Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: j/itQX+E70SCRxD8Cc9wyERgGGx+3fURh90A5Zl+KP8=
Subject key identifier: BF:9B:F8:3B:2A:59:8A:96:D4:CA:72:B1:31:71:A7:A7:06:FB:D3:AE
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A0D2DE6D23611886F98B8C547846EC438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0D4C
Signing time: Thu 24 Sep 2026 10:03:07 +0000
Manifest this update: Thu 24 Sep 2026 10:03:07 +0000
Manifest next update: Fri 25 Sep 2026 10:03:07 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: wS5C77kQFvZxyWvpeYtgizuJpoknQyeejUflH48mdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:6d:23:61:18:86:f9:8b:8c:54:78:46:ec:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Sep 24 10:03:07 2026 GMT
Not After : Sep 25 10:03:07 2026 GMT
Subject: CN=bf9bf83b2a598a96d4ca72b13171a7a706fbd3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:16:00:d3:ed:5d:23:9e:b3:23:47:be:97:
dc:38:e3:db:d5:ab:40:99:71:45:62:fd:13:ee:17:
9a:9c:f1:1f:14:5d:4b:ee:19:18:63:0e:2a:ab:ae:
d7:d4:54:1a:c2:ca:25:21:65:53:4e:44:c8:81:98:
03:7f:6f:11:cb:d3:6d:a6:bf:fd:db:bb:ad:3a:aa:
d7:25:35:da:e0:69:2b:d9:0c:a6:ff:21:30:64:84:
10:58:95:1e:45:c0:e7:6e:0b:b4:92:1d:a6:dc:dc:
72:e3:2c:5d:5c:ae:2b:b4:b3:6f:2c:f9:02:33:b5:
8b:03:5a:c0:6e:a5:40:e9:0c:41:1d:4f:93:36:5d:
dd:b0:b6:45:1f:a6:d9:30:b3:08:20:8d:04:5d:20:
6a:a6:bf:ad:a5:45:df:52:a1:89:90:58:ee:e6:5e:
e2:3e:1a:4c:5d:b0:84:53:42:1a:d2:df:df:22:95:
04:3e:e9:e1:72:ef:41:69:64:d8:b6:0b:60:f7:63:
2a:99:31:b5:63:10:78:ac:f5:0d:ab:56:ba:1e:2f:
9c:d4:e8:6a:7c:bb:85:71:03:69:20:26:90:d3:68:
2a:42:30:a8:e1:99:78:9e:af:6c:f6:4e:9f:58:4f:
9c:33:c6:d0:d3:f2:5a:ee:5b:63:65:df:d0:b5:5c:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:F8:3B:2A:59:8A:96:D4:CA:72:B1:31:71:A7:A7:06:FB:D3:AE
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:1c:97:7f:62:d0:85:4a:59:bf:05:76:70:29:38:56:31:
74:19:d5:40:35:c9:f2:d4:1c:5c:7f:58:44:14:0d:81:51:d4:
7b:e8:2e:71:25:07:73:1f:d0:f5:ae:57:76:b2:7d:22:e1:ae:
17:ae:e1:ae:78:fc:ec:0b:bd:15:69:ff:8d:04:fb:ac:fc:67:
c8:f7:b5:40:0e:8e:ce:05:dd:1b:43:e4:5c:1f:0c:9b:fd:71:
53:25:1b:6d:ef:a5:74:2b:5c:5c:a7:8e:57:95:b3:f1:9f:1c:
ef:63:7c:94:69:17:d0:44:fb:12:b3:66:c9:41:b9:59:1d:7e:
ff:5b:95:a7:cf:00:22:2b:d6:d5:f5:fa:19:b3:a5:97:28:56:
c0:aa:24:8a:7f:c6:b6:a3:52:62:39:57:ee:4f:7c:b2:4d:d7:
89:b9:ca:43:29:88:82:2d:44:9e:95:67:b8:02:ed:36:41:5e:
4d:f7:0b:8e:e8:13:b4:a4:ba:46:8c:34:23:c1:f1:ff:99:58:
5b:ea:46:73:67:db:a2:33:b9:19:4a:79:26:ee:cd:bf:4d:cb:
e5:9f:03:ca:df:5a:2b:8e:e8:0a:58:88:70:95:e9:1f:81:43:
e5:a8:c3:df:a9:62:5c:eb:90:e0:34:5a:ee:de:6d:53:06:18:
3b:a9:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:38 2026 by rpki-client