Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: diFvDwQWgtvDRx3EQwh87DXt9Ug8LjJONfVOilY5Dho=
Subject key identifier: A7:ED:5B:DE:8D:E5:F2:88:49:38:43:2E:95:0F:6B:18:0E:85:53:CE
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 01A0D727F2B5B0B6B5C4B81A6E2193F10E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 1029
Signing time: Fri 25 Sep 2026 06:01:54 +0000
Manifest this update: Fri 25 Sep 2026 06:01:54 +0000
Manifest next update: Sat 26 Sep 2026 06:01:54 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: BEcDNAxTazwwKu7/Q3zrzq0t8n6WQ5U6bYJNrsCLUwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:f2:b5:b0:b6:b5:c4:b8:1a:6e:21:93:f1:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Sep 25 06:01:54 2026 GMT
Not After : Sep 26 06:01:54 2026 GMT
Subject: CN=a7ed5bde8de5f2884938432e950f6b180e8553ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:67:90:9c:fc:97:fd:ea:c0:ff:41:ac:af:
f6:64:cd:42:f1:a8:04:84:b1:f9:6b:86:98:ef:28:
ef:fa:8c:a4:40:ec:20:49:3e:06:9e:59:f7:d9:b4:
59:13:46:25:30:f9:0b:65:8b:ec:a6:1a:a6:06:ee:
10:76:2c:92:6a:30:a4:8a:7b:44:51:66:4c:6e:df:
3c:f8:d2:51:db:e5:8f:3d:af:77:f5:7b:49:37:8d:
33:0d:64:89:da:71:8b:2c:6d:7d:0d:73:38:73:aa:
19:56:98:bb:4e:9e:69:1c:c7:80:9d:f2:b8:ab:30:
a2:2c:4b:30:b0:5e:f1:bc:7c:f1:9d:1f:7a:11:29:
8d:7a:e4:e1:ee:e8:d3:47:c6:6d:95:2f:45:cf:c5:
fd:c5:30:eb:31:84:a7:0c:84:b9:60:5f:f6:90:2c:
63:c1:aa:90:06:c4:1b:f5:92:5c:45:11:7f:6f:a7:
94:9b:bd:28:9a:73:22:33:f1:e8:88:fe:5d:8e:d6:
e2:36:9c:78:73:a9:f4:3d:95:01:e7:62:e7:73:4c:
f1:00:20:ed:73:06:bf:29:47:6d:3e:96:37:66:39:
0d:0b:9c:5b:1b:00:86:ac:dc:68:ee:26:ad:af:f7:
d5:e4:56:6b:43:49:9e:82:ec:b4:58:3e:42:f8:8a:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:5B:DE:8D:E5:F2:88:49:38:43:2E:95:0F:6B:18:0E:85:53:CE
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8a:01:a5:d2:23:71:17:d0:90:fd:52:f4:2e:96:83:69:95:
c1:79:9b:6e:55:69:50:09:1a:34:6d:55:c4:3d:49:40:93:c0:
6f:d6:b7:fb:f7:82:f3:5e:45:07:cd:f3:40:b6:31:d3:28:87:
e0:33:7b:ff:b6:cc:36:81:71:d5:d6:cc:52:31:27:e1:d3:97:
22:14:56:41:13:92:2b:e3:36:69:bc:86:50:df:8d:66:52:b4:
ce:0f:6c:c9:77:5e:ff:52:a1:8b:d8:6e:7e:2d:e4:59:43:ae:
89:16:7a:61:89:af:82:2f:b4:0a:24:bd:a4:9e:09:a2:0a:38:
0b:15:8a:c6:79:f8:c9:7b:e2:55:ed:68:80:be:e8:42:75:c9:
5f:c3:07:3c:d9:8b:5e:64:df:72:b8:36:09:4b:d2:07:e4:47:
3e:4e:25:53:44:bd:dc:65:03:95:52:31:1c:95:73:b8:dd:04:
a8:7d:ba:11:8d:7e:7c:e4:7a:50:ac:9f:79:fe:41:de:3b:7f:
62:71:fa:9a:5e:e0:9f:c9:94:72:57:28:6c:f6:a7:7f:a6:65:
84:7d:bd:f4:85:cc:5e:fe:76:69:2d:29:14:40:51:ae:51:6d:
2d:d9:01:1d:6e:11:ea:da:90:aa:3f:86:79:42:fd:d3:4c:42:
a8:d6:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:58 2026 by rpki-client