Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File: yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier: 7fogmt2eYn7nhDaMTzwTOdGzXUNodKzP5KvabyjRUQ4=
Subject key identifier: 0C:35:B4:9A:4F:B7:8D:9E:66:B1:F0:64:24:BB:C3:01:CC:85:89:44
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 01A128E83712DE3F84834A3128C39342F588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 03:01:09 +0000
Manifest this update: Sun 11 Oct 2026 03:01:09 +0000
Manifest next update: Mon 12 Oct 2026 03:01:09 +0000
Files and hashes: 1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: maIJLc6M9YhzWKMCQA+VoUZlM8v8NfN5JlZXHUUlJIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:37:12:de:3f:84:83:4a:31:28:c3:93:42:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Oct 11 03:01:09 2026 GMT
Not After : Oct 12 03:01:09 2026 GMT
Subject: CN=0c35b49a4fb78d9e66b1f06424bbc301cc858944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:6e:f9:17:4b:a8:7e:cf:3f:11:87:4d:2b:
49:47:7b:e3:13:92:3e:8f:6b:4b:c8:78:c4:f1:52:
6d:93:cd:f5:70:1a:02:97:32:aa:e0:6c:67:b2:ca:
d2:60:a3:41:e6:67:e3:1b:6d:89:24:4f:6a:d0:19:
bc:c6:64:d9:58:2a:e0:6a:bf:07:02:ac:87:16:ce:
8a:43:86:37:26:b4:cf:a6:d0:38:d5:80:88:d6:e1:
36:13:9e:91:66:3c:5f:a8:0a:f9:fb:bc:8c:a7:ad:
cd:7a:1d:0c:63:2c:e1:33:80:86:f9:5f:f5:1b:30:
2d:47:d7:41:e4:98:df:13:5d:06:0c:9d:a9:2c:5d:
e2:54:09:c3:56:b6:0f:b2:c4:af:ab:ac:be:bf:d1:
d8:f8:04:08:7e:d9:75:ec:8d:1f:ca:50:10:48:8a:
05:c2:e4:bc:b5:5f:b7:c7:ad:c7:df:04:c1:d5:3b:
4f:75:64:89:07:3c:b7:7e:28:ea:40:74:21:fb:ce:
91:a6:a9:2a:36:3e:b5:db:5b:21:39:d4:e1:af:f8:
50:cb:09:ed:04:79:3f:87:1c:f1:46:30:48:ed:15:
b1:4f:38:4b:74:2e:f5:dc:cc:33:15:d9:d2:df:88:
92:84:57:2e:ab:c3:c3:ca:32:fb:19:b6:66:79:42:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:B4:9A:4F:B7:8D:9E:66:B1:F0:64:24:BB:C3:01:CC:85:89:44
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:55:94:75:00:28:9f:ba:48:4f:6b:c6:c1:5e:3e:53:fa:73:
6b:b3:3e:06:c9:3b:2e:5e:d1:49:90:c2:68:ee:4b:a6:13:02:
c5:ac:0a:dd:ac:e9:d2:1c:93:2e:be:8e:a3:b0:96:42:ba:8b:
e9:85:df:02:e0:00:10:a1:cc:9e:99:af:d0:0e:bb:50:a0:ff:
2f:43:55:c2:99:d3:ba:8c:4d:57:59:cc:89:dc:b9:8c:a2:87:
dc:db:7d:82:7d:ce:f0:fb:0a:6e:43:0d:4b:98:db:1e:71:d6:
9f:82:dc:d0:3e:d8:0e:99:69:04:ce:53:e6:a5:cf:12:75:73:
f8:b3:bd:38:8e:5d:c6:36:08:32:80:89:24:04:61:44:17:da:
da:9c:3c:2d:f5:af:2d:0e:8f:c8:1a:f8:d8:16:31:29:76:39:
d3:83:61:63:04:0a:77:58:bd:c6:cb:de:50:d3:fa:a8:bf:a8:
93:1a:5a:1c:c2:e9:e2:28:9a:6f:06:ac:bd:57:e3:c7:00:94:
d9:e2:59:b9:d3:04:dc:56:14:d2:a8:9a:1d:5b:0e:37:fc:e7:
d8:8d:ed:84:18:d0:d3:b5:83:63:55:53:4f:78:85:1c:a9:5f:
ab:2c:37:4a:45:43:6e:38:68:77:ea:e1:1b:ed:86:1e:8b:25:
db:26:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:30:41 2026 by rpki-client