B7:58:31:B4:36:7F:51:23:0C:4D:52:8D:06:90
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 01A08C4411579E412B39DA591EE7CDC3981A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 16CD
Signing time: Thu 10 Sep 2026 17:01:06 +0000
Manifest this update: Thu 10 Sep 2026 17:01:06 +0000
Manifest next update: Fri 11 Sep 2026 17:01:06 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: iPP+i6OwytsK0ECqA9drizpJiqvdxbTogkWl2ISQ6nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:11:57:9e:41:2b:39:da:59:1e:e7:cd:c3:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Sep 10 17:01:06 2026 GMT
Not After : Sep 11 17:01:06 2026 GMT
Subject: CN=1915db92a5a5b75831b4367f51230c4d528d0690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:5d:d1:5e:d6:15:8e:b5:3b:ca:fb:c6:74:
7b:87:21:36:88:65:53:a7:f8:6a:d6:46:f8:89:c1:
c7:9d:80:ae:df:21:48:24:e8:43:14:96:7c:5b:97:
bd:5e:cb:24:91:ba:0d:db:ee:c7:f1:8e:2e:0b:99:
4a:c5:4c:7a:fc:43:b9:d1:68:ec:6d:dd:95:04:51:
a9:12:42:28:61:6e:78:16:c1:28:fe:3a:51:36:74:
50:99:38:27:79:84:bf:ed:c5:01:35:05:f0:e3:8f:
78:23:56:11:a3:aa:d5:83:a9:c8:d7:bc:9a:5a:94:
ba:70:96:b7:35:39:73:c0:e9:48:50:d2:0f:14:44:
ab:6f:ed:03:94:9d:f3:f6:3b:6b:64:d1:8a:49:c3:
09:16:89:68:e3:5b:33:2c:24:97:d1:6c:3a:8f:df:
2f:08:d4:89:da:c6:88:5a:a7:fe:a3:fc:6e:9f:71:
ae:76:9c:de:cc:2c:51:93:2d:82:62:3a:33:fd:9e:
3c:a9:96:14:0c:27:39:e0:19:25:a9:cf:91:6d:e0:
56:04:24:1a:c1:03:21:ec:42:8f:80:55:84:1d:8b:
fb:93:45:5a:b0:e8:96:f1:94:46:67:5f:05:bf:f1:
c4:24:75:d0:65:28:1e:72:e6:de:4b:7c:32:38:cf:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:DB:92:A5:A5:B7:58:31:B4:36:7F:51:23:0C:4D:52:8D:06:90
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:d0:c9:38:cf:31:b2:8d:e0:40:0c:65:f2:93:7f:eb:74:
45:f5:1b:f9:db:9e:f0:96:a1:8c:e8:be:9d:26:31:a0:09:73:
08:ef:f0:5f:25:de:77:a5:4e:c6:55:17:cf:a6:4c:63:1d:a0:
cf:00:b2:e4:54:fb:a8:c9:6a:4c:47:ff:33:d8:6a:fa:bd:25:
e8:a4:64:26:f7:3d:9d:dd:fb:dd:0d:5b:c0:48:85:b2:3e:a7:
97:c0:aa:05:59:d6:9e:9b:4d:dd:75:2c:2d:8d:b7:78:35:2f:
cb:80:78:f9:42:94:5c:90:41:96:df:18:6c:62:46:50:13:83:
fa:52:32:26:d3:18:59:41:18:b5:ce:12:02:b6:9b:a8:1a:59:
77:0b:30:df:18:66:a6:2d:c7:7b:44:b7:42:c9:8c:1c:11:4e:
35:50:14:3c:3a:75:df:14:2e:55:c4:0f:d0:89:5a:cb:62:d0:
64:b5:e2:5c:eb:3e:5b:6d:ac:e8:b0:60:7b:7c:68:ee:23:5c:
b0:20:5c:f2:07:6d:49:30:3d:c8:c0:b8:92:64:a7:bd:3b:38:
aa:fb:9b:89:fe:5e:0f:2f:4e:3c:8c:80:0e:84:6e:98:52:30:
a7:7b:da:28:7e:75:26:6c:0c:76:db:48:0a:fe:a7:27:32:e0:
a1:25:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:54:38 2026 by rpki-client