Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
File: yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft (raw, json)
Hash identifier: 3Ku3CeaX0L/mZCp2lcSCqtjZ0qbpOk10Pgwvn2AfVdw=
Subject key identifier: 5D:22:DE:CC:94:6D:01:0B:B6:7B:38:43:9C:37:7A:CF:5B:7D:7B:17
Authority key identifier: C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
Certificate issuer: /CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Certificate serial: 01A0F41F6A0C786BAF45AD0D7FCB2D655410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
Manifest number: AE
Signing time: Wed 30 Sep 2026 21:01:34 +0000
Manifest this update: Wed 30 Sep 2026 21:01:34 +0000
Manifest next update: Thu 01 Oct 2026 21:01:34 +0000
Files and hashes: 1: 3Yg8ZI_M55yTnDX3fw66DFkuevk.roa (hash: 9HTIHR/0mEzqSqmXuRSbxyoZq8o5zsBm7Dh1wZjR4mc=)
2: yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl (hash: UyeV92mjq2ytphzcrjGAiJYMcDgbEE+IhRHvl1ONLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:6a:0c:78:6b:af:45:ad:0d:7f:cb:2d:65:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Validity
Not Before: Sep 30 21:01:34 2026 GMT
Not After : Oct 1 21:01:34 2026 GMT
Subject: CN=5d22decc946d010bb67b38439c377acf5b7d7b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:01:56:02:82:ca:6d:24:b5:f4:d4:90:65:
e9:af:ef:a9:c3:e0:52:98:21:1d:4e:60:aa:14:ff:
9e:ce:03:f4:e2:71:dc:ab:6b:3d:8b:c8:de:6d:61:
a2:bb:e6:63:1f:fa:d3:aa:c0:5f:8c:8a:97:4a:1d:
16:34:0a:d3:b8:fc:e5:c6:67:a3:25:43:b2:aa:fc:
38:7c:e8:ab:e3:10:51:aa:8e:e1:49:b0:34:6e:c2:
19:4e:bd:0d:de:0f:61:97:ce:28:b6:6e:d7:6e:bb:
5d:e3:f0:0e:10:6b:60:a1:c4:9a:f9:fc:55:fc:56:
14:ee:90:b5:e3:bd:3c:7b:74:e7:b4:a4:24:00:52:
c8:3a:de:52:6b:b7:36:b7:6b:1b:95:69:18:31:80:
ab:4b:08:94:33:11:5e:61:bb:d4:ff:8f:1e:ea:f8:
5f:48:09:82:68:58:2c:30:be:c8:99:91:9a:8b:cb:
62:da:5a:ed:3d:c7:0b:61:dc:19:96:90:07:2f:59:
64:ca:e6:ac:28:78:5a:c2:c2:69:2a:33:23:7f:78:
58:81:9b:37:e9:2c:7d:aa:2c:b5:e5:88:a7:aa:a2:
c6:eb:d1:db:d8:2b:d1:98:6f:b0:01:67:91:81:fc:
2e:68:d6:9d:ca:f2:3b:0d:e3:a0:36:43:0d:a5:81:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:DE:CC:94:6D:01:0B:B6:7B:38:43:9C:37:7A:CF:5B:7D:7B:17
X509v3 Authority Key Identifier:
keyid:C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e0:18:1e:e9:e1:e6:ab:ac:20:6b:2a:88:0b:84:7c:67:9c:
44:a1:22:be:7c:21:b0:da:42:29:2e:27:69:22:31:57:87:b1:
60:5a:cb:ca:92:23:6d:b7:63:42:9c:10:69:8a:30:3b:ee:a2:
30:5a:54:41:aa:98:ab:8c:84:ff:34:76:c2:38:88:c1:89:ea:
16:9f:7f:14:ce:36:45:48:97:6d:12:b9:8a:34:4d:ae:5d:5c:
58:2d:af:37:a7:d9:4d:79:69:39:15:07:88:fb:85:48:06:ce:
a3:cd:87:74:41:35:f5:b4:18:4e:10:35:86:d3:9e:a1:78:e9:
a4:e9:07:db:7c:2d:0e:a3:43:49:e2:c1:67:23:98:c8:57:00:
d0:b2:1b:fe:e0:a4:8a:7b:7b:7d:a0:bb:a2:6c:a4:e5:da:4d:
a6:91:e0:c0:a5:15:ab:29:7b:14:94:1d:2f:6d:54:df:90:d4:
44:f6:82:e0:53:d2:76:74:1f:5a:b4:6f:bb:bb:56:73:55:30:
f2:e2:59:2a:bc:bb:0d:92:77:e8:02:c3:18:22:4e:14:a3:c0:
b5:81:6a:6f:70:17:75:81:4e:3a:6d:0c:e5:b4:a7:dc:9d:f7:
63:6a:e5:d8:61:7e:e6:8c:51:4f:bc:32:ef:17:ec:f3:55:10:
6f:fa:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:13:03 2026 by rpki-client