Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: aiEItl7mdool82cZNa+j6VOsDnhTCVFfwFrYZQD9Ur8=
Subject key identifier: 45:D1:0A:4E:7D:D4:89:68:3B:F4:23:09:2C:CF:31:7D:0A:64:38:BB
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01A0E1ABA3AF8EEDEBDC8EDE920ABB2A5B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0E31
Signing time: Sun 27 Sep 2026 07:01:57 +0000
Manifest this update: Sun 27 Sep 2026 07:01:57 +0000
Manifest next update: Mon 28 Sep 2026 07:01:57 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: Szrpbc/2dnqYabpsPxiK2pIcF0hm8Y/cC7z5z9lRZlY=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:a3:af:8e:ed:eb:dc:8e:de:92:0a:bb:2a:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Sep 27 07:01:57 2026 GMT
Not After : Sep 28 07:01:57 2026 GMT
Subject: CN=45d10a4e7dd489683bf423092ccf317d0a6438bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:21:1e:44:b9:47:fe:ba:2f:86:47:f5:e1:
82:84:a1:db:da:fc:62:3e:a2:20:c5:9d:61:34:a9:
3b:21:09:21:7a:46:8f:3f:70:09:70:0e:34:cf:74:
2a:b3:8e:dd:02:57:b4:27:8e:bc:f7:56:7d:c5:e1:
d2:e8:90:6b:2c:f5:74:25:5d:b3:cf:ef:48:7e:9f:
53:fb:3e:d5:15:2b:f9:04:e8:8d:0e:82:e0:5f:c5:
59:3e:03:3e:3d:bd:29:e7:48:4f:17:8b:86:bd:41:
70:42:42:43:f7:df:92:25:9c:12:80:4f:50:3b:6c:
55:a3:8f:26:92:72:3b:8a:b7:b7:88:e8:9b:8b:14:
77:98:bb:46:9a:74:3f:0d:95:f9:e1:9b:4b:68:1a:
ea:f6:a0:e7:1d:7c:9b:94:ac:40:ea:da:71:9d:6f:
86:0c:9c:7c:dc:35:0b:86:42:96:d8:12:d2:b8:a2:
fa:18:a0:c9:49:a4:87:88:7f:07:dc:b2:35:ae:fb:
d9:8d:9e:ff:fb:d7:28:80:1d:64:66:16:45:8e:8d:
82:79:76:0e:78:a3:1c:87:f8:d9:3f:5d:7a:70:53:
5e:3a:11:a6:45:c7:ec:36:e8:a4:68:50:fb:0e:80:
39:37:fc:52:a5:6f:3f:9f:16:8d:0a:c7:b9:98:96:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:0A:4E:7D:D4:89:68:3B:F4:23:09:2C:CF:31:7D:0A:64:38:BB
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ad:94:a5:c1:5e:3f:98:0b:75:02:29:a9:2f:a3:89:d4:a0:
40:28:9e:3f:b8:76:dd:a8:47:e1:cc:80:95:d8:87:b0:81:65:
aa:39:dd:f2:e2:97:86:3c:45:c0:3e:aa:23:b2:0d:a3:34:c4:
aa:c5:d2:38:0d:89:c3:b8:4d:2a:5d:a3:20:5f:20:44:e1:88:
95:c7:f4:8e:d1:25:fe:98:93:a0:ef:25:35:e1:af:8f:fb:8c:
81:d5:61:05:89:eb:ac:5b:b8:cd:8c:df:b2:ea:51:ad:6d:de:
ba:dc:f4:52:44:cf:3e:e1:e7:72:fe:0c:eb:7a:99:92:e3:73:
8f:e9:a4:3b:15:8b:96:4a:80:5d:9a:0f:09:51:0d:40:29:3a:
bc:93:59:6d:a2:3c:50:71:39:76:85:b1:77:2f:db:48:10:59:
9a:e8:b4:b7:41:1a:b4:07:65:71:a6:d7:47:11:42:0e:55:50:
20:c2:42:55:1e:56:33:88:32:73:dc:fa:7e:6e:97:0d:70:34:
6a:21:53:eb:04:8c:a1:fc:b8:eb:e5:2d:76:f6:b4:c2:54:01:
6b:f9:57:6d:03:d9:3f:ad:21:67:5e:22:ba:6e:33:80:e5:58:
64:50:c5:ea:78:4a:13:3b:85:45:66:9c:5b:8d:52:34:8e:7b:
2c:3a:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:57:28 2026 by rpki-client