Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
File: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft (raw, json)
Hash identifier: uJK7/uQ6PQlccQL93wlkMaGUtCtUUTPoqqEoLNWDmrk=
Subject key identifier: 07:80:D2:BB:2A:03:24:F8:4E:BE:7C:28:D0:8F:9A:E4:51:E6:36:71
Authority key identifier: C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
Certificate issuer: /CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Certificate serial: 01A1DD9522C70047D706C79F9036800F3B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
Manifest number: 8F
Signing time: Sun 15 Nov 2026 05:01:40 +0000
Manifest this update: Sun 15 Nov 2026 05:01:40 +0000
Manifest next update: Mon 16 Nov 2026 05:01:40 +0000
Files and hashes: 1: seZEa9HD6L1qki5KhaAXkUiQOso.roa (hash: tF6XcB8iOSSA8S2CSCzo9TmsiQac4hB9BQ+U2m1E58Q=)
2: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl (hash: Riq1Bmivr0ZcrhGAJV22HdSALBVTuUT/ElRigec+lc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:22:c7:00:47:d7:06:c7:9f:90:36:80:0f:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Validity
Not Before: Nov 15 05:01:40 2026 GMT
Not After : Nov 16 05:01:40 2026 GMT
Subject: CN=0780d2bb2a0324f84ebe7c28d08f9ae451e63671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:29:1f:f8:e8:46:13:a9:32:cd:cc:35:04:
10:13:1a:db:bd:ea:2e:6d:c4:8d:1b:28:02:a6:93:
ff:ec:a8:12:bc:ad:81:57:fd:92:6f:30:d7:d9:c7:
fd:de:78:51:be:6a:23:a0:7f:b2:80:1e:d3:74:c3:
b5:12:bd:a1:33:a4:57:7b:73:4b:ac:0f:dd:ba:e9:
62:7f:8b:6f:9c:ac:85:07:fa:d4:73:94:67:a0:06:
84:c4:72:ca:f0:dd:30:d6:a4:cf:7a:34:81:b8:c9:
3f:64:d9:9a:44:7e:06:71:75:66:65:1b:5a:8d:a2:
38:4a:ed:0b:00:77:e2:16:b8:ab:ae:48:7e:e6:90:
5f:17:17:ab:d7:f8:4e:b2:34:95:11:32:ef:ed:aa:
19:92:b6:90:a2:9c:06:38:0d:3c:34:a9:f8:9b:d3:
fb:3c:a1:e3:dd:18:d4:0a:98:b9:f4:4a:f6:36:31:
59:f0:96:28:de:59:49:b5:f4:61:34:2c:70:fa:6b:
2f:7f:2f:a6:d8:46:cf:2d:7d:51:61:76:99:68:5c:
0d:7d:01:a8:4c:7b:e6:60:a0:44:fe:33:01:87:00:
6d:45:0f:3a:86:ed:e3:9e:f6:6c:c2:c3:0d:74:ae:
8b:fb:08:84:49:20:cb:93:8c:ee:b4:47:4a:10:83:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:D2:BB:2A:03:24:F8:4E:BE:7C:28:D0:8F:9A:E4:51:E6:36:71
X509v3 Authority Key Identifier:
keyid:C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3a:d9:70:9a:da:29:e3:23:34:ea:bd:51:9c:4b:40:c2:eb:
5d:33:6e:dd:50:63:a6:db:16:a5:07:a9:35:f7:98:7a:87:f4:
33:d6:7c:6f:49:2a:ef:05:03:de:a3:92:cb:7f:4b:76:f7:d8:
86:84:50:d9:df:4a:15:fd:14:d3:53:51:ae:cc:78:20:09:31:
fc:75:01:48:4f:08:03:75:a2:37:4b:d9:f9:79:9c:75:90:22:
f8:ea:64:89:67:87:19:fa:eb:ba:4a:b2:ac:c3:c4:bf:a8:bc:
8b:fc:17:9a:7f:32:e9:4c:8c:ca:6c:6e:57:db:0c:78:25:96:
b9:07:be:f1:c4:90:0b:3f:e7:14:cb:f1:5f:b3:ec:44:a8:74:
e1:29:e0:c8:b0:9e:77:f9:5b:11:6f:56:fd:94:a8:66:6a:cd:
b3:bc:f1:a2:63:34:e4:b3:7b:18:36:cf:e3:51:7d:af:87:4f:
bd:59:d9:fe:8f:21:19:49:fd:9c:db:ac:67:17:93:b1:67:30:
29:bf:04:9b:24:89:ed:d3:b8:bc:a0:e0:68:17:ab:51:76:cf:
d1:b0:5b:30:81:8e:45:76:d5:73:4a:41:cd:dd:d8:a4:e5:4d:
c1:18:a9:3a:6a:c3:59:de:54:8c:59:ef:cf:0d:7e:18:fd:3b:
17:58:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:24 2026 by rpki-client