Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: jcfvqhHJB3jxgz6YNppmJIcfvao+9OmOJ7YY7dPqjM8=
Subject key identifier: 0E:52:BB:A9:14:71:1B:F7:EC:6C:6F:0C:77:89:01:A7:26:DB:A6:1D
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01A1DEDE50012380C5C477E452D62154A32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0B18
Signing time: Sun 15 Nov 2026 11:01:13 +0000
Manifest this update: Sun 15 Nov 2026 11:01:13 +0000
Manifest next update: Mon 16 Nov 2026 11:01:13 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (hash: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=)
4: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: Ewga0G5dq3g7y5JvJ4e2XfFb+a/GxRFBABM2LVenv6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:50:01:23:80:c5:c4:77:e4:52:d6:21:54:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Nov 15 11:01:13 2026 GMT
Not After : Nov 16 11:01:13 2026 GMT
Subject: CN=0e52bba914711bf7ec6c6f0c778901a726dba61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:04:66:19:59:a7:e7:5e:6f:fb:9a:7a:c0:
de:85:d2:02:79:9c:00:30:64:06:4e:2b:67:cd:95:
96:fe:fd:76:35:e6:51:ae:25:f8:d4:12:41:e8:5c:
1b:9e:df:4f:e6:00:cb:3d:53:71:88:4f:fb:ce:8f:
65:1c:03:a4:76:11:4e:de:af:51:6c:0c:9f:d6:8e:
0f:43:11:f5:86:cb:9f:42:71:69:d7:d7:ff:6c:84:
c2:bf:1d:d4:aa:2c:c1:f0:09:52:93:d3:ad:03:c8:
29:f4:21:2d:e2:aa:3e:d6:40:26:62:ef:10:d3:4b:
15:bc:ec:10:ee:81:bb:27:9c:02:0a:5c:d0:44:69:
c4:0e:21:14:17:9f:ee:6a:e5:df:19:0e:d6:52:f6:
b0:ba:ab:65:95:59:52:44:2e:72:e6:78:37:92:20:
86:94:71:34:b9:ee:b9:5d:32:00:7d:45:80:07:0b:
57:ae:c0:3b:9a:f2:2b:ed:22:5d:89:ac:43:43:d0:
42:8f:1f:e9:ac:9f:24:9d:90:2a:49:05:bc:94:9a:
13:55:c1:a7:30:36:9f:9f:8b:f9:90:d3:c5:6e:44:
43:77:ad:40:fe:c0:b7:06:d2:da:b8:75:44:6e:13:
5c:30:bd:6a:5b:64:05:02:ca:e1:ef:9e:01:75:cc:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:BB:A9:14:71:1B:F7:EC:6C:6F:0C:77:89:01:A7:26:DB:A6:1D
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:20:f2:4f:b4:25:43:a4:2f:61:10:7b:ef:2a:44:e5:09:c8:
03:71:61:92:a0:3a:f2:43:5f:8b:44:c1:e9:cb:73:50:6b:73:
47:cb:5d:c0:a2:66:97:6c:32:de:ff:19:9a:ac:ba:08:df:5f:
01:fe:a4:d2:2e:4d:73:e7:c9:b9:ef:6e:17:6e:24:57:4d:b5:
3b:5a:75:f2:cd:95:4c:c8:da:a5:64:b1:92:6a:d8:d6:dc:85:
3a:65:45:77:2a:2c:bb:6d:b8:5d:4b:b7:2e:e0:5a:0b:4f:5a:
38:a5:11:15:ad:62:2f:05:eb:47:b9:d8:db:30:6f:33:61:9d:
31:a2:28:db:c6:75:f6:8c:50:40:5a:e3:2f:54:d7:36:e1:bb:
30:1a:f6:33:36:4f:85:1a:b0:e5:31:76:85:b1:1e:9d:fa:1e:
ff:57:ae:77:f9:15:cc:fd:e7:c9:8b:e3:c4:83:30:1b:6d:fa:
34:4d:3b:9d:9f:96:10:f3:18:31:c1:55:58:62:8b:d1:0e:fa:
1b:5d:ca:05:a5:65:19:d3:7b:2b:b9:5a:7a:d2:69:e4:7c:49:
12:44:e4:74:3b:82:57:33:ae:fc:d1:af:2c:c8:e8:f8:64:dc:
fb:09:bc:06:ab:03:cb:39:19:07:bf:31:19:34:45:6e:c9:7d:
91:55:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:49:52 2026 by rpki-client