Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: 3GRB+UX/7mTM+mRz6gO1aCfDklniLupVT8sRit6RpFQ=
Subject key identifier: 12:83:9D:7F:73:B5:A5:A5:AA:DC:51:15:27:13:22:90:3B:38:5C:5B
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 01A0E13CFC4A7B8D01F18D9A3215A8EF507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0F96
Signing time: Sun 27 Sep 2026 05:01:05 +0000
Manifest this update: Sun 27 Sep 2026 05:01:05 +0000
Manifest next update: Mon 28 Sep 2026 05:01:05 +0000
Files and hashes: 1: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (hash: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8=)
2: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (hash: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA=)
3: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (hash: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: c+UFfulEaOKMMloxwWtEqdaT+T+T7BNn9mYfpIiwa7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:fc:4a:7b:8d:01:f1:8d:9a:32:15:a8:ef:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Sep 27 05:01:05 2026 GMT
Not After : Sep 28 05:01:05 2026 GMT
Subject: CN=12839d7f73b5a5a5aadc5115271322903b385c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:a7:4f:02:4f:27:f0:ae:95:f0:a9:bb:ad:
e5:d0:59:3e:88:d7:68:03:8d:10:06:48:5a:0a:ea:
2d:6b:cd:42:ff:77:64:62:0c:40:32:62:c8:64:dc:
8e:05:c7:b5:ee:fb:f1:f0:52:29:a6:1b:77:12:02:
3a:e1:80:9e:1b:8e:f2:5b:c9:fc:e6:c7:b3:68:e1:
7a:5c:7e:bd:66:63:6e:cd:7f:bb:d9:53:fb:c0:aa:
bb:a6:5e:7b:f3:cd:9a:62:bf:76:de:09:d8:1d:d5:
b4:0f:7b:b5:65:3d:bf:ae:7c:03:44:7a:98:c5:83:
cd:44:37:3d:22:b5:f0:5a:e2:20:1c:0d:1a:7f:59:
07:30:4f:15:1b:91:be:90:15:3e:75:ce:05:d4:fb:
c6:85:e4:c6:5d:3b:c2:62:3e:f7:78:5f:92:8d:6a:
ff:18:e2:ac:28:27:6d:c0:69:c0:52:02:6f:78:46:
6f:81:82:2b:6d:26:12:d4:bb:d4:28:dd:7e:d7:b4:
e3:80:6a:cc:ef:1a:d0:c7:c4:a2:25:4a:31:28:ea:
8c:d3:0c:30:18:23:07:ef:99:9b:67:f4:eb:64:57:
cb:16:d9:6c:57:0a:4f:83:57:d3:8e:bb:e9:4a:fe:
aa:00:e4:9d:32:9a:b9:17:17:8e:b6:e9:d7:9f:9c:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:9D:7F:73:B5:A5:A5:AA:DC:51:15:27:13:22:90:3B:38:5C:5B
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f1:77:35:a2:8f:a1:53:25:2b:23:48:e5:61:a7:55:5c:04:
ee:12:1c:33:c7:c7:4e:14:29:da:6d:aa:fd:39:6b:08:05:40:
85:f1:03:b4:25:27:a9:7a:cd:47:f5:02:f5:ac:40:13:14:54:
53:66:fb:c3:0c:cb:85:f6:f4:ea:45:29:e2:be:55:a1:27:ce:
ce:ba:c2:60:0d:73:17:22:fb:94:42:92:ca:2e:84:3d:2b:0e:
d8:6c:69:5a:fa:e1:fb:29:11:4a:0d:af:89:05:02:d2:63:91:
ce:45:e3:2b:58:1b:6b:82:e1:6a:fa:8d:4d:3d:21:24:e8:08:
71:a2:53:cb:27:45:a8:e8:af:88:82:12:6e:e7:aa:18:fb:ee:
12:9a:10:5f:ec:e2:47:57:b0:33:d1:be:ab:09:25:ce:59:9e:
1f:19:11:f4:d3:48:c4:8f:3f:db:31:8f:9c:86:13:97:c6:e6:
ad:f1:b8:da:3b:19:6b:33:0e:38:77:aa:cd:9a:c1:52:45:7c:
7d:f3:a7:55:36:8d:5f:fc:56:b6:41:42:9e:ed:e6:a8:b4:80:
e3:04:6d:07:08:6e:85:91:90:1c:bf:e9:b1:6f:25:67:cb:98:
ff:df:a9:a0:79:09:df:3a:f3:45:0b:d0:3c:e3:28:be:37:27:
72:e0:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:00:01 2026 by rpki-client