Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: rGbW7vS60iGqOjVDODSSK+5Fjd+1ihs9xwC5qa3HlTs=
Subject key identifier: 14:56:50:05:0D:7F:B6:48:CE:CE:43:EF:83:99:7D:81:E7:B4:D5:39
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 01A0D7CC28D95A1722F523D61DF77992788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 09:01:15 +0000
Manifest this update: Fri 25 Sep 2026 09:01:15 +0000
Manifest next update: Sat 26 Sep 2026 09:01:15 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: L8ZrAI2YmyjkxNi6M3F9YqvZLP90UYyAYVnvTDg6JQU=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:28:d9:5a:17:22:f5:23:d6:1d:f7:79:92:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Sep 25 09:01:15 2026 GMT
Not After : Sep 26 09:01:15 2026 GMT
Subject: CN=145650050d7fb648cece43ef83997d81e7b4d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:86:c4:82:cc:7d:46:b0:17:21:cb:8f:20:
cd:57:0d:03:59:a9:0f:83:b5:98:0b:51:bd:32:65:
2f:44:8c:8d:a1:40:9e:85:2b:b2:e9:ee:ee:3d:f5:
9e:7c:53:44:0b:2a:74:a8:ea:39:d8:e5:57:cc:d1:
60:fb:9a:bc:5d:04:d5:d0:86:2d:a8:2c:67:58:d5:
ac:fd:2b:8f:da:f0:4e:ac:3b:d4:8b:e3:25:75:4c:
3f:71:d9:ed:92:49:68:25:c0:1b:90:f2:5e:d7:82:
66:98:68:6c:c9:ea:c6:64:ef:4d:3f:67:b4:f8:93:
17:96:69:a6:aa:23:40:c6:c7:a4:a5:0a:91:3d:a7:
9e:e8:a6:db:5c:d4:a5:d7:8d:10:1c:b5:5a:38:ea:
75:d9:43:6c:1a:4f:04:4e:84:a5:00:95:d1:30:7e:
55:16:cd:6b:7b:e0:10:1e:7f:61:d6:e6:2e:8e:f2:
c7:62:15:67:27:1a:f1:7a:86:4f:87:9f:a6:bd:c8:
ce:66:e7:c1:98:f9:82:46:91:07:ae:8b:d3:09:7f:
b9:e4:0d:94:9c:33:ca:ab:c9:5a:f7:8b:ea:b4:4c:
8d:b1:e9:38:fc:18:a1:6b:66:44:ff:6b:fa:8a:bd:
4b:6b:d5:9a:ea:1c:e6:77:ac:2d:e7:96:47:b8:c4:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:50:05:0D:7F:B6:48:CE:CE:43:EF:83:99:7D:81:E7:B4:D5:39
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d5:01:73:17:4d:67:16:07:fa:20:1b:11:86:0f:2d:c1:8a:
4d:4d:64:b5:2f:e2:24:06:ad:9a:72:6e:32:4e:e8:5c:cb:0b:
4a:43:12:1d:38:8a:5d:ad:d3:21:13:c3:99:63:b2:51:84:d2:
a9:42:95:08:7f:e9:a0:35:c6:87:dd:09:5d:92:c7:a0:07:09:
00:79:9e:a4:f9:42:c4:c4:c3:3a:58:20:c4:56:07:00:b4:67:
6c:c6:ae:e8:f4:90:7f:e8:24:17:43:f8:53:23:9e:2d:36:ca:
11:90:56:74:af:15:9c:c6:0c:f7:75:55:74:41:32:d1:7f:3f:
8e:1d:dd:85:04:9e:84:b0:89:8f:d0:5b:27:82:2d:65:66:d4:
a8:ce:e9:7e:3f:73:29:54:14:99:ed:04:e0:53:0e:0f:48:74:
fc:06:80:81:39:7f:be:85:e1:84:95:93:5b:91:e1:00:c4:42:
83:8f:7c:37:12:9f:1b:d9:4a:6b:8e:3e:ed:bc:f1:0b:1c:ff:
d7:d9:c7:3e:57:e0:b5:fc:5f:7c:c8:fa:56:fb:d7:93:8d:0d:
44:2d:cb:70:e6:1f:b2:5a:ec:d0:b2:9f:51:ef:af:94:30:42:
20:02:e3:4e:c4:a6:bb:08:28:a3:6a:fa:e2:c7:a7:f4:10:58:
e4:4c:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:00:58 2026 by rpki-client