Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: v4pQ+3LYpVf8+SvOp9aoKhIGVVsuEajcan2mgOEzdtw=
Subject key identifier: 82:05:4D:9D:FB:FB:FD:B2:96:41:1E:B3:08:06:D0:D9:0A:E1:8A:1A
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 01A0D5A6E3585F97A3A57104C53FE12BAA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: D3
Signing time: Thu 24 Sep 2026 23:01:19 +0000
Manifest this update: Thu 24 Sep 2026 23:01:19 +0000
Manifest next update: Fri 25 Sep 2026 23:01:19 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: JxAQiRoRbD85z/TJSzdRqiSkUNWK51b/VH1AV+G+OhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:e3:58:5f:97:a3:a5:71:04:c5:3f:e1:2b:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Sep 24 23:01:19 2026 GMT
Not After : Sep 25 23:01:19 2026 GMT
Subject: CN=82054d9dfbfbfdb296411eb30806d0d90ae18a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:6e:aa:5a:17:44:0a:93:95:b1:6d:6a:27:
18:92:f7:32:33:82:48:a8:9e:ca:a2:ca:ed:af:37:
25:ca:93:01:9f:30:e2:c4:b7:11:c5:bd:20:4a:87:
ee:b8:ba:d7:70:4b:33:f2:d3:08:43:aa:5c:da:e0:
c3:02:f7:b9:59:e5:0f:2e:6b:3f:f8:b3:2f:65:1c:
98:cb:0a:d0:e9:ad:0d:54:02:4d:55:12:81:a8:1c:
c7:58:eb:f9:cc:75:bf:e7:92:01:cc:b4:b9:dc:0d:
53:07:0a:90:88:97:b5:b5:d0:63:b4:95:9a:17:c4:
bd:22:9e:fb:4d:75:78:d2:99:8a:81:13:00:8b:c0:
ad:fe:74:8a:6b:dd:0e:33:5a:97:1f:db:c3:2b:fa:
cb:5b:7c:cb:18:b3:11:59:90:14:f2:2b:8e:43:a5:
cd:be:05:1a:3f:cd:16:04:2c:0a:98:bd:bb:23:38:
c1:0b:db:71:ba:71:5d:87:4d:f3:7c:61:b7:cb:e1:
1f:a4:a4:ae:f3:96:a9:0f:57:b1:e7:f6:ef:44:9b:
1b:69:5e:3b:1d:cb:58:6a:6e:b0:6a:fc:85:81:b8:
66:19:3a:c3:a1:68:cb:23:fe:8c:29:a6:54:9c:74:
b1:95:3a:d8:a7:94:3e:97:5a:58:f2:fc:79:03:3a:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:4D:9D:FB:FB:FD:B2:96:41:1E:B3:08:06:D0:D9:0A:E1:8A:1A
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:37:fa:ab:b9:5d:0d:90:77:be:4c:4b:02:3d:49:ec:5d:8a:
3f:c2:75:2e:0a:a7:69:5e:e8:79:23:3a:5d:15:86:69:86:bd:
df:67:4b:20:a3:4b:26:9d:44:12:7e:ee:e4:56:8d:e0:fb:f3:
45:01:c9:7c:f2:b9:99:40:55:84:e1:4a:d3:ca:84:e4:90:3b:
a0:31:02:e8:27:22:e8:c4:c1:d8:67:73:11:cf:d4:64:1a:b0:
73:cb:98:7b:9d:b6:f1:13:fe:7d:32:e2:ca:45:e9:a1:e5:f8:
b7:ed:20:0b:03:1b:43:1f:dc:b5:bf:76:47:83:b6:c5:4e:aa:
ee:7f:08:d4:e5:31:bd:a9:92:52:11:02:44:9f:ad:e3:b6:61:
6f:e8:6c:98:07:5f:d4:1b:70:59:f5:a1:88:d6:a8:d6:e5:e4:
63:89:e5:b8:83:09:80:f6:89:0b:f4:ed:57:16:1a:55:8b:1f:
a1:82:7b:40:bc:f2:1d:5d:6b:42:ed:dc:f2:8b:ae:31:b0:a7:
4e:07:c3:fd:bf:16:52:7f:ad:27:13:51:83:a1:b7:24:f6:0e:
c5:30:80:73:54:66:8f:aa:b1:d9:06:b2:ed:19:de:ca:90:1b:
73:39:06:d8:1c:28:e9:ca:f8:ca:73:d2:31:c6:35:9a:ba:d8:
c8:e2:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:02 2026 by rpki-client