Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: jc7LYrE/bx9C63JzGVGh7TslFQ5VaB/ePVs2XPKitiA=
Subject key identifier: 3F:A0:DC:EA:C1:E4:28:A7:05:6F:14:03:6A:A3:B5:BF:C6:03:47:1A
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 01A11AF5434984BE70B4951807DF86001BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 14DA
Signing time: Thu 08 Oct 2026 10:00:43 +0000
Manifest this update: Thu 08 Oct 2026 10:00:43 +0000
Manifest next update: Fri 09 Oct 2026 10:00:43 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: ItibPCtTr81TMU7tIgBmKDWt2kC4GkUwRLdUQjciq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:43:49:84:be:70:b4:95:18:07:df:86:00:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Oct 8 10:00:43 2026 GMT
Not After : Oct 9 10:00:43 2026 GMT
Subject: CN=3fa0dceac1e428a7056f14036aa3b5bfc603471a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:94:e3:fb:da:d4:fa:5b:8c:0f:6a:55:7b:
8b:75:43:d7:0a:28:4a:8e:4b:81:2a:63:67:f4:4f:
3b:19:11:92:a4:e5:5e:f1:aa:24:00:00:e6:23:63:
3f:1d:d4:47:c6:7a:00:fb:de:a9:e6:c8:f7:ee:83:
93:1b:69:d4:b0:e5:b1:52:21:10:c5:7d:c0:60:f7:
2f:f0:85:8c:74:a2:7b:80:55:1c:f3:70:f2:32:4b:
c4:0c:f8:7b:6a:77:36:a9:e0:9c:6c:bb:6d:ea:74:
e7:95:57:bb:eb:d2:1a:20:f8:d6:95:32:77:dc:53:
ae:2f:62:f5:e1:29:3d:b4:76:56:e6:04:3d:7a:9a:
ba:6c:3e:d9:32:6c:62:e6:da:59:93:6e:f3:54:02:
48:d9:f8:85:21:3e:58:d9:37:3c:9a:a0:8b:8a:96:
f9:f7:bb:e5:a1:e2:76:47:7f:c1:31:3d:0b:9b:15:
fb:d8:32:68:f8:a1:43:2b:28:48:b7:97:58:33:88:
6e:e6:66:a2:0a:a9:2e:dc:4a:4c:ea:59:51:13:51:
af:5b:a8:73:92:8a:24:e3:76:57:24:fd:e7:b8:2b:
3e:07:fb:87:13:6f:d3:1b:f2:df:24:c7:3a:7f:f9:
d2:d6:cc:e0:f3:57:89:09:89:36:86:cd:66:df:96:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:DC:EA:C1:E4:28:A7:05:6F:14:03:6A:A3:B5:BF:C6:03:47:1A
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a7:37:53:cc:f3:f9:77:cc:85:ee:e8:2a:46:a4:ac:89:a3:
c4:d1:a8:6e:4f:f0:5c:b8:61:1d:a4:37:04:c0:9e:fe:31:3d:
41:9f:9a:d9:5d:4f:61:54:8d:f3:09:95:69:e7:40:b4:ee:5f:
ce:ff:a4:4a:8d:4c:d2:e5:d3:ca:1f:b0:aa:58:e6:ac:59:03:
be:47:66:04:d1:b2:ff:bb:51:e0:34:85:11:74:d6:c0:82:bf:
ca:60:62:b7:7e:74:88:91:e3:b4:df:16:43:99:61:59:9a:b2:
47:e6:ed:1b:39:c2:02:fa:97:f2:39:7e:84:5c:18:a7:86:ec:
bc:9d:4a:1b:33:c9:2c:40:ea:5f:15:79:43:62:54:8c:36:a3:
67:ae:4d:d1:90:22:c0:1f:de:01:54:10:1c:7c:4a:55:a2:ba:
3a:c3:72:8d:17:02:21:26:1b:b8:c8:9d:57:7b:e9:52:48:f4:
d8:b0:66:e2:7b:e0:cb:f0:9b:2a:d4:1d:d8:53:b4:3d:81:eb:
c1:7d:6d:d1:07:0e:54:cc:ca:34:74:72:0b:e9:ab:62:57:0d:
f3:84:2a:9d:81:c7:3e:83:2f:71:c5:19:b8:e1:03:3b:63:bc:
4b:71:91:59:d6:0d:66:b6:0d:06:24:13:18:72:e5:8f:7c:4e:
62:89:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:26:30 2026 by rpki-client