Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: WUZY3Ih0tMF1z6NsOjd0UWhDKfpCxePRCyiVQ37yGvA=
Subject key identifier: 4A:2F:39:BF:9F:F0:77:E8:8D:5E:92:88:3D:7C:DC:20:0E:80:4B:52
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 01A0D9F209B2E39C088AC01A6388A29792D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 19B6
Signing time: Fri 25 Sep 2026 19:01:53 +0000
Manifest this update: Fri 25 Sep 2026 19:01:53 +0000
Manifest next update: Sat 26 Sep 2026 19:01:53 +0000
Files and hashes: 1: mhN_hNZ1j8lwPoNsrGHb44SIv-s.roa (hash: hJkkP4O0XxAi785LCkE7R27Ypx1r454excqvJY+K/QE=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: KprkCk0BuOe52fQ4t6KYb8dLSshlsjqp0wHekDc4fBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:09:b2:e3:9c:08:8a:c0:1a:63:88:a2:97:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Sep 25 19:01:53 2026 GMT
Not After : Sep 26 19:01:53 2026 GMT
Subject: CN=4a2f39bf9ff077e88d5e92883d7cdc200e804b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:7e:12:36:22:9a:75:7b:7e:f1:60:55:5c:
a9:52:13:22:25:8c:de:43:88:b9:46:1f:ea:e5:0b:
e9:39:73:10:b4:cb:9e:1b:7c:83:11:af:63:9c:4f:
10:d2:d9:15:01:fc:5a:ea:55:30:6b:56:a2:99:6b:
e3:fa:dc:ca:2f:eb:82:31:f1:6c:cd:51:a2:ba:1d:
ec:1b:ef:46:0a:f4:3c:38:82:ae:1b:7e:f7:4b:7e:
a8:4d:21:fa:14:2d:5b:ae:b1:f4:86:39:90:b2:bc:
50:99:04:bc:91:92:bd:1f:8f:b4:77:82:cb:ba:d4:
a2:c7:76:71:5d:41:3c:dd:c9:95:4c:d0:72:56:8d:
47:44:55:f0:c9:58:12:66:f3:f6:21:9d:81:81:ce:
b2:49:fb:ba:54:0f:cb:50:41:4e:29:34:de:72:72:
a6:d6:95:7a:6e:7a:1f:38:7a:39:75:9c:42:72:bc:
fb:f6:f3:84:40:5e:69:63:82:ff:f1:85:86:03:09:
0f:73:66:28:26:14:e4:fe:a1:62:f2:e1:1b:11:c4:
47:07:48:46:b0:08:80:f8:04:c7:d6:f4:96:db:74:
74:e5:a4:92:cb:aa:a7:6d:52:27:ee:0a:f7:2d:2f:
f2:fe:68:65:20:24:6f:38:e6:2b:d5:0c:28:8a:0f:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:39:BF:9F:F0:77:E8:8D:5E:92:88:3D:7C:DC:20:0E:80:4B:52
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3e:67:e5:f9:c8:ab:cd:35:f5:65:15:73:c5:02:82:dd:e1:
65:de:8d:26:95:e4:65:a0:e4:5f:24:b4:1f:a8:15:9c:47:86:
b3:fd:49:cc:a7:63:81:d0:75:25:f3:83:44:b8:0f:35:8f:58:
d1:22:59:4d:12:51:ae:4b:7d:6a:e1:c9:0f:41:23:80:f5:12:
ef:91:e6:c9:16:1b:3d:98:6f:43:b9:82:ea:e1:d9:87:3d:c4:
0b:c8:25:df:f5:b0:f1:9c:76:c3:37:48:27:14:c7:28:72:44:
6b:f5:d4:c3:46:22:9d:ee:3c:48:22:4a:96:55:90:33:71:61:
2f:03:7d:6f:51:d1:5a:9a:95:4f:3f:06:5d:05:e6:57:1b:24:
e6:0b:6a:b7:da:13:7e:57:33:df:d4:20:e1:5e:62:fe:93:e3:
73:7d:1a:d6:ac:70:dd:62:54:26:24:50:cc:ad:4b:b4:da:07:
01:7a:b1:9d:df:26:e6:5c:db:e9:8a:c0:4d:12:e3:77:8a:e3:
22:9e:e4:f4:f3:0d:78:77:66:b5:9c:8a:e9:d2:56:60:61:f7:
b0:ec:f2:d4:d7:da:74:9c:40:f9:67:2d:59:f1:eb:45:36:c3:
e6:e5:80:b7:db:fb:d6:bd:4c:75:43:3c:95:8f:47:89:3c:96:
77:ba:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:39:32 2026 by rpki-client