Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: sMQpnK8gDjcc7d4qr3FhhL6jULdFvhgjLc3GkLGqY4I=
Subject key identifier: AF:CF:5C:3D:9E:95:11:65:8B:C8:BD:A2:F5:1A:D1:8E:20:71:87:30
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 01A0D872BF3F843240941C604CF61E610772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 1100
Signing time: Fri 25 Sep 2026 12:03:13 +0000
Manifest this update: Fri 25 Sep 2026 12:03:13 +0000
Manifest next update: Sat 26 Sep 2026 12:03:13 +0000
Files and hashes: 1: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (hash: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: qCUnUFf+zJd1Cqg5+3mjbtnFMOQWuD3SXJs5TOczY0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:bf:3f:84:32:40:94:1c:60:4c:f6:1e:61:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Sep 25 12:03:13 2026 GMT
Not After : Sep 26 12:03:13 2026 GMT
Subject: CN=afcf5c3d9e9511658bc8bda2f51ad18e20718730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:af:c0:ce:d3:94:eb:b2:51:64:e8:19:2b:
54:75:b2:11:8b:be:3f:51:58:25:0a:23:05:8c:eb:
92:fc:14:d7:02:4a:04:18:63:0e:f8:5d:01:06:6e:
69:6f:39:3f:cc:d3:69:4a:79:c3:85:7f:1b:9e:a5:
00:3c:aa:1f:3e:e7:2f:e9:59:28:d2:80:50:94:4a:
d2:6c:73:41:38:10:02:3a:e9:7a:9d:65:57:05:a9:
10:83:98:65:1d:cf:05:cc:f7:51:25:f6:bc:ed:ff:
e4:d1:3e:cf:9f:69:b3:3c:c9:fd:e3:eb:b4:9d:da:
97:06:54:d8:7c:9c:25:26:ed:80:8a:e6:cd:fc:4f:
c3:13:7d:1c:6c:17:3b:21:e7:1d:fe:7c:d4:2e:99:
14:0a:fe:b3:55:55:b5:b2:2e:4c:f4:77:ca:df:b7:
0a:af:4e:d8:92:22:94:35:28:d7:e4:25:57:6f:e8:
a7:7c:5b:24:13:cf:13:9b:a3:d1:c4:b5:64:32:0e:
59:c1:ed:27:45:6f:14:f7:d0:79:d2:91:f4:f0:12:
4c:ea:b3:1f:a7:0c:a3:8f:7a:a2:e7:f2:8a:d3:72:
d4:e2:16:dd:04:ef:4f:b8:16:58:34:ce:81:66:31:
df:ad:3f:ba:26:96:cd:49:ee:67:83:52:88:cd:61:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:5C:3D:9E:95:11:65:8B:C8:BD:A2:F5:1A:D1:8E:20:71:87:30
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7a:d1:9e:6b:c9:6f:2b:40:c9:18:5a:e8:c8:cd:e7:92:3b:
6d:e5:0d:1d:aa:24:fd:54:2a:b9:6b:a4:8f:d0:62:12:4d:bd:
eb:87:8d:09:83:c3:75:a0:8e:9d:93:03:84:45:45:fb:f2:d8:
33:a9:75:a6:7b:5a:b5:87:b3:3c:dd:ba:ed:a8:a9:e3:20:7b:
0d:1a:37:b8:58:67:34:91:31:a4:4e:9c:e2:98:fb:ca:e1:14:
82:90:dc:3f:62:77:15:8c:b5:28:d5:a2:2b:80:7c:be:bd:be:
a8:dc:b3:bb:f7:23:be:af:c1:fd:df:fd:d4:b1:eb:7e:f4:20:
49:e2:e8:c5:47:61:aa:ec:86:d8:0f:ed:de:92:b7:5b:c6:16:
2f:07:be:d5:8f:48:79:86:28:71:cc:d0:ee:46:87:46:43:66:
fe:c2:3c:f6:25:ac:9f:85:80:fa:b4:bb:7b:92:84:07:bb:dc:
d2:ef:8c:84:67:cf:8e:1a:60:2e:59:4c:f1:7b:37:24:f3:07:
7c:60:94:e2:15:7d:19:dc:dd:fe:86:37:41:ef:80:63:ed:45:
c7:01:d1:bd:bf:72:50:2f:ec:22:08:fb:ce:15:11:4a:b9:2e:
b8:e0:8b:18:2a:d1:4d:76:22:2c:ad:53:8c:31:3a:25:05:a4:
ea:48:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:09 2026 by rpki-client