Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: Z7EQvEvrgecNSHTRKTIr+pwdFr4K3ijPFc8EDmNfMIo=
Subject key identifier: 97:8C:0A:58:D0:67:6F:98:92:5B:DC:DF:C1:C4:36:E2:65:89:16:44
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 01A17F62515B8EA2E8B5BCCA9CCB6CA9C071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0B72
Signing time: Tue 27 Oct 2026 22:01:52 +0000
Manifest this update: Tue 27 Oct 2026 22:01:52 +0000
Manifest next update: Wed 28 Oct 2026 22:01:52 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: IF1VtWp7IKszOl6mBVlWNOOmHi7+2Lef8CLoIdgQbsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:51:5b:8e:a2:e8:b5:bc:ca:9c:cb:6c:a9:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Oct 27 22:01:52 2026 GMT
Not After : Oct 28 22:01:52 2026 GMT
Subject: CN=978c0a58d0676f98925bdcdfc1c436e265891644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:f5:fd:75:97:47:70:71:55:5f:2f:ab:e2:
eb:ec:43:97:be:ad:01:88:03:f2:65:72:90:4d:d6:
0e:33:af:97:99:8e:7c:a3:0e:5d:6a:3f:d0:e6:d5:
b0:83:88:5e:dd:d6:36:13:f5:7f:df:54:2b:04:08:
d7:16:da:25:d3:fe:60:e1:4a:03:2d:06:c8:0b:d6:
d0:bf:ea:80:1b:51:6d:76:33:b5:e1:18:f8:d7:7e:
8e:7b:60:b6:37:66:0d:7b:4b:a8:4e:8e:67:16:e6:
b5:01:49:3e:16:b1:04:9c:f5:95:8a:ec:b6:fa:93:
96:59:b5:e0:99:fa:d4:1c:78:f3:d4:78:50:4d:0b:
46:82:fd:64:fc:63:e7:22:8f:b4:60:d1:9c:d7:51:
31:ed:29:c5:7b:6b:f9:2d:57:9d:af:77:9e:5f:78:
f2:53:86:b6:ac:c2:d7:f5:e7:dd:5f:8d:91:70:c4:
df:3d:94:9d:54:b8:01:c5:f9:00:76:3e:8b:11:78:
50:4f:db:ff:7c:e4:64:9c:82:33:75:cb:25:ab:94:
9a:3f:f4:ed:0e:e2:ec:bc:28:51:5d:68:1b:5d:5c:
7c:39:5c:d4:c5:0a:25:a7:98:9a:46:b2:eb:3b:d5:
dd:12:53:1a:1c:a8:3f:88:56:f0:ef:a5:c6:fb:5b:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:0A:58:D0:67:6F:98:92:5B:DC:DF:C1:C4:36:E2:65:89:16:44
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:fb:60:ee:0d:d5:d0:87:96:1e:eb:23:17:29:97:eb:a2:
cb:42:c7:94:e4:d8:bd:7f:3e:ed:43:bc:3a:3f:fa:7e:da:f7:
d8:1c:72:7f:c1:e4:41:7c:f3:d7:f7:c5:d4:25:88:29:e7:6f:
fc:ef:fc:c4:29:2f:34:51:91:48:f0:2e:02:7b:37:ff:2c:2e:
cd:de:8a:d1:ec:2e:19:84:74:cf:6a:e1:ac:24:02:f3:71:18:
e9:78:08:61:2f:03:8a:dc:66:48:54:79:79:5d:48:ad:53:0d:
da:32:2d:d4:84:86:0e:ab:cd:e6:ff:8c:54:3a:b7:d8:f3:f2:
30:b9:78:5f:2c:54:02:01:1e:70:cb:0b:fb:26:1b:a0:9b:98:
13:99:ee:14:93:af:3d:f7:a2:ad:5a:2a:7d:a6:84:39:18:54:
7a:5f:e0:95:0e:e0:80:b2:46:16:46:ca:4f:b8:8b:59:58:a4:
2d:c1:43:6d:b5:9a:8d:29:f2:c4:4f:ba:05:df:0d:dc:3a:d0:
68:1a:37:57:e3:d5:5d:02:06:f6:0a:78:b4:a7:e5:18:60:d8:
68:66:c8:24:d3:94:3e:d7:c3:0b:01:bf:2f:e2:3b:d1:54:7d:
20:34:22:ea:c5:5e:ef:a8:5f:23:46:2c:e8:f8:ce:bb:17:49:
fe:f4:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:27 2026 by rpki-client