Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: 2X1KlETFHPiSIxjktnzQHtBT24N6oipVpDx0gTtwtac=
Subject key identifier: A0:FC:A0:41:1F:4B:AF:5A:C0:50:F8:B8:FC:52:6E:E7:D5:D4:1F:C1
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01A17C5FEE82EBD2C6577920F01B7375DAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 08:00:24 +0000
Manifest this update: Tue 27 Oct 2026 08:00:24 +0000
Manifest next update: Wed 28 Oct 2026 08:00:24 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: rv1tLAtoqi67TiuZCB1nQwZrDqjasCkMEG64os/cz7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:ee:82:eb:d2:c6:57:79:20:f0:1b:73:75:da:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Oct 27 08:00:24 2026 GMT
Not After : Oct 28 08:00:24 2026 GMT
Subject: CN=a0fca0411f4baf5ac050f8b8fc526ee7d5d41fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:2f:8f:ff:fd:3b:dd:42:b7:3b:d1:3a:59:
95:3f:09:e4:36:c6:47:44:16:87:79:88:58:98:28:
f1:e7:25:2e:0e:68:0b:3f:88:5c:cb:97:7d:1e:96:
f1:71:60:81:f0:4e:45:86:07:53:b0:e0:8b:2c:55:
23:29:b5:af:69:9f:03:48:6d:7a:9f:42:34:b9:f6:
c0:98:9a:e1:0c:47:97:0e:0d:87:04:b5:4f:09:88:
c0:43:0a:92:a6:7f:30:83:6d:92:ed:45:d2:fb:ec:
6d:ec:fb:7c:a8:49:f1:14:d0:f5:3e:f8:6a:4c:41:
d6:c3:93:08:9f:67:19:e3:8a:b7:67:7d:e0:33:68:
30:5d:d2:ab:03:da:f4:39:8c:80:07:e2:37:db:62:
af:8b:24:2f:29:e5:19:81:4a:ac:3f:78:db:33:d5:
7a:5b:4f:be:24:b6:ca:2a:4a:d7:80:51:b9:4e:79:
7d:c0:c5:39:88:b5:69:9c:0f:2f:ec:52:b3:06:70:
72:65:3b:04:85:c7:46:16:ed:4e:17:53:c6:25:46:
c6:6a:d1:eb:f6:0e:50:c9:5c:3a:2b:ef:f4:36:d4:
14:d3:cc:81:c9:b3:cc:18:dd:81:f5:30:35:8e:10:
4c:38:76:91:eb:a5:40:36:22:95:72:67:82:b1:b9:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:A0:41:1F:4B:AF:5A:C0:50:F8:B8:FC:52:6E:E7:D5:D4:1F:C1
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ba:db:44:3c:9c:f1:c9:1f:13:26:1b:6b:5a:8b:ed:39:47:
1a:07:c3:eb:58:86:e5:ce:8a:8e:9f:90:1b:3c:c4:a1:18:f2:
d4:29:07:4e:86:88:dd:64:1e:9d:0d:95:5e:be:f5:e0:4e:9e:
df:38:06:c7:ce:77:3d:66:78:63:f5:49:55:b1:6a:d5:f4:fa:
0b:d3:21:b0:01:7e:cd:5e:45:13:2d:a5:83:3c:7e:82:19:40:
d2:8b:81:11:bc:d3:ac:37:bc:fd:c2:9d:26:3f:f3:18:ac:a0:
db:85:be:25:76:33:61:50:c6:ac:bb:6f:62:26:d7:9c:ba:ce:
0a:b2:eb:d0:7f:45:dd:27:21:7d:7a:a1:cb:ab:98:03:b0:8d:
4d:2a:41:0c:ae:bf:98:7c:65:8d:25:d9:6f:8a:60:1f:34:bf:
93:ae:e1:32:3a:42:b2:fe:f1:d1:ca:6f:da:ed:f4:d4:b1:f8:
a2:b6:04:14:47:ab:e2:5b:0e:cc:f3:d5:8b:12:48:dc:74:da:
bf:08:45:90:b6:c3:02:d4:cd:b7:b0:7e:17:7f:1b:f8:a9:67:
49:d4:e8:9d:3f:da:5f:4d:6f:78:f4:7b:fa:ed:e2:a2:21:37:
72:bd:c4:1c:00:21:3a:14:5b:aa:66:e1:22:fc:5a:ac:63:ff:
db:46:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:27:35 2026 by rpki-client