Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: ow4vpthUaBqayIIJqOMdJTTKZU+8Frtc4GiT8MzMrk4=
Subject key identifier: A0:02:51:70:DC:81:65:09:33:43:F7:42:94:94:D0:1E:A4:BD:F1:E0
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019E216D4C93E718F7C0EFF932B306A941A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0928
Signing time: Wed 13 May 2026 13:01:11 +0000
Manifest this update: Wed 13 May 2026 13:01:11 +0000
Manifest next update: Thu 14 May 2026 13:01:11 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: QcO8DTN+GLjl1PzsY/39vsonwpi36RhthvHNON1u/8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:4c:93:e7:18:f7:c0:ef:f9:32:b3:06:a9:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: May 13 13:01:11 2026 GMT
Not After : May 14 13:01:11 2026 GMT
Subject: CN=a0025170dc8165093343f7429494d01ea4bdf1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:ab:e9:77:42:91:dc:47:a9:d6:91:33:b2:
b6:af:9e:ba:c9:a8:1b:64:f2:0e:29:c8:85:22:74:
e3:bc:e3:df:3b:0a:75:3f:f3:92:ae:f9:b4:c8:eb:
ac:de:7a:d8:d0:de:d3:36:71:cf:6b:9a:07:61:09:
66:8b:37:7b:03:66:e9:f6:58:eb:c3:08:83:22:62:
ab:56:c7:6c:bf:af:a3:bd:d7:f7:a5:a1:f7:05:64:
dd:75:3a:d4:36:89:36:07:48:01:f0:1d:7e:4b:1c:
89:7f:e8:8d:23:dc:4f:11:ea:0e:05:14:71:5c:e1:
39:4e:22:a8:9d:1f:79:e6:68:95:12:72:bb:ea:aa:
10:c1:1f:75:9a:4f:43:bd:19:1a:bd:26:86:ab:ff:
dc:01:30:42:e0:80:a3:53:d5:c9:69:a6:dc:14:c9:
f8:6d:b5:77:fb:18:8f:e5:b3:6e:12:86:4b:7c:f0:
a8:23:70:d7:b3:ce:5d:ba:39:18:c2:28:25:cb:1f:
b6:14:2f:37:ff:ec:ab:44:15:5b:8f:f3:fb:81:22:
c6:5f:65:2e:b5:aa:7d:40:80:6e:b5:55:da:87:70:
91:f0:12:d6:80:29:39:07:ba:f6:7b:c2:51:16:55:
f3:38:d8:d5:35:6c:d8:b5:39:3e:e9:7c:47:6a:cb:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:51:70:DC:81:65:09:33:43:F7:42:94:94:D0:1E:A4:BD:F1:E0
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:c5:8f:7d:9e:a6:18:c4:a3:09:c3:5b:99:3d:16:4c:aa:
f2:38:97:04:2c:83:f9:0d:06:7a:d4:33:df:74:8e:3b:19:0f:
05:e6:7b:57:7b:6d:8c:17:8d:df:cd:b6:55:83:59:7f:d7:5b:
c7:6e:61:d3:a4:54:9b:9e:fc:e1:47:c4:e0:ec:d5:ee:68:14:
64:7e:38:60:0f:a0:20:84:1f:ad:8b:a0:bb:b7:9e:29:ab:e0:
6a:17:92:61:e2:67:2e:31:b7:be:75:30:b3:2c:dd:04:6a:e6:
75:c7:f1:6e:98:b0:60:ec:5d:0d:68:c0:77:6f:09:2f:6e:c6:
60:79:ad:12:38:8d:98:5e:f1:e5:c2:12:bf:22:73:82:bf:b7:
59:c0:80:2a:f9:59:11:bb:fc:ed:bb:6a:42:fc:3d:53:dc:1d:
cd:54:e1:e9:91:b2:2f:c6:ab:a8:cc:3d:28:bf:59:cb:68:2b:
c5:7e:52:a7:ec:12:c8:e4:b4:5d:0b:3b:0d:61:ca:6d:a1:ce:
35:7d:f8:d1:1b:2a:be:ff:85:d1:d1:ae:94:d2:58:f2:9f:f9:
d5:94:bd:7d:ee:97:15:af:4b:ba:bc:c4:f8:64:38:f9:1e:b9:
df:f1:af:4a:21:22:24:a4:95:13:a6:63:1a:9d:be:12:2f:7e:
4a:3e:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:23 2026 by rpki-client