Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: XR0POf+cl2KROHRdBzQxfhIFsgebiYs7B5Gqow2tilE=
Subject key identifier: 5F:16:2B:17:80:9F:DC:C0:DF:3D:AC:AF:CE:5E:09:CF:80:14:E1:5A
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 01A0DC4E036DCC903E9431C59411E4E22101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0AC3
Signing time: Sat 26 Sep 2026 06:01:35 +0000
Manifest this update: Sat 26 Sep 2026 06:01:35 +0000
Manifest next update: Sun 27 Sep 2026 06:01:35 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: eNcu5blBefcdPJPNc4ZyTewZoOQlTsDCSP72Svsb7Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:03:6d:cc:90:3e:94:31:c5:94:11:e4:e2:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Sep 26 06:01:35 2026 GMT
Not After : Sep 27 06:01:35 2026 GMT
Subject: CN=5f162b17809fdcc0df3dacafce5e09cf8014e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:ae:a3:54:2a:b3:a6:6f:ae:d3:51:05:d2:
de:cc:be:0f:37:ab:8b:50:f1:d7:73:9a:a1:5b:51:
a8:94:63:7c:01:74:c9:51:52:e5:29:5f:06:3c:33:
80:ad:26:82:23:a9:6f:a7:a6:31:87:d9:16:ba:12:
06:27:35:bd:0e:15:a0:e5:f7:ab:06:44:ec:67:ad:
41:22:f4:fc:2a:94:30:e7:93:ef:63:c7:d6:2e:e1:
87:b9:bd:49:3e:aa:62:5d:6f:69:33:ed:32:2b:6d:
46:4f:64:fb:34:c5:7b:bc:47:6c:87:c2:b5:52:78:
2b:64:30:3e:97:d8:fa:4c:c4:61:64:66:87:c1:6a:
df:2c:e0:63:30:93:b0:89:71:46:f4:a0:41:b7:47:
1a:c0:f0:de:04:13:73:d9:f1:cf:54:41:bc:2c:cb:
f6:d0:46:5a:64:1d:4b:ec:7c:3f:b7:d3:5c:d8:4e:
d3:ff:63:5e:1e:89:ed:29:98:a0:fe:8b:30:30:3a:
fc:9c:e1:8a:99:9d:a7:30:09:0f:09:23:be:64:1a:
32:7a:49:3e:39:f4:62:8f:c2:58:a7:78:74:06:99:
ab:66:72:d9:46:64:4f:a9:e1:75:37:fd:d9:8b:0c:
5b:0a:7a:a9:09:00:af:27:59:3e:49:5a:f3:65:eb:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:2B:17:80:9F:DC:C0:DF:3D:AC:AF:CE:5E:09:CF:80:14:E1:5A
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a2:c8:fb:2a:a8:60:81:3c:a0:cf:01:a0:55:cb:ea:c9:07:
a3:e5:d4:c6:fa:b1:10:de:2f:1e:df:e0:7a:6c:be:e3:f3:1b:
d2:83:f9:ed:e2:e5:ae:46:ba:58:e5:19:03:5b:6d:eb:b6:c7:
bc:b2:5a:1f:8b:77:f0:de:e0:13:38:e6:87:2a:ef:37:bd:e7:
f8:3d:62:95:eb:aa:f6:17:93:af:82:cf:cd:48:9a:4b:32:8e:
5b:2e:18:a0:a8:66:f0:e1:c2:82:82:30:ab:4d:24:3e:68:4d:
84:bd:d1:56:55:f9:c7:93:e2:94:84:4f:c7:08:1b:1a:e4:6b:
a7:3f:3c:09:f8:3f:fe:ae:39:bd:78:da:71:a4:08:5a:47:c0:
a4:67:17:bf:d3:22:ef:a9:c4:e5:09:fc:4a:b9:ba:dc:d5:2b:
1f:7f:ea:8e:85:2d:ac:4d:63:c2:60:c3:c4:04:71:8c:3d:75:
f7:51:6f:4a:84:7e:17:14:2c:33:d6:e3:2b:1a:84:66:8d:f7:
3e:95:b2:a9:d4:7e:81:78:2b:ff:8c:ae:45:bf:b8:5b:d4:7d:
ff:12:31:51:88:a3:47:7e:56:43:18:d8:cd:28:e1:a5:1b:53:
83:7b:67:0c:9f:4c:4e:07:1b:ea:51:37:ed:6b:a2:f3:a0:2b:
8f:a5:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:51 2026 by rpki-client