Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: 8kOySz8FSh1L9LKclTrUJt45QRNnupw5VpyeoNBt+rY=
Subject key identifier: 02:67:1E:A3:2F:1B:12:BD:DB:7D:47:15:3A:E9:EB:4D:A3:77:DD:34
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01A1DCEFFB4FE1D9905B3600035AA0285513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 02:01:17 +0000
Manifest this update: Sun 15 Nov 2026 02:01:17 +0000
Manifest next update: Mon 16 Nov 2026 02:01:17 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: uNc3LlWlGAk2ufX8RRQZiZSpTbrG1cYJvXW8E4SN8XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:fb:4f:e1:d9:90:5b:36:00:03:5a:a0:28:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Nov 15 02:01:17 2026 GMT
Not After : Nov 16 02:01:17 2026 GMT
Subject: CN=02671ea32f1b12bddb7d47153ae9eb4da377dd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:58:d6:b2:e4:12:38:36:d8:fd:fe:bc:09:
97:82:e2:b7:b7:a3:32:72:fb:17:3a:87:68:d0:60:
08:99:4b:82:d7:4a:91:1c:99:46:27:a4:ac:71:1b:
ea:a8:a1:07:9e:48:06:d4:4b:8a:ac:4a:66:b5:d1:
fb:f0:9e:cf:7d:fc:78:47:28:4a:16:2b:11:e0:8a:
c8:51:db:bd:67:6c:d7:0a:18:4a:5d:64:47:78:30:
87:ec:f7:e6:57:fa:6c:ef:dd:31:80:a9:68:06:cb:
cd:b2:2d:35:46:6b:79:1a:6e:4b:44:cc:b2:ca:de:
42:18:77:59:89:ac:30:df:9a:a0:4a:48:76:14:56:
28:a8:63:94:4a:b3:88:84:55:6d:b5:2e:62:f1:3b:
ba:da:7b:e2:ca:cf:bb:98:c8:5e:2d:ce:09:7a:ae:
6a:96:3d:ef:a6:be:11:0d:06:97:e0:3a:5e:13:73:
1e:4f:da:b1:34:54:30:37:15:d9:46:c0:f1:47:89:
93:13:f9:e3:fa:3e:e9:c7:1f:b3:29:9d:fa:0a:67:
89:b8:c9:7f:1a:8d:cc:66:84:0e:82:4a:fb:c7:aa:
89:88:79:b4:db:38:db:7a:07:ac:21:0c:05:f7:3a:
96:58:f9:12:15:d0:1a:27:2b:6c:17:f5:08:86:57:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:1E:A3:2F:1B:12:BD:DB:7D:47:15:3A:E9:EB:4D:A3:77:DD:34
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:82:b8:f8:47:35:77:a8:43:00:c9:c5:7d:2c:35:d5:48:
a9:bc:c7:d2:09:9a:d0:8a:86:1f:5a:02:b6:2b:f1:2b:57:8d:
dd:45:3f:a1:2d:e7:30:39:99:7a:04:1c:30:74:1b:0c:9b:53:
29:7e:e6:cb:92:bb:7b:20:54:77:31:8b:ad:88:87:0c:90:05:
e0:18:d9:2b:f8:0d:e2:86:45:b6:a5:dd:46:8d:8e:93:8c:ad:
71:6c:cf:f2:44:13:f9:cf:f9:56:ed:69:25:38:78:26:6a:63:
33:bd:46:50:64:7e:52:d6:a4:cf:d7:ab:3e:94:3a:7f:32:d2:
a4:e2:15:5e:1b:ce:c0:24:78:2d:56:a1:c0:b2:f2:13:a8:35:
2c:e8:52:ea:4d:58:e6:50:a5:65:5f:37:ad:d6:82:3b:77:21:
93:3b:cd:8d:88:d4:c2:10:b6:0d:14:f1:85:51:c3:8e:e0:c3:
17:5b:2a:fb:04:32:a8:b6:f0:bc:72:07:07:6e:2b:9a:e0:87:
2a:64:05:61:e4:9f:7d:c2:cf:92:28:d4:6a:25:a9:96:5a:30:
fa:60:da:16:c3:f4:be:83:95:fd:86:92:c3:14:1e:09:38:65:
26:14:33:51:ba:7a:60:d5:58:6a:dd:a6:c5:9f:52:ad:fd:30:
b0:c5:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:44:50 2026 by rpki-client