Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: XckK0R3DhaUieaJLPaFmJYo5M5YK9IY6Eh1yPgTlU0A=
Subject key identifier: E8:6B:27:84:76:EE:75:40:58:5D:11:70:04:A9:6D:9C:18:FD:AA:B6
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 01A0F29E8D2CEE42062C65728A75A320753A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 14:01:12 +0000
Manifest this update: Wed 30 Sep 2026 14:01:12 +0000
Manifest next update: Thu 01 Oct 2026 14:01:12 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: tJXU8uAhfABjlM6s8qiUCJL6kXHY9I6qC/7lEqo/XV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:8d:2c:ee:42:06:2c:65:72:8a:75:a3:20:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Sep 30 14:01:12 2026 GMT
Not After : Oct 1 14:01:12 2026 GMT
Subject: CN=e86b278476ee7540585d117004a96d9c18fdaab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:6d:0b:44:7a:37:fa:b9:0d:9e:68:27:2c:
82:5d:a9:cd:f8:72:c8:66:19:65:6b:39:f2:f5:76:
fd:04:5e:1d:19:29:ef:3b:dc:85:12:4c:c0:76:39:
4a:38:9f:19:aa:1d:e5:37:98:ae:e1:90:31:95:ad:
64:41:22:aa:55:d2:36:5b:3d:b4:17:19:13:0f:c8:
88:be:0a:0f:71:61:2d:c3:ac:a1:23:0e:34:d2:39:
74:41:e9:36:f2:85:3f:c6:0d:81:24:3c:5e:b6:92:
23:77:e3:06:82:ba:1e:90:e1:b9:28:92:6d:a5:23:
55:66:ba:83:99:4f:0a:a4:78:98:40:68:45:a5:0b:
5b:73:64:d3:d5:80:ad:dd:1c:7f:97:a7:0b:0b:32:
ee:94:c4:89:51:b1:58:4e:4d:b2:e5:f3:14:01:7e:
66:c5:36:31:3e:5a:22:95:ae:e3:af:70:6d:c7:87:
82:3d:63:04:61:21:a7:15:b3:a2:43:ad:9f:76:52:
09:d9:02:53:83:aa:76:7f:b2:e9:8c:b0:4a:e1:e0:
ba:cd:64:35:06:63:f2:f4:51:30:91:a0:6e:0c:fa:
3e:f7:53:26:92:93:c0:cb:cc:4a:89:f9:e5:46:30:
f6:1b:6f:3e:cd:1f:05:df:20:20:61:63:66:71:aa:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:27:84:76:EE:75:40:58:5D:11:70:04:A9:6D:9C:18:FD:AA:B6
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f7:84:dd:c2:41:13:ae:98:c6:d6:fd:cc:ff:e5:46:86:5e:
b2:04:82:1b:4b:ec:5a:1a:aa:76:1e:ab:2b:d9:27:26:9c:ee:
24:4b:fd:dd:c9:c0:01:5b:56:64:91:29:bb:f3:a2:17:f6:17:
7c:b4:01:83:bc:71:80:4f:e3:60:b0:c3:30:4e:03:b3:89:e3:
e3:c0:b8:c1:65:6f:1e:e6:62:4d:ed:ab:e8:c6:8a:03:2a:9a:
96:96:0b:d8:ef:83:15:f2:87:36:b5:43:f8:d1:0a:09:d4:27:
80:03:30:57:54:ff:de:6c:a0:29:b6:3a:37:65:45:fc:e7:2d:
25:4b:d5:4a:24:fb:ff:88:9e:3b:7d:a4:dd:fb:b8:d5:fb:ea:
fb:8c:c5:29:07:a7:33:f8:43:b9:c3:71:96:fb:d1:f1:9b:0e:
49:f3:76:88:e8:a5:70:f4:32:a7:2b:56:a3:b0:3d:89:03:84:
ce:53:91:79:16:12:18:23:6e:f6:fd:95:ed:b8:ff:b3:24:0b:
65:d6:a5:94:d1:40:36:f6:68:e6:32:87:92:3d:26:7e:11:1d:
a3:79:d0:8a:4b:57:6e:48:51:ce:7c:59:22:5a:e5:ee:ca:d3:
8b:8a:73:71:d3:87:10:8f:47:80:99:a9:11:e1:6f:5e:e1:7f:
7f:dc:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:19:11 2026 by rpki-client