Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File: yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier: fiW7K88mdMT6V+KbGD2VC4mCgK8YnZK47vG2QXFFreg=
Subject key identifier: CB:87:B1:8A:8F:02:B9:E1:E9:F9:A9:14:50:8E:C6:DE:B4:46:D5:F8
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer: /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial: 01A0DC84AD92298C5BE4E7759AF173EE1BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number: 0A09
Signing time: Sat 26 Sep 2026 07:01:17 +0000
Manifest this update: Sat 26 Sep 2026 07:01:17 +0000
Manifest next update: Sun 27 Sep 2026 07:01:17 +0000
Files and hashes: 1: 1NUWXpfeKx0vRJ7W8ogpNV41960.roa (hash: 9JS+La/T01/6+T7nA2BAGzeWrsvulpV2YjF982PI0a0=)
2: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: DUIRD8E65qKLCnosQEoOLHHOxHaVS+PnaEp3dqzm+dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:ad:92:29:8c:5b:e4:e7:75:9a:f1:73:ee:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Validity
Not Before: Sep 26 07:01:17 2026 GMT
Not After : Sep 27 07:01:17 2026 GMT
Subject: CN=cb87b18a8f02b9e1e9f9a914508ec6deb446d5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:79:79:d1:21:72:cd:47:9b:77:43:f8:e5:
75:3d:17:af:26:21:78:37:14:39:9e:3d:36:28:8e:
22:c6:4c:42:42:6e:c3:e2:25:58:67:67:43:9f:1f:
c7:a6:98:ab:55:14:b2:12:70:3a:98:5c:de:81:59:
20:22:3a:01:65:82:79:dc:d1:7d:b9:54:a6:1a:92:
2b:70:c6:71:42:4a:f1:c1:85:d7:9d:74:3d:2b:36:
e6:62:6f:23:44:e1:0a:9e:ef:2e:ce:a0:a7:6c:0b:
f5:d8:42:4f:2f:a7:d1:e9:19:26:a6:4a:7c:25:54:
02:3f:aa:67:cd:e4:82:59:93:91:5e:ad:3f:09:9a:
68:00:e7:be:aa:9c:ec:88:02:7b:37:73:f6:5d:00:
79:2a:dc:39:93:5c:f3:67:dc:3d:72:f6:98:b4:e8:
f2:d5:d3:c7:7a:93:ef:9a:80:29:b9:8f:3d:5a:93:
eb:86:ff:d4:5f:46:3f:5a:1a:39:35:77:79:1d:20:
60:2a:b4:d6:87:09:2b:0a:2b:a0:a1:e8:ba:c6:13:
87:71:b6:cb:91:d9:45:c9:c6:fe:0a:e5:5c:9b:0f:
1b:a6:3e:0b:03:e4:62:56:0c:97:7e:85:25:f2:b1:
1d:a2:b1:50:42:f0:25:a9:89:85:15:b9:b3:a6:ae:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:B1:8A:8F:02:B9:E1:E9:F9:A9:14:50:8E:C6:DE:B4:46:D5:F8
X509v3 Authority Key Identifier:
keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:84:ae:16:9f:ae:16:77:5b:66:10:11:11:43:6b:2a:7e:0d:
6a:32:24:23:3b:88:69:f5:e3:24:0d:61:0f:36:9e:d6:41:40:
82:d4:49:d1:ec:b8:77:24:21:a3:50:77:af:86:61:a1:d1:ef:
2d:53:8d:70:38:23:00:16:aa:62:1f:c6:21:42:e7:30:38:a7:
03:db:74:5a:6e:9f:5f:7c:83:95:0b:e4:93:cd:e0:46:6e:f2:
37:24:41:1d:45:ed:14:07:e6:e6:cc:b9:fd:81:0c:cb:3c:89:
11:13:82:0c:4e:7d:68:0a:b6:0c:dc:aa:70:11:01:86:4c:8d:
bc:c2:52:e4:16:38:d7:3e:08:17:21:24:1a:e9:f2:34:19:06:
12:c4:99:a1:71:d1:69:bb:cf:28:3a:45:4f:d4:a9:2b:38:bd:
bd:e7:5a:79:fc:83:9e:5d:6d:a8:b3:a1:22:40:ed:34:3c:93:
06:c7:1a:dd:51:61:1c:e5:80:b5:81:d9:78:16:97:de:72:50:
26:fb:66:fe:9c:69:18:ec:0a:70:b6:a4:c8:eb:dd:e1:7f:34:
8d:66:2b:44:36:ce:dc:7f:31:a9:71:c6:a6:5a:bc:9a:20:86:
6b:68:43:2b:d7:91:6d:c3:b6:12:47:a4:96:b8:3e:62:8c:87:
0f:33:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:04 2026 by rpki-client