Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: jNMWgFtl752Rpny8YORGMrIunr7jVMQxym+CcMt8M7E=
Subject key identifier: 12:64:EA:77:1F:AB:94:78:3D:37:3C:29:78:81:2D:54:C2:4D:F2:3B
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 01A1193DB75FE5BD4042C083973A90AB9381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 08E1
Signing time: Thu 08 Oct 2026 02:00:37 +0000
Manifest this update: Thu 08 Oct 2026 02:00:37 +0000
Manifest next update: Fri 09 Oct 2026 02:00:37 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: lAdl9zW5Ur7I+zT9m4amf/syvlmEGgAQEJPjL16fHTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:b7:5f:e5:bd:40:42:c0:83:97:3a:90:ab:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Oct 8 02:00:37 2026 GMT
Not After : Oct 9 02:00:37 2026 GMT
Subject: CN=1264ea771fab94783d373c2978812d54c24df23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:30:9f:da:66:28:80:53:de:b4:4b:1e:07:
9b:27:6a:75:57:80:6c:fb:f9:1e:45:fb:b9:6c:a1:
db:1a:4b:27:14:23:09:6d:68:fa:09:2b:4d:bc:42:
87:b9:1f:ee:b8:0d:df:52:64:ce:55:b6:39:a2:ee:
d7:f0:06:d3:36:59:3d:e0:c6:54:a9:39:3e:e4:17:
a9:fa:be:cc:7f:64:b3:b1:72:c0:3d:49:c5:12:02:
1a:9a:cb:e2:93:a5:88:d2:9f:b5:76:cb:c4:ea:19:
56:2e:a3:56:b2:59:a3:bf:1c:1f:8f:a8:2c:e2:55:
dc:8b:af:ca:b2:17:8a:5a:82:85:3e:40:21:27:40:
fe:a4:08:51:ac:14:eb:8e:50:54:fa:41:50:4c:d0:
56:dd:91:ce:ab:0f:6d:a2:6a:49:60:c2:65:c4:75:
07:b9:d2:5a:6a:19:41:32:f1:92:77:5b:69:9f:bc:
e7:62:30:6f:60:af:c2:00:38:59:2b:1d:88:cf:ef:
4e:7b:43:34:c8:fa:92:1f:5e:7b:b6:d1:e7:3e:41:
03:54:14:05:84:55:94:39:7a:90:0f:1f:ff:37:d4:
34:f9:e7:ff:9a:73:1f:24:8a:72:ef:3f:bc:38:18:
68:49:d0:cd:a2:ca:4c:13:38:5a:b6:67:49:41:ee:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:EA:77:1F:AB:94:78:3D:37:3C:29:78:81:2D:54:C2:4D:F2:3B
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:e7:1b:8c:d7:2e:87:f6:fe:d4:35:d0:60:6e:eb:0e:bd:
45:dc:8f:a9:2c:27:08:97:6a:ca:34:68:c5:5e:b4:42:6a:24:
27:27:e1:76:da:3e:31:df:2a:31:8d:ec:0e:e4:9b:3b:b9:9f:
04:93:1c:2b:79:df:bf:3c:aa:2f:fb:4c:4e:ff:5a:02:59:33:
bb:34:c1:23:a8:62:ee:0d:32:c9:96:f8:b0:94:20:4d:b8:7e:
7c:30:42:27:6d:a3:c0:8c:11:85:4f:bc:da:96:9a:d2:cb:31:
12:2b:62:e0:6c:51:41:b7:94:bb:d9:e5:9e:ae:1d:a6:59:2c:
6a:e9:f4:c6:30:16:ba:33:1a:56:e6:0a:e2:18:70:bf:0e:3f:
bd:50:71:48:67:0f:3c:8a:18:43:8b:03:37:e1:7e:9a:d1:e9:
77:18:65:28:f0:be:ba:64:93:28:68:fc:63:f1:ab:2b:ea:05:
eb:46:23:9b:3a:d8:ba:b4:c0:09:fe:75:37:a9:c2:b3:90:80:
2f:e3:4d:14:04:b5:dc:8d:ed:92:b9:84:92:2f:e9:af:b4:f3:
b5:ee:67:be:92:53:e8:73:ef:3b:27:4a:94:aa:e3:d7:6c:50:
d4:2b:85:ef:74:4d:d6:19:e7:ce:0d:95:f7:0b:9f:50:d9:10:
88:12:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:24:41 2026 by rpki-client