Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: M1DBVA4c/ZyZv7MWzI48wHpBdMi8JsLuR0PW9Nd6Ecs=
Subject key identifier: 34:9D:F8:E1:2D:5F:6A:2F:6C:84:18:33:44:EC:80:1B:D4:0A:60:3A
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 01A0D9BB6B2DF5A804517204876270666FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1A05
Signing time: Fri 25 Sep 2026 18:02:13 +0000
Manifest this update: Fri 25 Sep 2026 18:02:13 +0000
Manifest next update: Sat 26 Sep 2026 18:02:13 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: hfP1rhhhSJoRDuyheLmr/m4AHW6cSnGhLeYfFvRJKfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:6b:2d:f5:a8:04:51:72:04:87:62:70:66:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Sep 25 18:02:13 2026 GMT
Not After : Sep 26 18:02:13 2026 GMT
Subject: CN=349df8e12d5f6a2f6c84183344ec801bd40a603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:e5:3b:72:2d:c6:6a:c3:55:95:9b:56:75:
33:20:95:a2:7c:dc:b6:bc:98:ed:02:bb:0c:45:26:
7e:af:24:19:57:e4:18:7a:0a:2e:20:53:45:a8:40:
6f:84:e9:f6:ce:8e:4d:9b:56:71:d4:6b:b1:a0:b0:
89:d3:c6:59:34:69:5b:dc:b9:86:d7:1b:a1:af:92:
98:fe:3f:2b:f6:0c:bd:4d:ac:3a:d2:94:6d:db:de:
9f:46:ab:23:f4:ef:13:86:e4:b2:57:31:c4:af:85:
49:21:4b:d6:17:c3:fe:65:f4:85:f8:73:63:88:7f:
8d:65:cd:43:ef:fe:b6:d9:e7:5f:00:78:30:b2:6f:
48:b8:6d:f3:66:d3:02:13:1e:95:6d:b2:34:1e:c9:
c7:99:f9:a3:30:29:f6:c3:fe:90:6e:e2:d9:a6:39:
4a:cf:b2:d6:ee:46:34:3a:ee:fe:ec:72:23:3e:f1:
8a:f9:5f:6c:b9:7a:69:4e:ea:5b:61:e2:f1:7d:84:
90:90:ab:a1:47:d7:ae:ea:70:98:31:17:35:74:1b:
a1:8d:c8:9c:17:b6:69:8f:b7:04:bd:8c:3b:e1:d5:
30:e3:56:4c:f4:e0:13:82:9f:56:48:d5:1d:36:16:
af:50:c2:0e:6f:94:e5:45:4e:04:8a:c6:ca:78:cc:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9D:F8:E1:2D:5F:6A:2F:6C:84:18:33:44:EC:80:1B:D4:0A:60:3A
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:35:df:8c:a1:14:c0:2e:bd:c6:5e:87:25:a7:6f:dc:d8:
1c:20:92:a4:cf:ca:7b:bf:87:8d:32:ac:84:d5:65:84:26:1e:
8b:58:0b:cd:25:53:ca:86:90:36:b6:43:1f:04:a4:58:de:61:
4c:6d:1d:8c:ac:fa:cb:0a:fc:b3:8c:81:22:83:c1:e8:30:79:
3d:27:67:69:a9:ea:cb:8c:6d:29:39:3d:72:1d:25:6c:45:23:
53:d3:fb:88:a7:51:b1:8a:f7:95:bc:3c:f8:f1:45:0a:f8:be:
3d:4f:c7:a2:84:c2:2d:54:d8:b2:8c:f4:c0:9c:57:57:99:9d:
64:af:6a:1c:39:91:38:02:dd:2a:2c:ad:e4:d9:1b:e2:c9:c8:
01:fd:e6:05:ad:64:b3:f1:e1:bf:f7:f0:cf:d1:70:18:6f:40:
82:c9:16:f5:c8:83:4b:a2:b6:e2:c0:5b:44:bc:9e:7a:17:db:
0f:be:bd:e5:0c:5c:16:36:a7:24:4c:8f:d9:41:0b:6c:7a:24:
a6:51:73:78:8b:90:86:3d:a7:c3:96:ce:2f:0a:79:69:64:cb:
e4:8b:19:8e:29:0a:f5:6d:5e:63:3b:10:97:19:ac:5d:7b:53:
31:57:e4:18:c2:81:73:18:16:36:ad:9d:8a:d7:ff:7c:8e:8d:
b4:b4:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:50 2026 by rpki-client