Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: LA55NTkziCWK17eu8Pw/i96yidoC1bZsSw9vXbb0VdQ=
Subject key identifier: D1:D2:12:9F:76:52:6C:FB:18:C8:CB:17:0D:4A:21:DF:72:53:C8:13
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 01A0EAE520632F0FA13FD762749034CF5C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 02:01:19 +0000
Manifest this update: Tue 29 Sep 2026 02:01:19 +0000
Manifest next update: Wed 30 Sep 2026 02:01:19 +0000
Files and hashes: 1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=)
2: RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa (hash: jo0fvpPNSx2y4hIOQ1O6FYntic5wvU7TSTfcrJMmjLk=)
3: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=)
4: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=)
5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: ZnQlnZxSEvQwbULG2/t2BKIYTXtnOJEeR6QEw2Za/EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:20:63:2f:0f:a1:3f:d7:62:74:90:34:cf:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Sep 29 02:01:19 2026 GMT
Not After : Sep 30 02:01:19 2026 GMT
Subject: CN=d1d2129f76526cfb18c8cb170d4a21df7253c813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b5:cb:66:ef:2e:02:66:f3:dc:83:3e:cf:8e:
d9:49:9b:8e:21:a6:62:4e:99:01:b0:af:0c:98:7b:
3e:72:fd:74:d0:81:d2:16:5e:98:90:76:47:8a:b6:
95:4d:6a:4e:e6:ec:31:2c:5a:27:a2:47:1b:c8:f0:
b6:3c:98:5d:88:9c:fa:64:15:23:cb:25:69:16:dc:
1a:3a:bf:a1:64:54:8c:5f:61:d0:f4:78:4f:c9:a7:
7f:70:f2:91:d0:65:d5:d2:06:f5:7e:76:e3:d5:09:
8e:ba:be:dc:38:75:33:26:da:35:f9:1f:3d:3c:0c:
92:4e:e7:5d:64:c4:25:f8:74:ec:3a:83:fb:30:3b:
cb:1b:80:97:39:a5:31:c9:de:b0:1b:ec:5b:0c:f1:
c7:ba:1a:1c:73:e9:77:53:b6:62:24:e9:87:40:90:
be:2f:c5:2b:3e:f2:1e:22:d8:cd:ec:77:a1:88:cc:
6f:e4:4f:bf:8c:52:14:14:51:78:f5:57:ee:e6:ff:
ac:82:8b:5b:c4:e9:3a:e6:bd:29:5a:51:3d:05:2b:
cd:d5:ae:e0:d0:c2:4a:59:99:16:bf:20:e4:13:7c:
c5:c8:10:61:ca:8c:df:f3:ba:85:83:18:85:91:12:
99:09:1b:69:10:47:ce:01:9a:65:ba:b5:5d:4b:20:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:12:9F:76:52:6C:FB:18:C8:CB:17:0D:4A:21:DF:72:53:C8:13
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:ee:ec:71:77:89:33:72:6d:0a:7f:e5:b9:68:09:5d:07:
70:23:fd:e5:72:30:8e:7c:84:3d:ff:21:6a:f6:93:11:08:16:
34:76:45:67:38:fb:d5:ab:5c:bc:7f:a4:b1:37:38:87:c2:71:
9d:e6:e1:08:04:32:3f:8a:58:06:91:12:f8:95:ff:dc:3b:97:
3a:64:9d:6d:1a:d6:4e:6b:2c:f4:d9:ea:43:1d:e0:85:01:e1:
ea:01:a0:b2:25:ce:8a:eb:94:48:bf:97:d1:b7:e1:39:48:98:
69:40:87:42:cf:d5:ea:78:6a:92:a7:8e:84:2c:75:2a:76:47:
d3:2d:ed:c5:a2:66:4f:e1:78:f9:84:3d:c9:0a:7d:d3:1f:ae:
89:82:6e:ca:db:f2:f4:60:f9:67:b5:5d:d8:46:6f:6e:c0:d5:
7e:c3:8a:3c:e1:7c:f0:ac:85:4a:09:90:4e:d8:51:db:c4:92:
d4:f0:d4:c3:3b:54:57:6c:df:1d:86:c4:67:88:82:69:57:19:
c6:32:8b:4b:a2:48:4e:c4:2a:2a:e5:88:88:8a:8a:96:f8:20:
e6:2d:7c:47:05:88:59:7c:95:79:ec:da:3e:a7:4f:27:9a:c1:
94:89:8d:62:95:81:79:ce:dd:b3:f7:d6:cb:61:b7:57:01:11:
25:7d:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:42:05 2026 by rpki-client