Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: kkpf+dE7aY1qQZ77kvaBdwohXWzcwIRhRBBiMc+0HAQ=
Subject key identifier: EE:1D:9F:94:33:BF:62:D8:CF:B5:74:66:DA:CA:6B:01:93:A9:D2:6F
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01A0CB5961A3F65C4D46320290758A120566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 23:00:27 +0000
Manifest this update: Tue 22 Sep 2026 23:00:27 +0000
Manifest next update: Wed 23 Sep 2026 23:00:27 +0000
Files and hashes: 1: hNF8tXFLZNTcaH0gIBkBAvcKbVY.asa (hash: iwvNN6FtVQiEqz8CUKwZlaVHqu5n7aizrJShOvIXCR4=)
2: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
3: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: XFKKnTdyIfprjeDunpdXKD50iEN5Yv54z8vxEAlcSFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:61:a3:f6:5c:4d:46:32:02:90:75:8a:12:05:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Sep 22 23:00:27 2026 GMT
Not After : Sep 23 23:00:27 2026 GMT
Subject: CN=ee1d9f9433bf62d8cfb57466daca6b0193a9d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:21:53:fa:31:57:d7:01:31:4a:cf:41:77:
6c:b0:0e:ba:9a:77:9c:25:99:c7:cb:0c:67:c1:5e:
9c:c0:63:1e:5a:bb:2d:9d:ad:8e:a3:55:a1:23:27:
82:99:32:31:08:00:0a:d9:00:7c:9d:6f:9d:66:75:
33:e0:15:8b:bb:a6:65:31:79:20:da:43:52:75:23:
8d:34:d1:5d:63:ed:48:82:a5:33:60:84:8f:ca:05:
5f:3e:82:5e:5d:f4:0b:dd:d7:e7:7a:71:f5:a5:3c:
18:5e:20:5a:ce:d3:5e:aa:55:aa:71:9a:cf:0e:05:
40:a5:64:d2:05:2d:39:22:84:a3:d9:48:1f:13:f6:
93:6d:27:25:bd:9f:5c:4c:6e:13:29:28:ad:9d:a4:
bd:de:9c:4b:54:10:48:0a:41:c6:32:7a:6d:d1:0e:
cb:c8:89:4d:2f:ff:24:8b:bc:37:db:9b:56:d3:19:
8b:b8:cc:4c:26:17:63:fc:34:48:30:71:d6:4b:7f:
31:b2:c1:45:74:76:25:c5:0b:d5:7b:88:6b:23:30:
79:74:f8:5e:aa:1c:33:03:cd:ed:9d:82:9c:e2:99:
d4:23:57:57:3d:d5:00:29:62:72:41:86:68:f0:b0:
d7:9d:9d:f5:b6:ab:fa:1f:51:d1:f4:ba:9d:e8:20:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:9F:94:33:BF:62:D8:CF:B5:74:66:DA:CA:6B:01:93:A9:D2:6F
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:61:d5:c7:12:b1:6c:c3:6f:65:a9:6f:40:c0:08:56:b1:
da:77:39:f4:b3:a9:95:73:7b:77:1c:f2:45:83:f2:6b:28:5c:
1a:84:93:b9:03:62:81:de:31:6f:13:48:80:4a:a6:e4:b8:f4:
aa:d6:c9:3c:d3:59:e9:16:45:aa:6a:57:b2:82:e1:50:b1:83:
34:61:07:08:fc:03:cb:70:64:06:72:d8:d3:2e:48:80:aa:17:
85:90:ed:18:e1:f6:e0:0f:9d:f1:61:16:ac:9c:d0:22:e7:7c:
e0:ed:3e:9c:29:67:c0:e1:4c:a7:a4:6f:b7:4c:e5:e9:f5:ae:
f7:56:bb:cc:62:59:e5:23:c1:fc:78:6f:3e:65:6c:51:7d:73:
7d:b2:d9:53:3e:96:42:57:de:5a:76:52:36:07:cb:d6:02:2c:
23:a8:2e:76:59:5a:a3:67:35:c6:28:f0:55:46:3d:d3:5c:39:
2d:23:dd:bb:71:d9:f8:6c:01:cb:5c:93:30:0f:7d:c2:20:9d:
13:f0:eb:30:79:aa:cb:06:a2:94:ac:05:9b:98:ad:6a:04:c5:
06:af:90:2c:60:f5:44:03:b5:60:2e:d3:4f:04:46:f8:a7:3b:
ac:87:e0:16:ba:83:13:ce:5b:33:dc:6a:ab:64:97:f6:8e:ab:
ce:a9:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:01:22 2026 by rpki-client