Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: ryD3erIr8eHJmSZeznDtMczLRH+xXDVJLh2hH8cUpvg=
Subject key identifier: 08:AD:99:6F:F9:0F:43:70:53:7A:F9:7A:85:3D:D0:68:ED:FC:33:74
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01A0DC169030B58FB87D17F7AA7E564D8D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1A92
Signing time: Sat 26 Sep 2026 05:01:01 +0000
Manifest this update: Sat 26 Sep 2026 05:01:01 +0000
Manifest next update: Sun 27 Sep 2026 05:01:01 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: rXhbWSPjyEQUyAhs+AXibvfOSAdyBZMMnVddSFgU71o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:90:30:b5:8f:b8:7d:17:f7:aa:7e:56:4d:8d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Sep 26 05:01:01 2026 GMT
Not After : Sep 27 05:01:01 2026 GMT
Subject: CN=08ad996ff90f4370537af97a853dd068edfc3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:68:bd:6e:11:5f:13:95:e2:5c:77:9f:3e:
a4:f1:91:6d:b9:44:8f:ac:3b:c1:b1:b3:35:b2:f9:
e6:c3:09:60:7b:85:4e:fb:14:a5:03:42:ea:bc:3d:
c6:21:19:3e:cc:77:56:0d:6e:22:ec:52:32:bd:55:
cd:8f:6d:85:f8:1c:38:15:03:92:a2:ea:b1:b4:b2:
fa:0e:af:c8:af:b7:b6:9f:1d:da:57:51:e6:fb:cb:
00:d3:d0:e4:72:48:cf:00:d2:a5:98:30:45:46:9f:
70:75:7d:0f:ce:b0:89:40:11:21:28:b1:5c:49:6d:
08:48:f8:f3:8f:d7:38:64:9c:7d:ee:b9:be:10:85:
df:63:41:70:8a:64:50:77:b1:a3:cf:b1:89:9a:0b:
3b:f3:c3:b7:f6:fe:5a:3a:8b:a7:42:c2:2e:61:39:
7f:cd:15:ac:5f:d6:d8:28:2e:a6:38:74:19:88:ad:
a6:1a:66:bc:4c:44:43:21:00:d9:7b:1c:dd:18:37:
47:24:47:47:38:08:cd:71:05:ec:25:25:33:df:34:
bf:7d:53:c9:64:17:39:92:f0:97:ab:46:10:af:5f:
ba:37:5d:5d:15:be:02:47:6f:7c:b4:c5:35:a9:8b:
6d:ae:0e:44:21:27:17:e1:42:b9:af:6c:bb:1f:6c:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:99:6F:F9:0F:43:70:53:7A:F9:7A:85:3D:D0:68:ED:FC:33:74
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:69:60:a5:65:3d:79:42:4f:ef:3e:8d:7e:5b:60:54:20:3c:
fa:04:4a:b8:cc:cd:12:0f:9c:95:7e:cf:b5:eb:ac:88:4d:57:
3b:68:cd:85:f9:4a:0e:59:c6:0e:21:ff:e1:c2:46:f6:96:96:
47:50:a4:f2:f8:e4:6e:63:96:ac:5f:b0:b1:77:e7:8d:de:6c:
fe:62:fa:49:66:fb:d0:a7:97:4c:f5:e4:69:bc:97:9c:b5:e7:
66:84:29:10:4a:f0:ba:af:b9:51:99:75:fb:ca:7d:c2:5a:44:
5c:8a:88:68:fe:11:95:9d:76:e4:74:00:02:39:30:2a:be:48:
74:8a:18:18:1b:6f:aa:f3:e5:2c:39:86:4f:53:b9:99:2b:d2:
70:ee:16:6b:f5:05:b6:61:dd:b2:df:4d:f8:cf:3a:6a:23:8c:
fc:d1:80:bb:90:45:93:f1:34:f7:d3:24:72:56:86:ad:6b:5e:
0b:a5:4a:f7:e5:d7:10:84:d5:7a:a7:58:fd:7f:62:30:e0:51:
28:81:8c:4e:21:c8:0a:e1:5d:e2:79:79:89:62:18:65:e3:11:
87:d1:f3:fb:47:c5:b6:bf:ea:83:e1:10:87:db:70:29:8b:f9:
5a:da:fe:8b:86:99:ff:e4:56:93:42:42:05:74:12:d3:ab:6f:
f2:cc:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:07 2026 by rpki-client