Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: GAHnRxa1FQR3/mOW9AEOVoDJBHka8L0mzC98i45JyQ4=
Subject key identifier: AF:99:19:64:92:13:41:E2:32:33:1F:4C:65:8F:A9:A3:3D:E6:D5:A8
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 01A0E2F572FCBD825B40CFFAF9345B5870ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0793
Signing time: Sun 27 Sep 2026 13:02:11 +0000
Manifest this update: Sun 27 Sep 2026 13:02:11 +0000
Manifest next update: Mon 28 Sep 2026 13:02:11 +0000
Files and hashes: 1: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (hash: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=)
2: 9Px8z48R321lmmBfJpYZPXnmcpo.roa (hash: 2fda7ZTjyIH4HX9HuDuDyOX1MzL7aXtB6nPUNzP2md8=)
3: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: q1sIKxSvsPDudGSipH2+V8S2qZTlY6L9yU1BG9zHV/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:72:fc:bd:82:5b:40:cf:fa:f9:34:5b:58:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Sep 27 13:02:11 2026 GMT
Not After : Sep 28 13:02:11 2026 GMT
Subject: CN=af991964921341e232331f4c658fa9a33de6d5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:ab:87:5c:8f:f3:4c:4e:5f:32:70:31:b0:
08:2c:0d:9a:79:2b:61:de:c8:18:2d:cf:37:8c:83:
de:0c:6f:1c:8c:6e:48:21:e5:c6:4d:f7:4f:10:00:
d0:af:60:b5:67:3e:a8:dd:71:f0:1d:6b:b0:6c:ab:
d0:af:e3:70:fa:b4:4a:94:dc:34:1d:05:d0:45:08:
78:c6:3a:b9:9b:ab:79:16:1b:3a:28:8f:b3:97:a4:
03:dd:7f:16:80:88:6c:83:28:4d:0a:17:62:3d:89:
14:d1:99:6b:c4:25:8b:32:36:df:07:08:cc:80:a2:
9e:dc:79:d6:2b:b9:95:73:60:b9:11:f3:4c:5f:7d:
64:66:4b:e7:95:99:f3:f0:8d:20:b5:b9:df:4c:bf:
eb:36:f2:e1:cb:57:ee:a5:1b:f4:37:3c:a2:78:31:
29:8f:b9:26:72:5f:44:af:48:16:8c:2b:45:e0:9a:
33:a0:48:38:c9:4f:be:be:38:3f:4c:43:2c:86:d5:
b1:25:2c:b0:17:9e:c3:7d:8f:83:4d:d9:70:1a:73:
cf:e7:55:c7:5a:a3:3d:f9:2d:c2:4a:c2:1d:9a:d9:
fb:44:80:6c:d1:2f:0a:11:84:61:71:e9:c9:41:a7:
d2:d1:84:68:3d:91:c0:e2:07:31:c8:39:e4:9d:ce:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:19:64:92:13:41:E2:32:33:1F:4C:65:8F:A9:A3:3D:E6:D5:A8
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ec:ee:3b:65:18:58:1f:14:e1:cd:bf:8c:7b:84:df:f3:a3:
65:04:05:4d:b9:bb:a3:ff:8f:3e:ef:0f:84:3f:f3:e0:06:c0:
b3:37:db:32:cf:f3:0b:b3:eb:4e:d8:e2:0d:0e:21:5a:52:bb:
02:b4:28:74:ce:19:d2:58:67:58:33:77:aa:47:cd:8b:35:f9:
27:78:13:04:8f:9f:08:22:ab:53:d3:9a:e5:39:92:94:40:d1:
c2:55:09:fc:63:39:51:e2:7d:c6:09:c2:9b:f7:3a:16:ea:ed:
9d:94:a2:f3:ab:c8:07:d3:9f:6d:e9:d7:b5:40:ce:94:4d:eb:
44:66:7b:24:ec:f8:ee:dc:b6:bd:93:6f:98:f1:45:76:34:28:
9b:39:43:c3:c6:bf:78:7b:0d:eb:8b:68:b3:ef:54:c2:bb:74:
84:c9:80:84:c1:9c:a8:c1:54:4d:9b:10:c3:37:e8:a3:29:69:
ae:b4:9f:b5:8a:94:ba:8f:31:56:d0:de:55:a5:d1:c5:81:73:
83:44:eb:fa:24:2d:13:59:2b:d7:36:32:c4:6d:6c:61:31:33:
7f:58:1d:5f:15:3f:05:d1:28:d7:ae:1f:5a:46:34:6a:f3:dc:
9d:c7:93:b5:ff:8a:e6:c4:81:53:47:a9:d8:17:b4:31:f5:22:
fd:b6:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:56:27 2026 by rpki-client