Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File: ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier: N5Z4VPB8NzPV3GYOz7iSsM+Y5Bb3IAYQj5Zk153bZPY=
Subject key identifier: F2:AB:72:0E:CD:29:01:D9:3F:1A:72:E2:49:9C:7F:68:FE:DC:35:D1
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 01A106CA150C050297AB5E5B22DDB87AB959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number: 1A2B
Signing time: Sun 04 Oct 2026 12:01:09 +0000
Manifest this update: Sun 04 Oct 2026 12:01:09 +0000
Manifest next update: Mon 05 Oct 2026 12:01:09 +0000
Files and hashes: 1: 0EM2DLpWR0hKooZEYgbXrfFcQtQ.roa (hash: SsTJAnExUh1Qxhe7FPd8ZLJLMbQ9C4W+BVCTEcC6ZMw=)
2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: VMIp32kpwuK9cmiqnwXNiOfU0/ogggoDHfHIAn0DGcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:15:0c:05:02:97:ab:5e:5b:22:dd:b8:7a:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Oct 4 12:01:09 2026 GMT
Not After : Oct 5 12:01:09 2026 GMT
Subject: CN=f2ab720ecd2901d93f1a72e2499c7f68fedc35d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:5b:37:a3:cf:39:80:34:97:b4:e1:ea:7b:
45:29:bd:a4:69:82:9b:69:54:b0:24:f7:c5:10:5c:
2e:01:44:c0:ba:ce:ed:1e:77:b0:6c:3d:78:f8:cc:
82:97:2a:b4:60:5b:5d:8b:3f:14:74:a0:57:47:74:
0e:15:c8:b9:95:c7:b0:2d:83:cf:76:71:3c:74:9f:
6c:87:be:d7:af:36:ec:3e:6a:aa:50:25:90:38:82:
ba:28:11:a4:51:e9:e5:95:24:14:11:ae:f1:17:d6:
43:1a:8e:90:c9:82:d7:35:ec:10:0b:96:3d:32:ac:
73:f3:cf:8f:60:21:ab:91:44:6b:5a:11:d1:40:2c:
b3:a4:90:6e:bc:a8:99:64:06:25:4d:57:52:e7:5b:
39:2b:dc:b5:5e:61:e8:ff:87:c0:fe:5b:da:54:9a:
5f:a0:02:eb:12:6b:8c:4c:b3:47:9e:fa:6a:d0:e5:
d9:a1:d6:17:54:b1:6a:98:5f:35:32:da:58:04:14:
5e:85:3a:21:71:b3:f4:46:c2:2f:0b:91:54:3b:c4:
0c:e6:19:56:a3:19:0e:c7:77:75:d6:28:4b:5c:51:
d0:19:99:0b:1e:03:4f:d6:c6:f3:3b:4a:4c:c9:f2:
2b:04:c0:2e:8c:ba:64:88:5b:80:6b:fe:8c:89:99:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:72:0E:CD:29:01:D9:3F:1A:72:E2:49:9C:7F:68:FE:DC:35:D1
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:29:a6:e6:62:70:8a:49:af:2d:c8:9e:24:7f:8b:3d:c5:
6d:bf:85:83:69:4b:63:1c:47:c3:24:60:cf:18:b0:19:50:75:
ea:0e:88:3e:fb:67:97:04:df:0e:e2:80:20:7a:88:35:f2:cc:
c2:32:85:10:5e:78:fa:af:11:46:6a:d7:6b:fa:58:d5:43:e2:
19:08:b7:b0:cc:1a:28:38:3a:01:ac:dd:f5:f2:f2:b8:d4:73:
6d:fc:e6:59:03:f4:04:65:14:d3:61:42:99:db:15:a2:ba:3c:
e5:d0:97:7b:d9:40:eb:4a:e4:1c:c3:b5:5d:e5:d8:f3:a8:ea:
e2:dd:f3:07:59:e5:0a:fb:89:44:33:3f:65:eb:9c:9a:4a:01:
43:46:01:86:0e:ee:5d:58:60:0c:23:85:d8:df:27:c4:0c:6a:
32:9f:2e:c9:3d:89:a9:00:94:3d:b2:19:4d:79:01:13:35:30:
15:4e:b2:12:62:b9:af:3d:50:a4:5d:4c:c6:94:32:b7:ad:f3:
01:eb:bb:23:e7:4b:bd:39:a0:63:12:89:37:7c:d7:1e:d9:ae:
b2:ee:a7:ae:65:c2:9e:9c:a3:67:90:c2:0f:77:d0:64:e4:64:
b0:f1:5e:c4:b1:d7:29:a8:bc:d7:68:48:1f:43:72:b3:60:f8:
e4:45:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:30:28 2026 by rpki-client