
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: pMKhTnuhS9HI6FiNh5YN35dFSnqmVVp0CHOLQHjt4Yk=
Subject key identifier: 6F:0F:D3:F3:77:82:02:53:53:8D:3D:3C:C3:AE:EA:76:72:F0:CD:61
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 01A0DA28D98D3AE7772516585764E72A50E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 1711
Signing time: Fri 25 Sep 2026 20:01:45 +0000
Manifest this update: Fri 25 Sep 2026 20:01:45 +0000
Manifest next update: Sat 26 Sep 2026 20:01:45 +0000
Files and hashes: 1: c09YJVIz1gAeeersG-N_XV14zPo.roa (hash: A4WIJzWdDctFX+Ynr5FMyCdWVozIwFvvlX52iKZ/Phw=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: gYMuTEybj73FmVHVZvLQOvaxor5w7DMRVdEVbpXiNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:d9:8d:3a:e7:77:25:16:58:57:64:e7:2a:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Sep 25 20:01:45 2026 GMT
Not After : Sep 26 20:01:45 2026 GMT
Subject: CN=6f0fd3f377820253538d3d3cc3aeea7672f0cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:5b:b5:88:87:4e:db:60:70:53:97:fd:81:
d4:83:c2:c1:85:09:ff:40:c1:dd:f4:80:3a:35:e7:
17:4b:34:0c:18:97:d6:8f:a9:f6:7a:f3:92:70:94:
b5:20:d0:4a:95:d4:97:96:56:dd:52:3c:bb:7a:ae:
51:f5:da:87:40:a8:01:b7:f3:8c:59:18:1c:67:3c:
90:7c:4e:03:1d:15:c8:1d:1d:48:d8:f6:b3:69:b2:
2b:25:0c:7e:0e:6a:3c:4a:ee:c6:b1:1c:d1:c8:4b:
4b:3a:30:e3:75:b5:2b:d9:23:e0:52:a2:1f:02:89:
24:8d:e6:96:dd:0b:b5:2c:ac:00:b6:55:7d:9b:f6:
33:98:22:99:4a:09:d4:f2:c8:55:3e:d2:88:13:95:
ef:31:e6:59:29:ec:c4:06:03:6f:6d:fa:35:3f:62:
71:ef:c7:15:3f:c9:e7:d6:3e:fa:6c:f2:7f:04:ee:
f8:f8:7d:45:8b:42:ea:38:d8:ba:69:10:9d:ab:1b:
23:d4:37:e5:32:d2:dd:ea:97:66:0c:22:75:3b:7a:
c0:c8:71:d5:0e:46:ea:ba:cb:3f:71:6b:dc:64:8a:
e8:1a:5d:ad:45:a2:67:6a:f2:b2:6b:d1:dd:e3:ea:
da:fe:9b:7b:5d:58:34:a0:ef:88:b4:2d:31:fc:75:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:D3:F3:77:82:02:53:53:8D:3D:3C:C3:AE:EA:76:72:F0:CD:61
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:22:3e:20:ab:0a:99:c7:5a:1f:c4:fd:2b:9f:76:8b:36:f5:
59:b7:2a:0e:57:14:1b:e7:46:da:1d:8a:37:28:9c:e7:24:93:
7c:ad:61:74:0a:a5:8c:1a:3d:dd:d2:b9:7f:b1:f5:fa:15:e5:
8f:c2:12:e8:81:d1:b8:be:c0:74:a7:cb:46:f7:a4:c9:4b:48:
82:7b:96:0c:a8:77:50:aa:47:ec:93:cb:b8:80:ae:3a:17:77:
f3:69:84:9c:60:cc:04:23:7d:b2:e7:3d:e8:41:05:a6:a6:f0:
e3:60:b4:08:7a:47:7a:ef:24:7b:d1:fc:c4:5f:da:ec:14:3e:
a0:c0:28:a0:11:16:38:27:76:9b:5d:bd:18:da:3b:85:68:88:
d9:64:d0:87:67:86:c8:16:98:98:0c:86:d1:d5:8d:bb:59:cf:
d3:7e:03:88:5e:31:fd:c9:b6:27:55:9c:36:62:ed:95:39:ec:
7f:f1:36:8f:d0:3d:7a:4d:77:5b:7e:79:0c:b6:eb:1c:c1:3a:
db:2f:40:b8:81:c6:c4:b5:09:be:ab:6b:07:8a:56:8f:e8:eb:
d6:eb:e5:1f:4a:d9:75:8b:cb:70:83:c9:f5:67:a0:b9:2c:6b:
f9:5f:7f:6e:c7:af:e0:5d:56:b3:6c:ce:23:5b:20:e7:cd:92:
92:4a:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:57:17 2026 by rpki-client