Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
File: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft (raw, json)
Hash identifier: JIVJvjpG+RXzTD9K3hO7YHFD78BzAioIa4BVhAtGLi4=
Subject key identifier: 8A:DD:55:86:DE:90:F9:08:A0:A9:8E:B7:7E:B8:FD:B7:00:50:01:E8
Authority key identifier: C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
Certificate issuer: /CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Certificate serial: 01A0D314F059A10C4C42A0064CDF450EA43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
Manifest number: 05
Signing time: Thu 24 Sep 2026 11:02:39 +0000
Manifest this update: Thu 24 Sep 2026 11:02:39 +0000
Manifest next update: Fri 25 Sep 2026 11:02:39 +0000
Files and hashes: 1: seZEa9HD6L1qki5KhaAXkUiQOso.roa (hash: tF6XcB8iOSSA8S2CSCzo9TmsiQac4hB9BQ+U2m1E58Q=)
2: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl (hash: Q6t6UVhnDXTKNT4+p7g4ccfKgsc+NpeHyLvgY5o317o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:f0:59:a1:0c:4c:42:a0:06:4c:df:45:0e:a4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Validity
Not Before: Sep 24 11:02:39 2026 GMT
Not After : Sep 25 11:02:39 2026 GMT
Subject: CN=8add5586de90f908a0a98eb77eb8fdb7005001e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:2c:9e:f9:0e:36:76:7b:a1:48:f0:c1:df:
34:61:48:50:7a:34:b8:72:86:09:dd:78:1e:5b:4d:
fa:24:cc:62:03:1f:45:90:53:c7:60:be:75:82:6f:
25:80:21:2d:ce:81:f8:58:44:fb:81:79:c7:5b:fc:
45:9d:41:a2:cf:8c:75:dd:9d:a9:89:ef:78:74:51:
a8:b5:78:54:dc:f1:52:91:79:fa:46:2c:4d:39:1d:
5f:8f:30:81:1d:dd:5d:1f:e0:f2:a5:ce:c7:b8:93:
2d:56:42:a5:df:a7:36:ee:d1:14:e8:28:ce:9c:22:
55:b3:08:b7:de:cf:50:72:70:c6:95:f9:ed:c2:31:
4a:25:4d:d2:fa:98:40:dc:ff:7c:2e:41:a9:6e:d9:
c2:86:97:35:05:fe:dc:c7:c1:18:3a:78:5f:4e:ce:
94:8d:24:2e:1e:7f:47:d3:ec:7a:49:be:a2:f3:a1:
89:2b:9e:bd:11:fd:72:12:ef:3a:66:b7:9a:8f:ed:
55:a1:b5:cd:f5:36:97:8e:05:4b:84:e0:8d:46:7f:
86:eb:ea:1f:10:e2:a3:2f:85:22:47:65:67:99:ff:
6e:19:f7:8f:6b:06:5c:10:46:77:81:a8:f4:2f:8b:
b3:e5:60:57:38:3a:16:9e:a2:48:7e:a1:36:a1:c8:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:55:86:DE:90:F9:08:A0:A9:8E:B7:7E:B8:FD:B7:00:50:01:E8
X509v3 Authority Key Identifier:
keyid:C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:15:40:37:d7:68:f1:30:0d:1b:85:7b:93:cf:0d:d4:92:f8:
e9:7a:a8:48:de:ca:6a:df:ed:4c:42:3d:55:49:e5:32:0c:49:
cc:57:69:79:f3:07:7d:2a:54:e9:00:30:09:54:df:6a:a5:c6:
46:f2:dd:12:79:83:c0:72:18:9d:af:23:37:ab:7a:51:85:9a:
f6:e7:70:d3:06:10:c7:c3:25:32:48:32:ac:6b:54:5e:58:d6:
da:f2:75:c1:29:6a:99:93:6e:d9:45:2f:33:83:21:d8:f0:8b:
e9:ad:1e:e5:b3:53:2d:8a:16:9f:ec:cc:ae:ce:eb:0c:5b:0c:
04:ac:82:84:aa:25:5a:fb:ae:a3:5b:79:b0:49:ca:68:0c:68:
5d:cd:7c:0c:9b:71:7d:a4:eb:52:ef:55:1b:b6:b2:f4:ce:15:
72:bc:3d:ba:58:89:b7:06:e5:e2:13:6d:1d:57:75:da:95:b6:
18:f9:0d:d0:dc:8f:f8:94:8a:9d:84:fa:2b:30:af:de:a5:11:
9b:e8:1f:47:33:4f:16:f8:5b:f6:51:e2:54:1b:a5:6e:cd:31:
bc:5f:05:33:77:c9:61:48:c9:40:d7:65:b7:36:45:a3:0c:e0:
4f:3d:8e:98:b6:4b:ad:05:dc:f7:8b:dd:b6:a1:0b:79:30:ed:
d7:78:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:02:40 2026 by rpki-client