Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: YZYeZx8t5WHE0SODzF/G6fWbTqA9+ePHFC4X8vo2nOM=
Subject key identifier: B1:FB:A4:46:92:1A:63:06:54:F2:1B:FA:5C:22:9E:14:04:A9:24:79
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01A11DBF8A9FFAE6A34428588310ED863AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 08CA
Signing time: Thu 08 Oct 2026 23:00:54 +0000
Manifest this update: Thu 08 Oct 2026 23:00:54 +0000
Manifest next update: Fri 09 Oct 2026 23:00:54 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: JKtWeUkZrboNNV5AaauL70A3167ELDXRfWh/TPQAS2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:8a:9f:fa:e6:a3:44:28:58:83:10:ed:86:3a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Oct 8 23:00:54 2026 GMT
Not After : Oct 9 23:00:54 2026 GMT
Subject: CN=b1fba446921a630654f21bfa5c229e1404a92479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:d3:71:fc:4b:93:4a:1a:bd:ec:2b:8c:c1:
f5:dc:ac:27:30:f8:a6:fa:e4:1e:70:56:a8:13:0f:
3e:7a:26:9f:f2:62:5f:e5:87:3d:33:37:b9:34:eb:
bc:f3:d6:8f:82:11:3f:ee:ef:18:61:f5:c2:aa:7e:
73:8d:b4:65:7a:f5:dc:38:66:be:36:c6:c7:1e:a6:
88:67:f7:f9:18:b6:78:82:03:3a:51:a7:1d:4c:d3:
8b:1a:8e:4b:96:71:92:3c:5e:f7:e6:49:d1:a4:9c:
f3:68:20:3e:d3:e3:a2:47:19:88:6c:39:89:b8:63:
ed:e9:b6:51:2a:51:43:48:eb:d7:cc:96:3b:f6:b6:
ec:70:4d:88:d2:91:62:55:45:ac:18:04:44:e7:76:
2a:84:62:a5:59:92:95:02:c5:52:eb:f4:1c:0c:f1:
36:09:a3:b6:0d:ea:4f:97:8c:9c:60:9e:7d:44:86:
89:bd:c6:0d:40:c6:5e:cf:bf:d2:1f:fd:21:cf:e4:
1c:53:01:e9:c0:1c:e6:b2:c6:f2:d5:24:63:31:e2:
93:16:5e:78:66:53:d3:cc:05:50:23:bd:a0:c5:4b:
5f:03:50:8c:0b:43:0e:27:0d:4f:24:58:16:1f:f3:
47:b0:2c:e8:84:2c:18:36:8e:47:ad:d9:05:53:92:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:A4:46:92:1A:63:06:54:F2:1B:FA:5C:22:9E:14:04:A9:24:79
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:77:50:ae:17:f8:42:56:dd:e7:ba:1a:03:af:17:9a:90:4d:
92:20:82:96:93:1c:0c:49:62:a7:06:44:db:6b:ab:46:c1:80:
59:4e:95:e4:08:05:d9:e3:0d:5d:93:24:17:91:77:a0:22:89:
9c:9f:20:76:20:89:26:b1:95:71:4f:e0:7b:78:29:6f:23:b0:
bc:4d:74:3a:e1:c0:66:1c:f5:64:1f:f2:f6:16:b3:88:4d:22:
f0:71:29:01:8c:d4:c9:9d:9a:4f:91:b3:1b:35:ea:91:82:f3:
63:68:78:fd:df:5b:84:67:29:0b:dd:8f:b9:7e:9e:7f:d2:5f:
3b:aa:af:3a:b7:48:b5:29:29:2e:41:65:74:d4:76:75:9b:9a:
a3:70:31:89:5c:ff:3d:8b:75:67:af:d1:5b:db:f6:ec:b2:fc:
26:12:d7:1d:f2:1d:6c:6a:53:cf:71:ef:62:3d:ec:92:ef:00:
f6:3d:15:df:b4:98:3f:20:d0:5f:84:3e:f8:15:a7:0e:67:02:
50:51:fe:d3:cb:77:4f:a9:11:a8:25:e1:36:6e:da:13:2f:31:
95:4a:42:0a:45:e8:28:a7:e2:f4:92:7b:4f:e5:32:52:45:ee:
58:de:68:62:77:d8:40:83:3e:9b:9e:bd:6d:96:e8:12:4d:22:
d7:fe:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:20:57 2026 by rpki-client