Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: t2hHo909E3ojND6ntMG/35C4rnqbySYU11GGeWMBusw=
Subject key identifier: 61:F5:85:7E:AA:03:C6:29:C6:AB:CA:73:8B:9E:E1:8F:EB:F4:B1:B4
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01A0CEFEF84F0BBA420C1AE68FCD1523A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0AE8
Signing time: Wed 23 Sep 2026 16:00:11 +0000
Manifest this update: Wed 23 Sep 2026 16:00:11 +0000
Manifest next update: Thu 24 Sep 2026 16:00:11 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: ypegT6X1vVQGP6TIIj8DT2C3wNDhleY7vq3VfH/J3+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:f8:4f:0b:ba:42:0c:1a:e6:8f:cd:15:23:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Sep 23 16:00:11 2026 GMT
Not After : Sep 24 16:00:11 2026 GMT
Subject: CN=61f5857eaa03c629c6abca738b9ee18febf4b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:9e:d3:1e:2f:8c:12:ef:67:d4:fe:d0:1a:
0c:d9:15:16:70:8c:5e:77:d9:92:3c:18:0e:8c:4f:
74:31:f0:e1:a1:4a:f1:00:e9:a3:03:ef:23:b8:28:
f1:0e:d1:75:cd:31:ba:70:da:ef:48:3a:02:a7:a2:
8e:46:4a:37:45:e3:84:76:55:ee:c4:a6:1a:c5:be:
50:7f:2b:5d:0f:40:13:a2:64:79:23:7f:79:1c:bc:
03:01:4d:94:d7:97:c3:e7:1b:47:32:ef:e0:39:b9:
d6:77:9e:6d:e5:96:39:87:ba:01:dd:c8:a6:05:79:
c4:be:5b:23:22:4f:56:bb:a5:c1:8d:07:14:8e:33:
16:c6:8c:20:6e:d8:60:ec:d5:37:c2:cf:31:ea:02:
66:8a:96:60:67:c7:86:6a:fc:22:a7:71:c2:52:79:
4b:53:66:b1:43:00:cb:5f:e1:74:98:e5:1f:80:26:
27:10:65:62:0a:b9:dc:49:38:a7:7f:62:80:6a:6e:
f5:9a:aa:e9:25:71:75:c7:dc:89:25:34:b8:93:b2:
12:0f:a0:33:a1:57:73:3c:29:4c:17:e0:a2:fe:57:
6e:b5:21:98:c1:6d:29:ae:dc:79:84:a1:93:de:c3:
7d:11:ff:54:f4:c8:59:33:29:c3:27:ff:69:3c:0f:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:85:7E:AA:03:C6:29:C6:AB:CA:73:8B:9E:E1:8F:EB:F4:B1:B4
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:08:5a:7a:92:4e:ad:5f:0f:13:41:2e:56:03:c8:00:3e:
e3:f3:f5:55:72:30:27:2d:1a:d0:d4:27:85:bb:76:dd:a2:84:
98:82:f0:4f:28:6a:3b:1e:fd:1e:d2:25:30:06:6e:80:06:96:
ea:03:c2:a1:d1:6f:d3:d3:d1:01:45:c9:04:cf:92:82:51:e8:
c0:9a:d0:fb:d6:7e:c6:58:57:b2:2d:da:64:a0:02:bc:fb:8f:
b6:72:9c:48:b3:8e:c6:cf:9e:89:b5:a1:86:2e:f4:23:80:fd:
38:2a:70:84:49:fc:8f:92:f1:f0:c4:fd:82:5b:b9:3b:11:fe:
31:87:bf:c7:0a:a2:0e:21:fe:ce:46:78:90:87:d7:b7:57:51:
32:5e:a8:17:c2:7f:3e:a4:10:1a:56:37:7f:bd:81:68:4d:fe:
92:42:4d:df:a1:6a:0f:7d:df:1e:42:91:75:4a:ba:91:59:f6:
c4:87:fb:79:82:6a:c3:fa:a8:93:56:89:1d:13:35:d4:86:87:
53:33:4b:16:81:44:8f:15:dd:d6:02:0a:ba:e8:f4:9c:8e:55:
ed:6f:80:ea:60:1b:f9:12:fa:44:eb:b9:9f:36:80:ee:87:d4:
c1:74:db:16:d8:2f:6f:f1:71:5b:88:98:3f:f9:fd:a9:73:f5:
30:37:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:20:34 2026 by rpki-client