Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: wZljp4hcdC4Z3IxjBs4GXYPAuUukv6qCKrLs7oZS4EM=
Subject key identifier: 7A:4C:F7:11:3E:4F:FF:E6:DE:9E:12:76:4F:3E:C2:A6:FD:CF:46:5C
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019DD0F609F26BDE3F3278AEEC3E253A24D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 098A
Signing time: Mon 27 Apr 2026 22:01:18 +0000
Manifest this update: Mon 27 Apr 2026 22:01:18 +0000
Manifest next update: Tue 28 Apr 2026 22:01:18 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: VbQ9h9NZ9Pm5rnzXbKYvKPymZ1LKWNdr+hZ3C9+shkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f6:09:f2:6b:de:3f:32:78:ae:ec:3e:25:3a:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Apr 27 22:01:18 2026 GMT
Not After : Apr 28 22:01:18 2026 GMT
Subject: CN=7a4cf7113e4fffe6de9e12764f3ec2a6fdcf465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:c6:b4:87:56:ce:16:00:32:76:ac:de:78:
5d:48:34:c4:be:49:bc:74:2e:51:a6:bb:f2:46:fb:
8d:84:49:7a:7f:9d:81:b0:0d:30:9a:6e:fb:78:65:
11:e3:31:e1:30:fb:12:4a:11:25:3c:b4:41:b2:88:
1c:99:2e:33:ba:63:2d:d7:80:43:42:ca:11:df:33:
c6:2d:ae:c6:af:ba:8d:c5:06:1e:7d:bd:39:c0:17:
8f:35:ef:95:50:f0:ed:a3:52:39:8b:fd:8b:67:44:
83:8b:7d:7b:ed:87:f8:59:6e:e4:73:4c:21:a7:6a:
55:5b:fb:da:36:8e:24:24:ee:af:bf:24:1f:b9:0e:
2e:14:de:3b:26:90:82:74:84:a4:a7:40:44:19:03:
26:66:22:da:b4:4b:dd:be:de:9b:5e:6d:98:6e:02:
cb:3d:bf:89:8c:2e:4f:52:98:3d:bd:62:ed:4b:e3:
34:26:ff:77:84:57:8a:6b:60:47:09:0b:d7:08:ef:
9d:d0:fd:8c:02:ed:2e:56:72:6b:e1:7d:9d:d1:ac:
3b:96:38:28:42:fd:be:7b:a3:6e:a8:b0:74:38:c8:
e6:c7:a1:7c:d0:4b:ed:78:64:11:b0:3a:21:ef:dc:
6c:a1:40:0c:2c:0b:95:0c:94:b3:57:95:66:95:f5:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:F7:11:3E:4F:FF:E6:DE:9E:12:76:4F:3E:C2:A6:FD:CF:46:5C
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d4:c6:49:f3:49:84:89:8f:a3:29:3e:a1:c1:05:1c:2e:88:
e3:a4:2f:86:4f:4a:28:50:f9:f2:89:51:df:8c:53:18:26:4c:
8e:84:c3:a3:81:80:d1:67:90:40:27:11:b9:b2:c5:f8:06:16:
d1:2b:1c:48:33:cf:7c:f3:76:ab:ce:93:57:4d:24:bc:03:c1:
ff:8e:c6:7b:82:40:23:0d:7c:b3:79:31:6b:25:38:ec:67:cb:
3c:8c:78:36:83:4d:93:81:27:7b:72:d6:54:a5:b2:f1:df:95:
85:42:23:3a:94:c5:30:b2:73:84:8a:ef:d2:44:b9:24:c1:fa:
73:85:b3:76:eb:3f:73:23:d2:ca:23:ca:24:f9:36:ba:e3:a3:
57:65:5c:aa:00:b2:54:6c:9d:35:be:02:c3:e1:40:dc:4b:ac:
11:20:9d:df:72:be:76:97:74:f5:92:ab:c5:7a:e0:88:cb:4d:
e9:44:6d:de:98:4f:64:9e:e2:dc:2b:6f:ee:82:65:6b:3b:1a:
c3:88:90:a8:21:ae:0f:e8:ff:63:8b:da:68:28:d8:69:28:ef:
99:12:40:e0:24:6c:b2:ee:04:32:e4:e1:6a:fe:c9:ef:24:63:
32:b1:65:64:a2:61:21:e8:20:0f:43:a0:ff:08:84:5d:c2:12:
54:c9:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:02 2026 by rpki-client