Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft (raw, json)
Hash identifier: S45E+OzXjcgTTtmiGRv86whNl0kAN1cpp0lvQ8Zk5ys=
Subject key identifier: 32:8D:44:39:7A:A7:9C:3A:DE:DE:BF:45:0C:5F:99:29:7D:11:2A:AA
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 01A0D7CC29FAE17AB5BDEFFB375A7265FC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:16 +0000
Manifest this update: Fri 25 Sep 2026 09:01:16 +0000
Manifest next update: Sat 26 Sep 2026 09:01:16 +0000
Files and hashes: 1: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (hash: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=)
2: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (hash: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=)
3: yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl (hash: pCd4t1uKocQcPLOf9cbxl0/V+hM9Zrvvk+De/RsZo+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:29:fa:e1:7a:b5:bd:ef:fb:37:5a:72:65:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Sep 25 09:01:16 2026 GMT
Not After : Sep 26 09:01:16 2026 GMT
Subject: CN=328d44397aa79c3adedebf450c5f99297d112aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:08:80:57:3b:d9:c8:de:00:1c:58:3b:a1:
c8:c0:e3:e5:ea:bf:1f:a1:a9:1a:25:05:4e:6e:dd:
0e:a0:d1:07:4f:bc:f3:4c:54:a5:0f:12:d8:bf:5b:
29:8a:51:b2:4e:c6:f1:a9:f7:f2:f7:41:78:59:70:
3f:ed:a8:49:53:9f:ab:16:54:79:dc:b1:14:8b:2a:
45:b7:5b:ce:19:78:06:d8:d3:2f:36:c0:ee:b5:a0:
00:34:65:0a:45:79:5b:6f:ad:15:80:38:84:1f:fd:
27:06:08:2d:bf:86:85:b3:80:f9:b1:f4:e9:dc:21:
72:92:c3:c1:7f:22:92:ca:b9:a0:f0:fe:c7:9f:d3:
3c:61:3c:ae:74:3f:cd:35:0b:98:ab:e8:ae:23:a4:
2c:18:2f:ff:84:0d:1d:df:28:de:12:81:13:04:96:
12:a7:aa:48:f4:f4:3a:b4:db:e0:55:19:cb:78:ab:
3b:d5:ea:53:db:34:ed:7e:74:bd:9e:4b:a3:d0:fc:
bd:13:f2:23:af:d8:c5:a1:94:8f:f3:93:e7:98:f1:
16:fa:4d:6f:b0:f6:a7:4b:3e:a7:0c:e2:c1:17:1e:
19:1b:de:67:b6:ce:e9:4e:3d:f2:03:9d:0f:20:fd:
9c:1c:85:21:0d:08:6a:b6:e6:24:f2:ce:c1:0e:05:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:44:39:7A:A7:9C:3A:DE:DE:BF:45:0C:5F:99:29:7D:11:2A:AA
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:c3:10:a0:70:4f:5c:57:a1:ef:1e:d9:93:50:97:f5:52:
52:a8:65:23:0c:db:21:c7:dd:b2:3b:fe:b6:c5:12:6d:63:cf:
63:14:a2:d4:08:d3:bc:aa:7e:76:5c:63:76:80:ae:90:04:84:
ea:d6:d8:bc:b4:e3:51:f5:e7:44:dc:a0:4f:70:0b:d9:00:ed:
23:7a:06:7d:8c:44:6f:a0:ac:4e:b3:08:ec:a4:21:28:4d:fb:
d7:b0:67:78:0c:bf:a8:3b:1d:9a:54:21:d6:e0:f6:ed:2e:45:
09:c5:d8:36:86:ac:f5:74:fa:24:2d:0f:37:e5:7c:52:72:dd:
22:ab:00:04:75:40:9a:5f:32:33:83:69:6b:54:84:9b:25:ce:
3b:ef:e0:f1:83:df:35:05:8a:3d:fd:21:26:a4:b4:8e:1a:a4:
e1:d9:9a:a9:4b:3c:da:05:54:1f:bb:be:e9:55:fc:f5:d6:46:
40:a5:92:38:00:85:f5:49:01:1c:98:42:a4:fe:e5:79:a5:37:
45:dd:65:ec:d4:6d:3b:de:50:62:23:2b:b3:3a:49:8a:0a:ff:
0d:9f:a6:31:e8:77:da:2e:aa:e8:60:5f:c0:56:8e:bc:ff:af:
b8:f0:d1:35:ab:f0:a3:a7:87:26:ca:a4:b9:bd:78:77:30:b9:
82:cf:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:09:50 2026 by rpki-client