Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: 6iwrwwPrkC+JgRo9lmG4Y3deiQRGSFYmrMM37W1Z4+g=
Subject key identifier: 99:FF:FE:34:F5:F9:68:59:A5:FC:C1:01:CB:BA:7E:41:72:C5:9D:61
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01A0ED4181318F0D7436F868581AE05978FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0AD1
Signing time: Tue 29 Sep 2026 13:01:27 +0000
Manifest this update: Tue 29 Sep 2026 13:01:27 +0000
Manifest next update: Wed 30 Sep 2026 13:01:27 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: s2f8xJFvnM7PCaSNmhG3igZAxRrg4laBXdCVSUPw2jU=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:81:31:8f:0d:74:36:f8:68:58:1a:e0:59:78:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Sep 29 13:01:27 2026 GMT
Not After : Sep 30 13:01:27 2026 GMT
Subject: CN=99fffe34f5f96859a5fcc101cbba7e4172c59d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:29:fa:2e:c0:5d:8f:9d:1f:ec:b8:a0:49:
a1:89:ff:4e:e3:bb:86:1d:4a:00:23:4f:9f:90:34:
6e:26:da:d1:09:bb:1f:2e:28:c0:32:53:4d:5d:73:
14:6d:c1:19:71:2f:44:7a:8c:1b:89:7c:0b:06:a1:
8b:00:3e:2e:67:ad:b6:9a:91:75:7e:9a:32:28:71:
13:5d:78:3c:de:a0:43:f1:8d:2f:7e:70:12:d6:27:
9e:9c:69:c7:48:e8:38:be:19:25:9d:52:4b:12:fb:
30:7e:cd:2a:cd:74:8e:85:b9:1a:7b:f4:8b:72:12:
bb:18:50:5d:b0:11:37:45:98:ee:3f:bf:63:4c:ee:
a5:b3:8d:aa:35:8a:6d:dc:21:61:63:1b:ed:82:e0:
6c:4c:da:12:ed:13:17:d9:85:12:ab:eb:fd:f7:12:
e4:7a:1e:84:2f:b6:b3:d3:ae:72:e3:89:63:ad:bf:
a1:fa:aa:45:bb:aa:05:64:c2:dc:ca:a3:05:b1:05:
c7:70:ee:c1:ea:30:f0:48:7f:f9:32:2d:b4:b0:6c:
e4:20:1d:56:0a:39:8b:a2:25:da:f6:25:cb:28:5a:
4d:c7:be:8d:5c:c3:91:d5:08:3b:b3:c4:e6:31:25:
61:3f:c7:81:a5:22:71:02:97:36:58:6e:bd:d8:4c:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:FE:34:F5:F9:68:59:A5:FC:C1:01:CB:BA:7E:41:72:C5:9D:61
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b5:9a:82:13:f9:55:58:f8:a4:72:ad:90:f1:82:98:0d:31:
8a:48:6c:fe:b6:fc:c9:87:80:9f:cd:e9:d6:37:67:b8:35:58:
a3:81:95:3c:bb:26:3b:58:79:d0:fd:3c:6f:34:d9:d7:7e:b2:
2a:80:b9:81:65:a4:2d:49:97:9c:0f:aa:2c:9c:73:37:e1:7d:
34:27:7a:b6:2c:37:80:dc:48:ed:2e:9b:c5:2a:97:e2:99:ef:
bb:b8:08:1e:3e:c0:25:66:1f:a1:8d:11:30:1b:34:66:e8:b7:
21:c3:60:eb:d5:50:d6:d3:cb:c5:d0:b1:2e:7a:8a:0f:51:07:
1b:1e:ab:5e:82:25:f7:44:6a:95:82:2e:dd:24:1b:d3:34:a6:
56:d5:4b:09:8b:29:b9:5e:5b:35:49:ae:b7:83:c6:dd:ff:b4:
9f:de:12:6c:de:1f:53:f7:2e:b4:48:79:ca:0c:79:43:9e:87:
3a:11:7f:e7:59:7d:4d:a7:c5:d0:d7:e5:30:7f:6c:2c:70:94:
14:73:87:6e:7e:6b:fc:8e:f7:74:89:71:73:cb:c7:2d:7a:f3:
91:6e:83:aa:fa:e5:de:e4:dd:21:94:3d:1d:6b:68:74:8c:b2:
b1:d2:d1:39:0d:37:01:dc:c3:a0:23:d1:15:06:f6:71:21:41:
b6:e1:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:18:30 2026 by rpki-client