Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: iBxysnBsfF1+cbUZksi4YV06NlX5K3jW1DjBmrMyUDs=
Subject key identifier: 15:49:F0:25:A9:1C:8F:F1:F2:AF:E1:7D:D4:39:9E:91:30:47:90:FF
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 01A08DFBB307C6242E1F330BAF2850DCEE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0AF5
Signing time: Fri 11 Sep 2026 01:01:17 +0000
Manifest this update: Fri 11 Sep 2026 01:01:17 +0000
Manifest next update: Sat 12 Sep 2026 01:01:17 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: TG1/C64JIqxnQgui246b5JKq9vZT6lN9oFZ7bxp2E/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:b3:07:c6:24:2e:1f:33:0b:af:28:50:dc:ee:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Sep 11 01:01:17 2026 GMT
Not After : Sep 12 01:01:17 2026 GMT
Subject: CN=1549f025a91c8ff1f2afe17dd4399e91304790ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:f8:37:2d:ea:1f:23:40:5d:30:a4:7e:b3:
e2:99:85:9c:26:f9:8e:4b:cc:c8:a0:25:ad:80:de:
a6:28:9c:a1:b0:49:1b:e0:c3:ba:be:7d:ba:03:17:
f0:6a:e2:ee:ee:63:20:4b:18:f6:15:65:96:c9:ca:
39:63:05:8e:f0:fc:0f:c6:d1:9f:b2:a3:cc:f5:02:
00:00:5c:5a:db:00:22:e8:b3:95:b4:21:34:49:21:
bf:f4:a4:d5:a1:7d:05:71:eb:92:92:f9:ed:3e:13:
67:5e:cd:3b:2c:da:af:0b:4a:89:66:e7:f6:5a:b0:
e8:fd:66:08:6e:70:10:03:c1:59:dc:ca:d6:2f:af:
28:1d:20:74:ed:1f:39:6a:54:44:93:3b:a7:de:b4:
f1:8a:52:c2:e5:84:ee:e0:29:fd:f4:e9:7a:d9:c7:
b7:c3:55:54:b7:f8:03:f0:2c:92:47:63:1a:6f:63:
11:ca:9b:e7:87:44:ae:35:3c:49:ba:91:06:59:8f:
c1:c5:e7:63:3d:b1:63:28:14:a5:30:73:ec:be:50:
57:eb:41:b1:be:7a:f7:cb:6b:ef:00:a1:ad:c2:8e:
7c:e6:a4:dc:40:d5:e2:a0:54:86:bf:29:b9:53:82:
d5:cd:57:57:c1:49:2d:e4:f1:ed:4b:72:a4:7a:b8:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:F0:25:A9:1C:8F:F1:F2:AF:E1:7D:D4:39:9E:91:30:47:90:FF
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ef:87:ff:c4:d9:f5:93:15:f6:57:af:01:18:bd:8f:83:98:
9b:98:5b:f7:83:04:9c:96:38:6d:71:f4:ce:30:9e:4a:82:6b:
bb:90:24:e3:60:21:c2:a8:ea:30:4b:12:36:a2:e3:c9:d0:cc:
22:2f:38:09:4c:1e:1a:23:99:fd:5e:2c:60:42:cf:82:d0:c1:
77:42:75:4b:74:29:b7:9e:db:ca:1f:9c:e8:ce:37:84:1e:58:
c0:a6:ff:11:bc:c0:5a:e2:9e:53:5e:00:29:7e:86:d6:01:89:
2c:e5:e4:8e:5b:0e:14:72:a7:a0:9f:0e:63:01:fa:62:02:2f:
fa:40:8d:86:2f:ac:05:7c:14:cb:a5:38:50:3f:bf:b1:7a:fc:
03:88:4a:73:03:d0:40:af:12:74:b7:a4:84:6f:43:23:61:91:
6a:42:3c:a9:f5:48:f7:f5:3e:2a:0c:6e:76:e3:ff:a9:49:81:
13:9c:c0:0c:ff:dc:6e:87:26:ea:10:b9:c1:75:3a:d7:15:72:
3c:08:8c:58:28:5b:c4:14:69:c7:5b:e5:dc:a8:c9:79:69:61:
02:8f:6b:70:27:d1:09:5c:98:ee:5c:26:c9:c8:d9:1d:e1:03:
dd:87:e9:49:5f:e8:91:7c:f3:35:0a:e3:5e:de:c2:79:52:1f:
01:7b:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:44 2026 by rpki-client