Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: 0aMjQYO8KQFA7oYTCiDHofneBZL+B/1We2t0qtU4D98=
Subject key identifier: 3C:43:DD:69:A3:33:2D:48:BB:F3:54:DD:B2:7E:B0:F0:06:A1:78:1B
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 01A0EB8AB16AEBCAFC8F00FAC14DEB6C6F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 0205
Signing time: Tue 29 Sep 2026 05:02:10 +0000
Manifest this update: Tue 29 Sep 2026 05:02:10 +0000
Manifest next update: Wed 30 Sep 2026 05:02:10 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: yBJ+OvBNr7lkxg8v/1QzlE8UM7yQOrVHxL5ADZi+mp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:b1:6a:eb:ca:fc:8f:00:fa:c1:4d:eb:6c:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Sep 29 05:02:10 2026 GMT
Not After : Sep 30 05:02:10 2026 GMT
Subject: CN=3c43dd69a3332d48bbf354ddb27eb0f006a1781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:cf:5e:98:da:2f:ec:5e:15:b1:ed:ef:cc:
9e:23:b0:f2:d2:9e:be:c2:8c:0a:9c:87:cf:24:94:
6f:ca:6b:64:fe:1b:52:a6:7c:3b:68:61:83:0b:5c:
3c:0f:e5:1c:32:bc:4e:28:2b:52:88:6a:3f:29:8f:
41:cb:43:99:7a:36:bb:86:3b:8f:a2:a1:cc:73:9d:
c0:f9:53:1a:d8:03:93:fb:13:21:61:33:73:aa:15:
fa:06:80:e7:27:a4:23:9d:7b:7c:90:5b:aa:69:94:
6e:7a:2d:69:06:de:a4:da:3d:e3:2c:ba:67:e8:58:
c8:0e:5b:8e:3f:f2:d6:7a:4d:b4:32:3a:a5:20:ef:
f4:9e:4b:dd:c7:1c:36:bb:ab:91:76:fd:c1:4d:a8:
3c:bd:d9:28:44:78:13:8f:29:92:76:da:55:8f:34:
2d:1e:42:63:1d:0e:20:03:7e:2a:fb:81:29:ed:96:
9e:39:93:65:5f:29:6b:28:7e:a7:9d:a3:a0:4c:4e:
5b:6b:90:dd:8f:e2:55:80:43:7b:d5:2c:f5:5d:ae:
f5:6b:2b:57:bb:fb:9b:c4:af:50:2f:a8:91:92:6a:
a3:75:62:f6:25:57:12:7c:24:a2:2d:5e:62:24:c4:
4e:e6:0d:ae:02:a9:e2:4f:49:78:30:fe:78:f9:2e:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:DD:69:A3:33:2D:48:BB:F3:54:DD:B2:7E:B0:F0:06:A1:78:1B
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:8a:5d:0c:68:aa:09:48:fe:ec:e2:cd:ba:ac:a3:49:e8:
0b:d7:c7:b7:ec:a0:84:04:dd:0f:ec:16:22:14:f0:76:d0:eb:
37:91:ef:89:de:2d:82:bc:0c:71:ae:9b:96:94:34:e6:70:07:
f8:cc:b6:d2:34:1e:16:16:fe:1b:82:67:d0:11:5d:12:2e:41:
87:2f:f8:5d:41:1c:27:e1:dc:f5:af:5d:a8:a1:af:7c:12:ab:
6d:b3:0f:56:2e:bb:43:cd:ba:d3:d6:46:06:3f:0a:dd:cd:a4:
8f:f8:0f:a7:66:4e:80:d8:93:f5:aa:10:a9:f4:20:b5:bf:7d:
fd:a9:d1:3b:c5:8f:8c:cd:3e:85:bd:30:f4:fe:65:15:bd:f3:
20:ce:3a:9b:49:86:ac:e1:67:e3:7e:e1:d1:38:ca:3d:f8:7c:
4c:97:12:03:11:d5:46:95:96:41:9b:60:09:fc:a0:d0:61:ef:
90:f3:ea:6b:6d:33:a1:e4:49:ed:1c:67:24:ad:01:f1:da:fc:
75:1b:ff:59:76:d2:72:0a:a2:98:1b:ea:fc:50:3a:2b:51:cb:
66:51:8a:62:03:0a:a2:6d:2c:80:86:bb:ef:13:b3:83:9e:8a:
38:8e:a2:cd:40:8a:77:d8:ec:85:9d:8e:d9:d6:a8:6d:0d:52:
ac:a2:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:46 2026 by rpki-client