Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: fcEAitSZ/eMXAlVGzjqabr2mz4aKQQ9D2hMFZ+ZwmOo=
Subject key identifier: 8D:49:9A:5D:17:CC:A6:56:B7:5D:9F:57:9C:DB:4E:F9:0D:52:6C:61
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 01A08DFBCC2496005A8F0920932074CC9CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 1731
Signing time: Fri 11 Sep 2026 01:01:24 +0000
Manifest this update: Fri 11 Sep 2026 01:01:24 +0000
Manifest next update: Sat 12 Sep 2026 01:01:24 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 9N3T3HJlGs+xkDX0pZvCQ2dmLGpDL2Iy0sFROChj8cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:cc:24:96:00:5a:8f:09:20:93:20:74:cc:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Sep 11 01:01:24 2026 GMT
Not After : Sep 12 01:01:24 2026 GMT
Subject: CN=8d499a5d17cca656b75d9f579cdb4ef90d526c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:1b:ae:fb:65:49:9a:15:59:be:ae:86:93:
b0:57:1c:08:63:5e:8e:69:b7:ff:c3:11:3f:21:da:
3c:ef:f8:dd:02:e4:8e:68:85:c4:c8:c4:b2:5b:d0:
a7:d5:1f:5f:8e:b2:4a:a8:4f:49:c3:3c:ea:79:9e:
21:2a:59:4b:56:7f:34:57:ae:3a:28:3e:1c:87:dd:
4f:56:d3:79:ae:f3:95:78:19:a1:a2:ac:cc:35:42:
2a:7f:8b:cc:de:d7:ec:8d:47:56:82:9e:35:c0:1f:
f3:0c:a3:49:f7:81:4e:34:88:a8:fb:2d:75:ba:c0:
38:9c:a9:42:53:f9:12:a1:36:2c:23:88:96:58:bc:
ee:89:75:71:2b:51:87:c8:65:b3:de:b6:12:f8:e8:
0d:53:29:be:78:29:b5:75:98:c6:34:20:39:07:0b:
d0:03:24:25:4a:e6:d4:44:2c:27:fc:3d:12:0c:d6:
93:00:6f:ed:7f:af:ea:27:24:ef:76:f1:b7:fe:fb:
b4:ef:de:46:3a:92:b6:5a:a2:8b:89:50:72:f3:e1:
03:63:2d:0a:fa:96:23:38:31:9d:4a:15:7b:1d:d2:
25:e7:26:5a:75:8a:17:ca:f8:82:ec:93:28:78:ef:
f6:55:0b:28:87:2f:4d:9e:52:0c:d7:fb:56:e5:af:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:9A:5D:17:CC:A6:56:B7:5D:9F:57:9C:DB:4E:F9:0D:52:6C:61
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:b3:41:f6:a8:d0:5c:6d:08:fd:a4:13:25:3f:62:f1:17:
69:13:59:0e:3c:b0:0a:02:1a:df:05:e1:f9:35:2c:4b:0b:32:
f2:5d:52:1c:43:c9:63:95:f7:b7:48:65:f2:16:96:9c:40:21:
77:14:7d:12:06:b1:9e:5f:75:7e:54:5f:66:59:0b:b1:de:c1:
82:5b:9b:23:9d:0b:ac:6b:06:06:2c:63:68:48:f8:be:e0:a4:
f6:34:39:66:fa:fa:61:2e:8f:fc:24:60:56:af:ff:b0:2a:95:
86:63:45:26:8e:ba:a9:32:f3:fd:ea:15:02:95:8c:57:1f:41:
41:ef:d1:2e:7f:36:d2:21:48:a8:62:67:67:7d:f9:71:85:a3:
d6:89:da:3d:4f:ff:91:1a:9b:c9:a2:d8:bb:f4:63:bd:95:5d:
d6:19:7c:32:dc:c5:14:4c:21:55:e4:08:50:d6:bb:4e:45:5c:
ba:20:4b:0d:50:e9:85:ac:1b:4e:0b:b0:dc:96:3e:9e:b1:78:
58:7b:50:84:0d:cd:b4:b5:b3:4e:a3:e4:74:fd:25:32:f7:d9:
69:80:f3:77:d2:0c:8b:54:2d:bf:a2:32:03:86:ba:2f:be:ad:
31:9a:fb:a8:19:85:a4:17:98:8f:85:66:fa:9c:ad:78:d7:21:
4b:0f:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:46 2026 by rpki-client