Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: +46gwFME1/kDdncWbjR5fefERNSq0lsjlIZSm0tZ+c8=
Subject key identifier: 34:CE:45:BE:59:BF:82:6D:01:B5:BB:6F:F4:23:31:EA:B5:BE:CB:3A
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 01A0D87268BA96437976EBF0E68A3FA29E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 13C2
Signing time: Fri 25 Sep 2026 12:02:51 +0000
Manifest this update: Fri 25 Sep 2026 12:02:51 +0000
Manifest next update: Sat 26 Sep 2026 12:02:51 +0000
Files and hashes: 1: CK8OJfLCISBl1ouaHEnbpGJbOnw.roa (hash: pt47KAPdqRnN1dkS3yo4ZlI5RRvRrx+uI3TswhWMkuU=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: ieVqJ8wrNAVjQY2ONqXjuLHlNN6AAXjQxWeG2bMEWF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:68:ba:96:43:79:76:eb:f0:e6:8a:3f:a2:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Sep 25 12:02:51 2026 GMT
Not After : Sep 26 12:02:51 2026 GMT
Subject: CN=34ce45be59bf826d01b5bb6ff42331eab5becb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:28:5a:b8:c3:35:c3:4c:8f:6a:67:71:b1:
f2:67:49:dd:53:1c:c4:98:3c:31:16:99:64:57:09:
f2:93:90:a5:bf:7e:9a:19:81:49:ba:a3:4b:90:1c:
61:8f:6d:a6:20:ff:c5:06:bd:27:56:fe:7c:9f:fd:
72:43:cb:dc:56:cc:a1:9a:f9:df:04:6d:98:17:81:
51:84:13:88:ea:1a:77:20:cb:bd:bf:9c:76:ef:d2:
f3:88:d2:42:e8:54:44:33:eb:b3:bf:be:f1:32:62:
86:1c:0b:31:41:74:c3:03:e1:22:63:1c:c8:d5:76:
d3:d1:2a:8b:ff:e6:d7:d9:6a:b9:8b:88:ba:15:15:
c9:bb:f5:c3:04:68:58:25:fa:e3:29:d1:d0:a0:59:
77:7e:a0:54:e7:07:f0:fc:8e:91:ab:cd:b9:b2:da:
24:62:47:4f:4d:83:d7:eb:08:6c:25:27:49:e6:ab:
3a:45:b1:4d:2c:da:22:03:9c:17:8d:8e:d1:e0:26:
de:1b:54:3f:a5:66:16:39:28:e1:2f:21:7e:a5:d4:
f6:07:a1:99:fd:cf:4b:c4:43:55:8e:22:d3:f5:28:
4d:8e:d1:3f:a3:6a:1f:53:60:26:c6:90:02:98:3c:
30:5a:d0:ca:86:33:12:06:fc:97:9b:81:c9:2d:d7:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CE:45:BE:59:BF:82:6D:01:B5:BB:6F:F4:23:31:EA:B5:BE:CB:3A
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:03:47:25:e1:7b:26:8e:66:3a:82:9d:69:b4:e8:b9:2e:6f:
52:5c:19:94:e7:0a:58:ea:83:22:fc:52:c3:ed:bc:27:29:c7:
7c:af:92:f7:47:b3:00:00:2e:83:fc:52:60:a5:29:39:5f:bf:
16:39:28:e8:25:20:c2:3e:22:a4:33:2c:70:58:2f:b5:55:e2:
72:53:06:1e:72:f2:cd:69:3f:63:ab:a9:e2:c3:02:b9:00:f1:
f0:73:39:4c:b3:a1:ba:3f:de:c9:5c:49:d9:06:25:fb:f6:84:
4f:a7:9c:7f:97:2c:39:a1:1f:f6:b7:d0:9e:33:db:18:2a:39:
71:36:14:2b:44:b4:e6:1e:d0:21:06:ce:56:f4:12:8a:88:68:
08:5a:5f:92:af:b3:4f:33:48:e0:2d:c9:57:e8:cb:7b:05:ce:
62:1b:ae:3f:89:57:75:2e:87:87:80:5c:d9:1b:31:4f:f1:c6:
43:f9:d3:6c:3b:80:4d:57:14:34:d1:8d:ca:e4:79:3a:ba:3d:
f4:82:22:a5:e4:ba:74:0a:31:d4:6f:37:11:aa:d9:f6:8e:c8:
1d:01:b7:05:73:d3:34:61:2d:c2:38:93:82:40:ad:49:1c:44:
07:00:97:68:ca:3b:76:77:14:27:24:a1:5b:32:13:9a:28:cf:
54:22:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:37 2026 by rpki-client