Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: DsD0FnQlOIi6hsv2f29LE0Jeh0zqL5qE4FTQ8zSGI54=
Subject key identifier: 34:A4:41:28:05:35:57:A6:CD:6C:A1:36:3A:D6:8F:DD:BD:25:DC:ED
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01A0D0EE1AF11BDB0B0BA0EEE3DB9C7A018A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 1789
Signing time: Thu 24 Sep 2026 01:01:00 +0000
Manifest this update: Thu 24 Sep 2026 01:01:00 +0000
Manifest next update: Fri 25 Sep 2026 01:01:00 +0000
Files and hashes: 1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
5: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
6: dNRPSnfq_fz0h0Bx9FN48757K24.roa (hash: PQQSUXtMe+CSMqNhT22afSsgYKHVv8p7crL3JYYOlA0=)
7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: Sbq95P0M73ujRN/VF00GuBRXQVuiaoP7ijBqciilE9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:1a:f1:1b:db:0b:0b:a0:ee:e3:db:9c:7a:01:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Sep 24 01:01:00 2026 GMT
Not After : Sep 25 01:01:00 2026 GMT
Subject: CN=34a44128053557a6cd6ca1363ad68fddbd25dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:b9:53:46:ca:f3:09:82:e4:43:b7:f5:9d:
20:c9:39:cc:53:68:ba:19:c3:5e:d5:ba:85:81:57:
a3:ab:9c:00:ff:be:0e:8b:af:5d:81:3e:1f:34:ca:
6a:df:6b:40:35:4d:5c:8c:b4:8b:97:7e:b5:23:d9:
eb:60:80:51:9f:63:11:a2:f1:cc:b0:ad:19:3c:73:
bf:04:0f:c1:99:00:9d:be:7a:02:73:83:f7:8e:e2:
89:eb:d8:1d:ea:2f:f4:bb:c4:d0:1a:e9:50:3e:b2:
e8:1f:d4:77:da:9f:21:44:b4:8a:45:5c:37:e1:5a:
4f:0d:86:e6:72:29:cc:0f:29:8e:18:4c:03:fa:05:
7b:fe:00:0b:26:16:14:19:61:9d:22:cb:f0:d3:8a:
e0:10:cf:35:2c:5b:e1:56:7b:29:9c:f1:cb:e7:31:
50:14:03:28:19:52:c8:39:ec:a8:9e:99:2f:08:c4:
76:8a:7a:30:48:ab:14:8d:57:99:e3:a4:50:9b:25:
3c:5f:a2:ae:ba:0d:9b:81:12:8f:e0:d9:6f:f9:76:
aa:c0:38:13:7d:06:c8:c8:8b:0d:b1:2f:d5:6e:2a:
23:8b:68:68:e1:33:c0:78:47:05:5c:d8:f8:be:c2:
31:3e:ee:61:08:51:18:7c:d8:be:a0:09:f4:0b:fc:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:41:28:05:35:57:A6:CD:6C:A1:36:3A:D6:8F:DD:BD:25:DC:ED
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8d:04:da:37:1d:2f:36:7f:f3:13:be:2e:87:5d:b0:ca:da:
2a:38:f5:2e:08:e3:b4:37:08:7a:73:00:cd:af:5f:49:61:f7:
58:d8:40:f4:ea:80:07:b0:82:88:fe:a2:e4:c9:d9:02:44:93:
bd:c8:3e:89:e6:84:1b:66:02:82:66:c8:af:c4:e6:94:4e:30:
81:d7:fb:35:95:91:ad:df:a7:f6:9c:30:29:03:65:df:53:1b:
84:88:75:48:b5:6e:6b:96:90:18:18:71:34:b3:c7:88:1c:a4:
8f:3d:a7:65:d5:1d:ef:40:36:6b:45:47:5d:fc:e8:96:a8:fa:
94:14:45:29:0e:ec:20:d0:86:9d:22:67:c9:3d:27:ac:be:cb:
b6:c7:ff:f1:f0:8b:4c:ac:89:27:7d:22:14:a8:41:fc:7f:e2:
11:7b:bc:fa:5b:67:e4:0b:34:04:e1:7e:db:fc:54:45:72:8f:
3f:67:79:da:cc:5c:94:48:24:ae:1a:e5:e5:dd:17:fb:b8:6a:
86:91:59:a4:2b:58:a0:cc:b2:06:d8:07:ff:d6:fc:9c:e5:36:
ef:a2:39:8f:90:4c:c7:06:a8:4d:21:9a:a7:83:8d:40:1f:de:
36:bf:44:c0:94:69:ca:fb:11:27:12:9b:80:11:8a:5e:cb:0d:
74:a0:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:41:53 2026 by rpki-client