Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: R6Jjn446NUoX+c68BO5kozL9wueSQu464E1dJRyaA1c=
Subject key identifier: 1C:D0:95:20:77:29:45:2F:01:B2:0D:38:26:CC:DD:80:4A:C6:0E:C7
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 01A0D5A6B9BF7A84D2B6F00C36D66D4DE21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 084D
Signing time: Thu 24 Sep 2026 23:01:08 +0000
Manifest this update: Thu 24 Sep 2026 23:01:08 +0000
Manifest next update: Fri 25 Sep 2026 23:01:08 +0000
Files and hashes: 1: 5InSNvZa6NPl2XUprALXEFXI9UU.roa (hash: 4bmKKFl9D3EfIWxPnS9UJq20YLXV0+HL+F87z2lo5Zo=)
2: Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa (hash: Ud/VdUNLwM8U8Wf4qqElLCvSQBMZGtbKM6rNdGJ2xtI=)
3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: mj3l+s8LEUXY0Pu9V3jQvG0bDGuWeV1+Y0Z6RveSZfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:b9:bf:7a:84:d2:b6:f0:0c:36:d6:6d:4d:e2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Sep 24 23:01:08 2026 GMT
Not After : Sep 25 23:01:08 2026 GMT
Subject: CN=1cd095207729452f01b20d3826ccdd804ac60ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:53:3e:38:87:05:62:53:0f:cf:4e:84:d2:
2c:b3:eb:3b:f8:13:d0:6b:3b:56:e1:aa:bd:49:24:
8d:13:da:a9:65:c4:08:7e:5e:39:e4:7e:98:32:7e:
84:d7:3c:9f:84:1c:df:1a:47:cb:1f:b1:59:2e:73:
9c:d0:2e:1a:49:11:c7:18:79:53:79:ff:54:b0:04:
5a:c8:88:1f:df:b1:5f:af:79:74:02:be:f3:18:95:
32:27:cb:d6:17:e3:23:df:77:ca:33:3c:f5:56:82:
76:be:66:b3:58:15:73:ae:f7:aa:4a:46:7a:bc:e4:
0c:91:f6:4c:4e:cf:9e:04:7d:e9:8d:18:9c:e8:54:
c6:ee:66:df:59:ee:30:b5:f4:f7:b6:22:0a:e1:7d:
4b:1d:17:73:cf:6e:d3:47:a7:ee:c8:5a:e8:a9:91:
92:b2:b1:2c:13:ed:f4:3e:ae:66:d6:3b:f0:40:a5:
8b:55:af:47:d5:1a:38:37:2e:30:b6:e8:cc:5a:92:
ef:cc:7e:fb:bc:0c:e5:2c:13:6c:b2:23:c7:6e:9e:
15:98:c3:eb:34:58:da:b5:dc:5b:ef:2b:ff:6b:ab:
21:05:c2:12:12:b4:b0:02:9b:5c:05:b4:01:1c:51:
56:5e:a7:24:0a:e9:7e:53:2d:1b:e1:c4:49:e8:6b:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:95:20:77:29:45:2F:01:B2:0D:38:26:CC:DD:80:4A:C6:0E:C7
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:e1:06:c2:31:ea:96:4d:f4:ae:47:8d:c8:8d:c4:d2:ba:
50:0a:00:36:fb:54:02:96:d6:6f:5d:73:c7:2b:c6:fd:34:13:
25:22:8f:9c:b8:b0:96:94:ad:57:35:ff:3e:f0:a2:d4:56:81:
65:3c:cf:8f:5b:c7:7b:ee:71:70:5b:1b:52:3b:e7:10:44:44:
db:2b:1c:55:37:a1:b8:d2:9d:07:dc:e0:d8:b8:cc:32:e2:f4:
bf:b1:ae:d9:cb:3e:af:c0:84:e5:7e:62:41:23:15:ac:b6:82:
f1:4b:35:8d:a8:91:98:13:e9:09:a7:e0:14:c7:64:44:82:de:
5c:7d:2a:09:f7:0c:91:fb:36:bb:9d:6f:9e:9d:e4:f9:d5:00:
ba:00:0c:57:99:6e:72:f5:ef:6a:06:9e:f6:cc:dc:fb:40:28:
79:a0:66:47:80:72:0a:1c:f2:b7:4c:d6:5d:64:e3:e2:b3:b3:
07:b7:36:33:da:d1:29:0b:4f:0c:41:1d:4c:44:46:8b:66:f1:
cc:d1:5f:95:5b:3a:04:00:63:93:18:68:48:2c:a0:85:77:5a:
a8:94:13:bf:28:91:be:3e:61:d9:91:e8:e9:27:a7:80:74:8a:
1c:42:4e:d7:ee:2c:36:51:98:cc:91:66:a2:3d:46:3b:31:91:
12:08:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:51 2026 by rpki-client