Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: OqSOzqIxcvQFChkapf7zLIwk3LfPZZIYJYONpSZ15v0=
Subject key identifier: A2:33:60:5F:39:E3:8B:42:B5:2C:A9:3C:87:F5:DB:B8:CC:9A:B1:E8
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 01A1268C729ECB62A85952F3F71629940A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 125D
Signing time: Sat 10 Oct 2026 16:01:40 +0000
Manifest this update: Sat 10 Oct 2026 16:01:40 +0000
Manifest next update: Sun 11 Oct 2026 16:01:40 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: xI2zAnxP18WgR5ToNCWSnIJ/l74CsfYCk3lu70peR+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8c:72:9e:cb:62:a8:59:52:f3:f7:16:29:94:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Oct 10 16:01:40 2026 GMT
Not After : Oct 11 16:01:40 2026 GMT
Subject: CN=a233605f39e38b42b52ca93c87f5dbb8cc9ab1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:ba:29:a3:58:a4:12:c6:c7:e6:82:cd:23:
97:0a:8b:aa:d9:3d:9d:80:c6:b8:9a:01:52:5e:0c:
ac:b1:f6:8e:40:91:77:da:c6:42:01:a8:d8:15:be:
5d:f9:a5:3b:21:c3:34:69:4f:59:5d:fd:8f:ac:d8:
1e:37:5a:33:85:80:17:f7:62:5b:72:69:69:20:bf:
bb:dd:1b:36:c7:2e:93:7c:3b:06:da:64:21:97:5f:
97:fb:32:b1:16:3f:a6:0b:21:17:4f:14:c3:7c:5f:
75:9c:2a:60:0a:60:19:f2:73:54:46:a0:86:25:08:
6e:05:08:2b:2d:b0:94:06:b2:d1:c0:4e:78:9d:63:
d3:11:ed:8f:21:ec:61:fd:0d:c1:65:76:69:8b:ba:
f0:3c:c3:79:02:93:3a:b2:29:31:ae:f9:e9:91:e6:
17:b4:74:ba:f5:df:79:28:e6:1b:bf:fb:af:a2:db:
13:51:9a:7e:37:69:ac:c6:c8:77:ae:5a:c1:d1:72:
c3:be:69:d2:c5:d4:52:b4:7c:c2:e3:e4:f7:f6:99:
78:93:5a:b9:7c:a9:a6:d3:e4:e3:d5:dc:03:37:0c:
54:e5:9a:44:e0:d0:e2:41:1b:e7:e4:69:8b:da:b1:
cc:9e:62:bc:4f:60:fb:a8:37:76:de:b5:42:cc:db:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:33:60:5F:39:E3:8B:42:B5:2C:A9:3C:87:F5:DB:B8:CC:9A:B1:E8
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:cf:80:ba:c5:d4:42:52:58:45:da:f8:1d:8a:29:39:d5:
af:ef:8e:08:78:42:cc:5f:e5:3f:91:08:98:91:7d:36:ce:4f:
57:7c:81:88:db:1d:52:e6:d6:8d:e0:84:c2:8b:85:de:9a:95:
f0:f5:88:79:56:9b:2f:c9:fc:ac:94:90:1b:09:51:55:e3:a3:
b3:79:4d:c2:f1:71:f0:2c:4d:ed:96:42:26:33:83:1b:4b:0e:
a6:3a:49:2a:43:42:d9:35:27:0c:2c:f2:99:7c:29:d4:b6:27:
64:39:17:08:99:7c:04:21:d3:fb:21:d2:89:dc:a0:49:3b:19:
22:55:6a:1c:20:ae:06:6e:4b:97:ee:d1:e9:76:5b:cb:94:31:
6b:28:34:ba:06:6c:47:54:31:76:11:51:d0:79:1d:86:26:ba:
6b:48:1a:8c:d7:13:dd:b2:41:ae:2c:f5:ab:2f:10:97:3c:15:
30:3b:b5:b3:95:86:90:9e:a6:3f:06:28:63:91:33:c6:9b:47:
47:3d:e4:ea:84:2f:3b:44:10:60:f1:b3:65:4c:24:b4:b6:b1:
68:85:4d:65:39:18:d1:8e:43:21:a5:0b:0c:18:40:df:45:1a:
c2:42:ea:17:34:df:44:d8:10:84:da:9c:f7:37:2a:5e:58:2f:
43:c3:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:45:29 2026 by rpki-client