Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: kOnF209uu2XwNzCB1fOXrGAWkrVhIxU8LXmPRpGeleo=
Subject key identifier: 6E:DD:7A:9A:E5:C0:DB:14:EA:8C:75:5D:88:A9:08:36:63:FB:1F:EA
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 01A10C94F9AE9D531914062A0CBCBE117EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 10CE
Signing time: Mon 05 Oct 2026 15:00:52 +0000
Manifest this update: Mon 05 Oct 2026 15:00:52 +0000
Manifest next update: Tue 06 Oct 2026 15:00:52 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: aBsl1D9jbC07Jw7kcHGKAuz6yUGq2xQ6HPARSbXB8Tc=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:f9:ae:9d:53:19:14:06:2a:0c:bc:be:11:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Oct 5 15:00:52 2026 GMT
Not After : Oct 6 15:00:52 2026 GMT
Subject: CN=6edd7a9ae5c0db14ea8c755d88a9083663fb1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:1d:0d:67:52:85:7c:d9:7c:f9:05:58:af:
a3:d3:e8:9e:5e:33:24:b4:1d:c6:6a:45:f6:71:7f:
1f:96:40:de:39:e1:8f:2f:1f:0f:c2:c1:7f:e1:b2:
04:5c:c6:b3:48:9f:35:3e:bd:8c:a2:87:f4:2c:96:
37:27:d5:7a:35:fe:c3:6c:9d:e9:38:4e:02:aa:12:
bd:86:2e:4e:a0:42:4c:3f:ac:87:30:f5:f0:99:57:
a2:9d:62:13:9b:c0:55:99:84:62:3a:43:d4:98:9f:
cc:f9:9f:d5:9a:f0:30:5c:3b:ed:e7:0a:ef:eb:cd:
7e:90:d0:c9:0f:9e:81:e2:0d:fd:97:e7:41:11:44:
36:97:61:30:08:15:e4:22:09:f1:74:af:e3:b3:a9:
3b:99:4b:61:0d:07:02:ca:8f:99:f6:21:e6:f1:79:
e7:32:54:2e:d9:e2:6f:46:bc:27:75:9e:cc:da:f7:
4a:93:f6:7e:95:0f:02:68:69:67:82:16:0d:11:c5:
1f:17:a8:52:6c:ee:89:84:eb:81:40:54:fb:39:77:
f2:2f:9d:eb:49:9e:4e:9d:22:5f:14:d0:99:c2:5d:
36:b8:45:fc:fe:27:63:69:a9:f6:8b:36:f9:28:88:
17:e2:4c:98:92:14:25:f0:ea:84:af:2b:f3:70:b4:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:7A:9A:E5:C0:DB:14:EA:8C:75:5D:88:A9:08:36:63:FB:1F:EA
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:8e:5f:81:f1:65:2d:22:7b:3f:93:e0:07:0d:d9:b4:ec:
e4:91:cd:a9:43:50:f0:b6:1d:13:d1:14:2f:3b:48:bf:c4:1f:
e8:6b:a4:92:0c:9a:7a:94:ec:16:c6:e0:6f:40:b6:26:e5:c2:
eb:60:7a:f7:d1:e6:d8:75:65:0b:7b:ab:2b:cd:bb:62:45:10:
5a:ac:fd:29:df:3d:6c:35:f5:63:27:f6:72:e7:3e:bb:30:36:
5e:1b:3a:f3:51:90:2c:aa:c2:79:ee:cd:8e:b8:34:ea:4c:06:
1a:c0:3b:cd:1b:e9:b6:9f:e8:af:d7:6d:3b:46:fa:4d:68:2a:
a9:98:c0:12:d0:0c:2f:c6:ab:4b:17:ea:8b:e8:f6:4d:65:08:
8f:40:e4:fe:48:35:d8:d8:c7:be:d3:83:7b:ba:8c:ce:a9:6e:
bb:35:d5:61:c4:80:d8:07:ed:9d:37:11:b0:f8:4b:7e:a5:c8:
03:c4:ee:30:93:6a:73:d6:77:c9:06:ce:ec:ad:23:6d:9e:2e:
cd:85:38:08:58:19:94:b3:50:43:05:db:ce:99:a0:06:e8:f5:
26:1c:36:84:a1:5b:7d:d6:b2:84:ec:01:8b:62:37:0a:94:2a:
85:b1:95:a8:95:91:a2:0e:21:93:91:bc:38:2b:d2:aa:9a:d4:
cb:10:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:48:07 2026 by rpki-client