Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: 8oMAUrnIFpqGzM33ZU4wZ5PfiIGr/GTpiuDt3SPF1XU=
Subject key identifier: 28:99:0A:09:A6:66:91:23:69:26:6B:EC:1A:D5:F9:63:70:63:C8:70
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01A08CE9033F96E4F017ABC19144D8AEE700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 20:01:15 +0000
Manifest this update: Thu 10 Sep 2026 20:01:15 +0000
Manifest next update: Fri 11 Sep 2026 20:01:15 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: AzQPoP2O+NZN7VBrph0Y8jt1JkUme57h+UX0buXiEOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:03:3f:96:e4:f0:17:ab:c1:91:44:d8:ae:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Sep 10 20:01:15 2026 GMT
Not After : Sep 11 20:01:15 2026 GMT
Subject: CN=28990a09a666912369266bec1ad5f9637063c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:59:13:8d:6f:a6:48:a9:b9:87:1d:d6:e4:
7b:fa:18:18:f4:8b:6f:fb:93:f5:a3:bc:b2:1f:eb:
27:9b:82:9f:d6:4e:d4:32:0a:03:40:b3:d6:9d:c8:
45:d4:7a:48:20:3d:f5:4d:cb:12:0b:21:8d:6f:e2:
60:2b:68:d5:0d:24:e4:6f:7d:cd:e9:e0:b4:1d:dd:
be:50:77:2a:06:42:00:a8:a1:d2:7e:6c:ba:0e:fb:
2e:62:47:41:82:8a:19:f9:eb:33:97:ea:48:91:8f:
4b:66:7e:23:ff:c1:d9:29:ea:11:63:e1:6a:fc:be:
1a:be:33:6e:39:74:eb:04:8f:7b:63:fe:26:93:f2:
53:07:90:a5:a3:6d:30:e0:6b:64:f3:b0:71:1c:03:
64:92:b1:d9:fc:f8:ae:9b:c7:3b:6a:e7:3c:38:d6:
43:37:03:d4:60:57:e0:02:f2:ca:88:12:16:2a:79:
5b:09:ec:93:0f:34:de:84:48:e7:cf:89:05:e8:bc:
65:7e:2e:b5:b2:89:26:3c:20:27:30:47:68:19:a5:
75:81:3c:11:53:96:83:a3:b1:ce:ab:ae:56:f0:ea:
09:ad:4e:71:16:e1:ed:9d:0c:02:ab:a9:09:91:a8:
30:e0:35:d0:24:a5:87:8b:33:fe:95:9c:5f:85:d2:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:0A:09:A6:66:91:23:69:26:6B:EC:1A:D5:F9:63:70:63:C8:70
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:75:04:28:57:32:7d:83:3d:dd:05:e0:db:76:ef:4b:eb:
cd:96:1c:83:f2:00:ab:fa:4a:5c:22:84:77:b7:3c:fd:47:39:
32:80:86:13:c0:8c:64:34:d7:f8:16:93:88:d5:8a:30:62:b2:
30:3a:f9:d7:50:44:7b:41:1c:d3:1f:5e:33:d6:44:40:30:6b:
cc:f3:aa:7a:1d:0f:04:1f:94:d3:03:c0:87:2e:fa:e2:e8:ae:
44:89:a4:74:d2:ea:f5:39:f5:0a:6f:85:10:de:3e:4e:9a:e1:
72:5b:0c:44:59:f2:54:66:ce:0d:0e:32:cd:cb:25:01:04:ba:
4c:f9:29:23:47:54:5f:bc:c3:c6:6f:1b:9d:b6:4b:8c:8d:fa:
29:5c:09:5a:08:40:af:ea:10:b4:1d:2e:23:ec:ba:df:30:cb:
43:6f:55:1a:97:3a:ec:7f:05:96:c1:02:0e:35:64:c5:b3:20:
ad:ce:b9:57:ff:bc:88:09:b5:a3:55:8f:bb:ae:e3:1c:ab:02:
e8:2a:bb:3e:d7:c6:75:a8:f7:c8:89:14:48:2b:e0:c2:64:01:
d9:6d:1f:b3:c5:d4:53:27:b2:f2:41:28:ed:12:4a:33:db:44:
df:77:84:91:34:1a:fd:62:3f:90:e5:7f:ba:c3:fc:2b:02:f4:
e4:ba:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:23 2026 by rpki-client