Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
File: yxyjwd2KVS42ekmgIZkGlyKUpnw.mft (raw, json)
Hash identifier: GS0a3L29d2w1gegxwmDpB1y2B2ZiSqi3CyIDQONgOhM=
Subject key identifier: 42:CD:C0:4D:B9:A3:B0:15:AD:4B:AD:78:A8:49:AE:5C:5F:AC:5A:40
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 01A108140C191B28E9823867E3EE4474860B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:33 +0000
Manifest this update: Sun 04 Oct 2026 18:01:33 +0000
Manifest next update: Mon 05 Oct 2026 18:01:33 +0000
Files and hashes: 1: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (hash: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=)
2: U2-pyUEFz_jV5xze95sKqmITK9E.roa (hash: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=)
3: yxyjwd2KVS42ekmgIZkGlyKUpnw.crl (hash: nLF8MCH/Nw25OxyjQTWjMZXHOHtGktV+SnDdb6xFRpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:0c:19:1b:28:e9:82:38:67:e3:ee:44:74:86:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Oct 4 18:01:33 2026 GMT
Not After : Oct 5 18:01:33 2026 GMT
Subject: CN=42cdc04db9a3b015ad4bad78a849ae5c5fac5a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:68:db:b5:51:f4:d0:48:ab:70:bd:43:e0:
0d:f1:42:3b:fb:1b:c0:d1:cf:82:bf:a3:5d:b8:55:
0f:27:1f:9c:43:3f:4f:8e:1a:0e:82:d5:59:2b:85:
af:15:1f:af:ba:ab:39:1e:c1:73:8e:33:2f:9d:4e:
94:e8:e6:6b:75:97:ee:c8:a9:61:da:8a:75:f2:23:
54:27:73:3e:a6:d6:ce:26:e6:55:42:d5:ca:0a:3e:
2e:e7:fe:b0:4c:42:da:7c:58:4d:af:7b:8c:20:92:
cc:54:e6:e1:44:91:99:e4:77:6d:81:c7:bc:b7:e3:
96:04:1c:8d:92:c9:09:a3:01:a5:6c:6a:1c:3e:a6:
8e:19:1c:b1:90:97:a7:6b:8b:c2:d5:93:65:57:86:
0b:08:79:62:71:4b:77:c1:8c:af:b5:02:6c:e0:fc:
d1:0c:22:2a:c0:79:89:d8:7e:84:31:67:77:3f:0c:
5b:6e:cb:91:23:5f:37:1e:92:62:74:0d:64:62:d7:
e3:05:2f:17:34:b8:a8:38:20:ed:65:4e:88:43:f8:
fd:ca:f1:b4:08:c4:e5:f7:f4:0f:a6:8b:33:50:f0:
e7:71:61:55:cb:b7:9d:53:78:4d:49:c2:18:71:fc:
57:bc:e3:ab:f5:4f:97:c6:8e:c7:53:da:07:7e:9d:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:C0:4D:B9:A3:B0:15:AD:4B:AD:78:A8:49:AE:5C:5F:AC:5A:40
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f3:58:95:e7:71:04:b1:ff:e7:a2:66:f0:3d:fc:13:c3:8f:
fe:01:b5:46:d2:8e:d9:ce:ed:ff:dc:86:7d:2d:92:9e:85:0a:
53:bc:a3:0c:a4:05:80:4e:1e:b9:07:39:1f:42:fb:ad:5e:c5:
92:db:dc:54:1a:b3:16:20:57:26:6d:0a:e3:99:e7:3a:5b:c8:
44:6c:af:5e:a8:61:9d:e5:2f:f1:ec:58:ce:b7:b4:22:f9:00:
0c:0f:c2:ea:84:fe:9e:7d:d6:a0:70:e5:a8:12:64:74:5d:60:
d6:f7:94:ca:81:42:3e:59:95:10:c0:e7:76:d5:29:04:35:ff:
a5:27:9d:d2:c5:0b:43:b6:2a:cd:46:ff:b2:7c:ab:57:bb:0d:
9d:26:3c:ac:47:57:27:4b:35:92:b1:c6:d0:34:d9:b5:2f:71:
04:8a:90:7d:56:7e:89:e1:23:84:d6:8c:d5:1c:a8:62:a6:54:
87:4d:63:9a:c1:0e:97:b6:cc:6a:66:22:9c:77:ef:07:50:c0:
49:50:4f:38:03:5c:1d:59:01:da:df:aa:9e:72:16:b1:92:41:
aa:af:cf:bc:2b:70:10:a5:d4:0c:9b:c6:96:2f:c9:24:5c:18:
d7:0a:55:48:7e:ab:52:6c:dc:01:df:11:39:24:f1:df:a4:0b:
48:c7:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:15:50 2026 by rpki-client