Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: QvBD6AJ4Ib1poAxhkrVPvWcKtiIwMCS1Xq0UNiWm5w4=
Subject key identifier: 73:AA:1D:51:3F:F8:8A:1E:E9:C9:9D:76:FD:1D:CD:FB:9C:46:D9:51
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 01A0E889979B224BB03374D041B97F836581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 040D
Signing time: Mon 28 Sep 2026 15:02:06 +0000
Manifest this update: Mon 28 Sep 2026 15:02:06 +0000
Manifest next update: Tue 29 Sep 2026 15:02:06 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: P+p6OiyTU1J8A/FtR/WKRWsoqEv6+24sfK6mAF+iD3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:97:9b:22:4b:b0:33:74:d0:41:b9:7f:83:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Sep 28 15:02:06 2026 GMT
Not After : Sep 29 15:02:06 2026 GMT
Subject: CN=73aa1d513ff88a1ee9c99d76fd1dcdfb9c46d951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:61:44:fe:b8:a4:27:a5:cf:03:dd:ae:80:
22:bc:4f:0c:de:e5:f3:91:5e:1e:92:56:24:55:cb:
51:c7:a1:83:bc:2e:b9:12:c2:bb:15:71:1d:49:91:
52:84:dc:47:1f:d6:f9:f5:84:ca:68:45:ca:9c:b6:
50:a6:47:27:7b:0d:d4:01:5f:5c:f4:9d:67:5e:ea:
2c:14:53:6d:72:6a:be:41:79:6d:78:67:e7:7b:65:
b0:01:73:68:5c:a9:1e:f1:ff:75:b4:39:45:e0:42:
b6:1c:43:eb:d5:8d:dd:e5:36:46:36:fd:cd:87:e6:
2a:51:0d:aa:a4:9b:18:5b:8a:f3:32:63:9c:bf:5d:
7a:3e:87:32:f0:d5:85:87:39:f7:f9:cd:0a:dc:c5:
31:8c:58:a5:5f:b7:f9:39:1e:e3:d9:31:d5:ec:c3:
99:f5:88:9d:2d:39:11:9c:1d:16:11:00:3a:5e:e6:
8a:d7:2d:42:15:96:8b:0f:b5:09:b5:86:0a:7c:08:
13:03:82:93:22:f8:5b:f3:6e:8c:ec:2a:de:4e:14:
91:85:91:72:d7:fb:bd:f0:73:42:2e:93:e7:07:88:
43:ab:c0:c8:f1:9c:07:13:82:d6:97:c8:f0:c9:0f:
a2:e7:d8:cd:27:a9:2f:9b:91:47:8d:d0:f4:bc:91:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:1D:51:3F:F8:8A:1E:E9:C9:9D:76:FD:1D:CD:FB:9C:46:D9:51
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:db:14:e8:07:da:cb:92:77:28:c6:f7:0a:3e:c5:92:e3:c3:
6d:df:bd:f2:bf:0e:b1:1b:c2:7f:06:2c:62:de:4d:3a:fd:77:
cb:35:da:af:9b:b5:e5:7b:09:99:64:13:b9:34:ad:82:10:6d:
b7:93:84:e7:20:d1:a0:03:1f:96:9c:c0:5b:3e:f6:90:7e:5d:
7d:85:13:81:ad:70:c8:f7:7e:97:33:42:dc:9f:b6:97:13:31:
38:f3:c9:a3:25:42:09:61:c3:cf:17:a2:0a:09:4a:10:13:0e:
e7:3c:db:af:bf:fd:48:61:d7:eb:f6:2a:05:f9:49:6d:12:e4:
05:07:c8:96:10:e6:5f:d5:e2:f1:61:26:a1:5c:b7:53:ae:e6:
5e:b6:bb:81:67:93:20:51:a6:6a:da:e1:46:bb:9a:2b:ae:79:
32:7a:3e:04:06:d8:16:13:b2:a2:8f:79:43:db:4e:89:21:8d:
ea:de:0b:73:b5:87:0e:bc:9e:cc:d5:87:d9:c2:26:7a:73:00:
2c:3f:84:f8:f8:2b:9c:b4:4e:f9:b7:21:22:96:d5:0a:a1:1a:
91:51:bc:f0:4f:54:e1:50:3b:85:95:15:42:9f:50:15:81:0d:
6b:bd:ee:86:0e:48:08:08:c4:51:57:75:82:c0:53:d3:cf:c9:
d3:90:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:59:48 2026 by rpki-client