Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File: yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier: TGz8CwWwrq+5xqttZIZuEsWKhN8ItL1LcDrGEdIDE/g=
Subject key identifier: 71:8B:A6:06:44:54:AB:8B:9A:83:43:A4:9A:CA:1F:9D:24:98:25:3C
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer: /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial: 01A0D83B5E2F16529751DC1C30C25365FADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number: 016D
Signing time: Fri 25 Sep 2026 11:02:44 +0000
Manifest this update: Fri 25 Sep 2026 11:02:44 +0000
Manifest next update: Sat 26 Sep 2026 11:02:44 +0000
Files and hashes: 1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: yWDjhX7ByDQZt0Ol1MqFfxyCHW0ay9kAbBYRi/rjqmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:5e:2f:16:52:97:51:dc:1c:30:c2:53:65:fa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Validity
Not Before: Sep 25 11:02:44 2026 GMT
Not After : Sep 26 11:02:44 2026 GMT
Subject: CN=718ba6064454ab8b9a8343a49aca1f9d2498253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:bf:fe:a6:e9:4e:f6:d5:ed:13:e0:2c:de:
1f:96:6f:51:51:78:85:81:9d:05:7d:e0:4d:94:ad:
ee:bf:46:1f:23:47:5f:77:03:81:4f:ca:49:0f:9c:
ff:0f:94:84:4d:68:8f:8f:bb:63:90:74:b5:c5:d3:
4e:fb:5c:d0:75:d2:f3:28:ec:dd:0a:18:4b:50:58:
69:a6:b9:79:eb:b0:a1:1e:c6:c4:6d:9d:9f:c0:9d:
70:05:a9:40:95:09:18:e8:73:df:1a:31:2a:6b:b6:
56:43:ec:6d:11:e4:95:fc:4f:3d:e4:0d:6e:a3:ba:
24:82:92:21:cd:45:c6:81:44:74:4f:4e:c4:e6:eb:
98:60:8b:a4:80:c8:5d:21:a9:9a:6a:84:c4:3a:ad:
59:60:c1:3c:7b:4e:3a:73:61:9c:65:5c:00:39:9f:
9f:11:93:e3:4f:15:9a:b4:6d:8b:be:2f:9e:8d:89:
ad:0e:17:40:75:f6:a4:d0:0d:f8:10:90:aa:a3:f0:
bc:e9:a8:5c:e9:8f:42:84:0b:d6:39:0d:d8:d8:0e:
03:25:78:24:e3:f1:84:ff:bd:1b:ec:b8:37:48:ed:
cc:ae:1a:5d:0e:98:6b:60:4a:7b:18:f5:6a:ab:6b:
72:6b:82:46:f7:37:5a:70:15:4a:80:e5:36:20:a3:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:A6:06:44:54:AB:8B:9A:83:43:A4:9A:CA:1F:9D:24:98:25:3C
X509v3 Authority Key Identifier:
keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:65:4b:e7:6b:8f:85:7a:df:3d:36:5d:f2:4c:c1:56:0e:
37:ec:fc:49:fa:04:6c:a6:5e:37:18:a5:19:59:98:75:ef:9a:
d6:fc:80:99:10:94:27:09:05:4e:79:ab:6a:4a:9d:56:5c:51:
3b:20:d4:cb:c4:37:f6:f8:45:09:86:22:e7:6b:26:01:b2:eb:
a7:4b:9c:e4:f4:27:cb:74:42:46:07:94:a2:4a:d9:75:9a:5d:
7f:00:b2:4e:67:65:5d:2a:d0:fc:e3:da:4c:df:00:ab:bb:fe:
bd:ea:3a:02:3b:7c:3d:11:4e:3b:80:75:a3:58:5f:00:14:ec:
f6:32:3c:b3:ae:bb:5e:be:95:8b:22:94:21:12:dc:f8:ca:dc:
8c:de:88:5a:81:f6:c6:38:ea:f9:af:a5:af:d9:86:bf:0d:94:
b1:fe:41:5f:82:25:71:1b:63:9d:a3:5e:4b:6f:d1:de:a6:54:
a3:a8:42:f5:7b:e3:d0:1a:61:f8:de:b2:25:f8:93:11:a4:ec:
e4:9b:e1:dd:6d:b5:b6:fc:a2:10:82:2b:cf:15:12:57:f2:1d:
45:80:7f:81:40:2c:98:27:bd:c3:02:08:05:f2:e2:18:44:a9:
6b:f3:cc:18:7a:f9:8c:b4:08:b8:b5:c4:c2:bd:0f:df:b1:e7:
0d:47:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:44:36 2026 by rpki-client