Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: ErxIhSMqehn8qGiIiw0zLIxx+waj/i9WG4uRk5pW4Pc=
Subject key identifier: 29:D7:9E:1F:E2:E6:DA:4D:CE:3D:3E:48:26:D9:70:6D:95:2F:5B:18
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01A0E0CF73D069E4C60C1A83CDD0FDB31BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 03:01:26 +0000
Manifest this update: Sun 27 Sep 2026 03:01:26 +0000
Manifest next update: Mon 28 Sep 2026 03:01:26 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: 4HKHlneyRKwpubzJjUtZ3+GGa0kO9baSIiTIigeSvpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:73:d0:69:e4:c6:0c:1a:83:cd:d0:fd:b3:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Sep 27 03:01:26 2026 GMT
Not After : Sep 28 03:01:26 2026 GMT
Subject: CN=29d79e1fe2e6da4dce3d3e4826d9706d952f5b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:0a:3a:b7:8c:3d:63:07:ed:cc:bc:8a:1e:
6f:39:4c:bc:98:68:ee:59:79:c8:7b:dd:7b:58:7a:
1f:ca:fc:9a:26:51:73:05:3c:11:24:c9:7c:f7:c9:
90:f1:76:d5:ac:64:35:bf:0f:f8:ea:3f:47:a0:eb:
44:2b:59:49:71:54:a6:be:0f:c8:86:b1:ed:0c:b6:
f2:7a:9a:f2:34:27:e8:c1:02:97:f3:cc:22:11:41:
5a:5f:01:77:ed:2b:47:a3:7c:6e:c6:46:01:71:02:
c1:f3:2e:61:1d:cb:c4:06:cc:e5:11:72:6c:72:c8:
34:0b:d5:f6:67:fa:74:f9:2c:1d:30:2c:79:1c:3f:
55:bd:c6:dd:36:cc:b0:38:ff:24:47:0a:59:48:9e:
9a:e3:3c:0c:62:df:94:cf:b5:2f:3f:e2:97:8d:a8:
fc:f7:c9:82:19:7d:67:bd:88:15:5d:a8:2c:9e:e5:
c8:8f:ac:66:45:85:e9:6e:9e:8e:ec:fb:01:96:3e:
b0:55:90:c7:c9:de:c3:fb:0b:e4:9f:7a:ea:45:8d:
90:94:af:37:70:0a:1b:51:2f:18:5e:0e:15:3e:80:
0c:32:e5:c6:2e:05:29:db:b9:21:61:dc:86:a5:26:
32:2a:15:1f:88:83:4a:05:32:ac:64:08:18:7b:b7:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:9E:1F:E2:E6:DA:4D:CE:3D:3E:48:26:D9:70:6D:95:2F:5B:18
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9d:c3:c2:ca:b4:9a:dd:de:ee:0a:84:78:91:46:6b:20:9f:
09:d5:46:b8:b1:78:da:34:f4:4e:d7:4e:f2:ef:43:62:fc:f2:
9b:62:f0:00:ae:c1:25:df:7a:b6:9c:26:d2:63:3c:c9:be:0e:
06:01:1a:53:12:0b:f3:dd:1e:7c:75:ab:ee:91:a2:55:ce:04:
11:a4:63:57:56:0f:8e:b9:82:5f:60:d0:d2:a5:ab:98:d7:81:
4c:7e:cf:0b:93:de:73:6c:8e:f4:5d:03:90:e8:dd:f4:78:e4:
7d:8d:d1:32:8f:4a:57:c0:d4:a1:16:63:d5:21:d1:12:f0:c7:
5d:57:5b:a7:6b:d8:5b:fa:e0:32:ce:0a:f1:de:e3:33:21:d2:
3c:9f:d1:51:a8:8c:b0:64:d5:b2:ca:91:20:ec:be:95:6f:56:
20:83:9c:45:cc:06:ef:c1:10:81:dc:df:83:44:c8:f4:11:95:
fd:da:60:cd:43:e6:f5:9e:fe:09:03:73:0d:86:d7:77:99:cc:
f9:79:5e:d6:c3:53:5e:67:0f:c5:39:bd:83:c9:84:6c:78:b0:
76:99:63:aa:92:26:fb:cc:99:74:e7:06:55:17:bc:ec:de:c8:
db:d7:39:ef:ef:87:92:84:70:54:48:c5:84:9e:b9:2f:01:d8:
25:70:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:15 2026 by rpki-client