Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: TaTmWmSE5NoD1dtbxQWoipFOaUtlWm5yJmHF5QOMRrU=
Subject key identifier: 99:F4:AA:D8:29:0E:A1:4C:17:36:04:58:30:C2:5F:80:42:F9:D5:1A
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A0CA101D94E6A0DB273F20B8A9B12B199F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1A82
Signing time: Tue 22 Sep 2026 17:00:48 +0000
Manifest this update: Tue 22 Sep 2026 17:00:48 +0000
Manifest next update: Wed 23 Sep 2026 17:00:48 +0000
Files and hashes: 1: 1a_toOOiv8tXiZYffjGgfMuBA-8.roa (hash: pFz9qcCm/4iGepqsXHJ4CPP66DTUL1J4HSiyJSCbo88=)
2: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
3: ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa (hash: 0oocPWz99WNT9kZost7wmNAl0YljvpI9UsdUFWKlstg=)
4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: lWlgMA7Opy2Pp/d6VuXgrpmcvtCHwZsndXldttDQ+no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:1d:94:e6:a0:db:27:3f:20:b8:a9:b1:2b:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Sep 22 17:00:48 2026 GMT
Not After : Sep 23 17:00:48 2026 GMT
Subject: CN=99f4aad8290ea14c1736045830c25f8042f9d51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:21:5c:b6:cf:35:ed:10:b3:2f:b0:d8:72:
15:2b:e0:85:d5:7f:b9:97:0b:fd:f5:33:b1:71:a9:
c5:34:4b:d1:c4:84:a3:8d:a9:ba:22:12:08:c1:5f:
da:c1:29:92:a3:61:91:f6:d3:d1:e6:c4:2f:a3:ca:
e4:38:8d:c2:7e:1a:02:e9:ef:ce:b6:05:f9:ba:a8:
1a:bf:aa:1c:dd:d3:e0:8f:0e:e8:9e:d4:85:a8:b6:
47:94:c2:28:25:62:2f:f8:11:77:48:04:b5:6f:4e:
1a:77:df:23:80:72:55:60:08:66:79:8a:09:a2:a8:
a8:37:b4:93:0d:f2:79:e9:8f:f9:a7:7f:64:9d:5f:
ea:92:a6:8f:33:8e:71:99:60:fb:09:7e:70:94:12:
5f:57:e2:9a:1b:77:73:6c:9c:a2:5c:04:c7:64:00:
08:2c:1d:be:72:04:1e:b3:b2:81:31:4d:0f:60:2b:
45:d6:2c:03:c5:cb:47:7a:3e:ad:38:09:c3:d6:43:
0d:2f:1e:4b:da:c4:14:1a:e0:58:f4:c4:0b:10:78:
f5:d0:0c:d5:0b:f9:30:19:be:88:23:3a:83:8b:32:
e7:4d:d3:04:46:39:35:ab:9d:f0:4f:99:91:7d:c9:
82:87:8a:4b:b5:13:89:28:78:ae:b6:d4:3a:78:0b:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:AA:D8:29:0E:A1:4C:17:36:04:58:30:C2:5F:80:42:F9:D5:1A
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:b9:ec:68:ce:a7:c3:4c:4e:d7:59:96:ed:a6:a9:be:67:
fd:2f:76:e0:08:f5:1a:81:fb:6b:69:6a:d8:8e:cd:31:29:dc:
bb:e3:be:52:60:c8:1a:3d:9b:97:6b:b7:a2:de:9c:30:b1:e5:
16:0b:15:9f:c2:c3:26:d4:8f:d9:3a:9f:2d:93:79:be:c7:78:
5b:09:75:94:43:5b:aa:08:98:5b:67:90:f7:54:49:76:dc:60:
93:5c:a5:d6:ea:8b:84:c1:ce:63:4f:90:28:b9:e8:9a:df:7a:
47:04:32:b8:d2:94:76:d3:5c:32:2c:fb:d7:9e:03:3c:6c:7d:
39:e1:64:68:ef:89:da:0e:eb:f6:43:16:53:cd:15:48:1d:84:
7d:14:a7:13:f9:10:e1:d2:d1:96:59:ff:61:e8:50:ec:3c:e1:
bf:e2:7f:88:ae:f3:9c:09:a7:d7:d5:b6:9f:c8:8f:61:c7:4f:
20:6e:bd:c3:a1:a5:c8:5c:73:25:f7:41:3e:b4:d9:a8:20:ed:
d1:82:8a:10:c6:75:30:9c:22:b6:26:42:01:9b:83:1f:1a:bd:
e5:67:38:14:40:34:0b:9b:58:55:9f:cd:fd:6d:2a:e9:7d:12:
c7:66:d4:b3:89:f0:71:9d:86:2b:7f:8d:5f:db:98:36:bc:77:
35:16:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:55 2026 by rpki-client