Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: ebnV3HAakbtSMJtaJzK9dlSCZZZfEbtq/zYsS7b249w=
Subject key identifier: 24:C5:58:ED:F3:59:75:3A:F5:09:75:2C:D5:62:07:9E:2F:A3:86:90
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 01A0DB049D65C9A72B3B95F01B5AD97F9118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 19E6
Signing time: Sat 26 Sep 2026 00:01:47 +0000
Manifest this update: Sat 26 Sep 2026 00:01:47 +0000
Manifest next update: Sun 27 Sep 2026 00:01:47 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: ojd0CSCu/NOtbN8TB5SesllRBX6kPbRGg2HUgu7Liu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:9d:65:c9:a7:2b:3b:95:f0:1b:5a:d9:7f:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Sep 26 00:01:47 2026 GMT
Not After : Sep 27 00:01:47 2026 GMT
Subject: CN=24c558edf359753af509752cd562079e2fa38690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:aa:c1:04:a0:f3:fb:4b:c9:58:21:65:f1:
66:a4:66:c2:62:b2:a9:0e:40:6a:70:20:34:5d:89:
42:79:42:37:1c:a6:10:9e:ff:7f:d7:27:2b:a3:b3:
a7:ef:46:d7:a3:10:8d:f3:66:8e:76:5f:2a:bb:24:
53:9a:81:2d:c2:60:ef:16:b4:01:95:ea:48:9a:50:
41:a6:60:e9:42:3a:51:a0:12:95:6f:33:da:f2:cf:
7e:a8:77:80:4b:e7:cb:cc:6d:44:74:6f:90:27:4f:
c9:7e:2c:26:49:88:f0:50:30:43:16:e0:d9:e2:d0:
88:41:a8:ba:41:42:33:b2:f9:f0:d1:5b:0a:36:c3:
55:15:16:cb:67:18:9c:7e:e6:fa:06:ed:8a:2a:ce:
46:8d:3b:16:66:e8:f9:97:c0:96:1f:fc:90:d2:55:
83:c4:a6:57:b8:b8:30:9b:a1:77:d2:52:a1:15:53:
60:99:5e:e8:3e:f5:22:99:a3:c6:46:12:b1:e3:80:
da:da:19:a8:3a:1d:ee:01:4c:ee:1f:88:1d:52:f9:
0e:4e:c0:a3:ce:29:10:66:c1:60:26:cb:dd:f3:f4:
09:46:89:7e:24:56:8f:61:77:0e:6e:88:99:4a:1f:
0b:78:21:26:45:fc:66:73:2d:81:08:20:1f:51:2f:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:58:ED:F3:59:75:3A:F5:09:75:2C:D5:62:07:9E:2F:A3:86:90
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:59:05:c4:d6:02:9a:71:84:47:a8:06:af:f8:80:76:16:
42:49:89:a0:93:ef:68:c2:83:68:56:ee:f9:25:0a:5c:9d:6b:
58:48:2d:66:3b:88:5d:ac:d8:00:4b:99:ba:85:b5:a2:3a:68:
5a:c7:19:aa:b0:cd:18:37:1a:bf:84:c4:99:78:88:6c:ba:0e:
a6:ec:5b:8e:3a:3b:36:65:9d:5c:3b:44:0f:47:45:20:f8:0b:
fe:11:73:2f:ca:39:d5:8d:84:3a:ed:56:c2:43:57:04:70:a2:
60:3b:08:66:9b:94:5f:a9:aa:a9:0b:21:a9:a1:0c:76:9a:c3:
f7:c1:26:3e:f6:c9:aa:9f:07:11:56:2a:ca:71:d4:14:07:a3:
a9:14:b8:00:cc:0f:2f:80:0c:92:27:cb:91:ab:6b:ee:d1:16:
fc:f2:2f:3e:3d:1f:93:45:2b:ea:f4:40:06:51:7f:13:dc:c6:
6b:07:75:b2:0b:fd:77:10:77:c1:b5:4a:6a:a3:3a:09:2a:f3:
1d:8c:46:a6:ff:66:c4:91:8a:97:7a:79:b1:6e:0c:9f:b1:95:
c2:13:74:80:82:57:e3:c7:6e:49:d1:a1:80:69:06:f7:24:9c:
84:fa:b7:b1:9c:7d:c4:fc:c5:3b:70:13:1b:d7:02:40:0c:89:
3d:f8:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:58 2026 by rpki-client