Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: T8DCcwuWsHMvyxfknrGlSv9I8E99fosCjaFGa7S49r4=
Subject key identifier: 8F:65:CE:E8:1A:F4:DA:CD:4E:E5:25:DE:D4:58:82:85:7D:AE:57:76
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01A111F2F3CADECCC790B19AC1542F209C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 12C2
Signing time: Tue 06 Oct 2026 16:01:36 +0000
Manifest this update: Tue 06 Oct 2026 16:01:36 +0000
Manifest next update: Wed 07 Oct 2026 16:01:36 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: xNp8NM1fZz2zZE0IybCzzapQX8NqVQmIa55etgPlJgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:f3:ca:de:cc:c7:90:b1:9a:c1:54:2f:20:9c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Oct 6 16:01:36 2026 GMT
Not After : Oct 7 16:01:36 2026 GMT
Subject: CN=8f65cee81af4dacd4ee525ded45882857dae5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:ff:79:f4:ef:68:da:fa:d6:d9:1b:01:5b:
1e:24:bb:b7:bc:f3:4a:90:a4:80:8f:7a:66:63:23:
b2:6a:1a:a1:72:4e:ca:65:03:94:4d:8c:19:89:07:
5e:6b:72:c1:10:5f:86:02:7d:84:0c:61:dc:9f:ce:
8c:a0:74:4a:d1:5f:2d:33:58:9a:a1:61:82:f5:59:
91:1a:08:e7:83:62:e5:7a:f5:95:f4:e2:0e:25:3d:
2c:2d:ba:09:47:36:ab:ec:52:d0:f8:96:35:9f:ba:
f9:51:96:38:df:0f:64:f3:6b:c6:1d:66:6d:25:c3:
a5:c0:a5:54:69:5c:73:92:51:cf:41:36:3a:09:52:
9b:41:59:e1:a1:ea:09:ee:e3:d3:e4:87:ef:4a:7b:
42:2b:00:9d:77:98:35:b4:72:81:dd:30:6a:d1:57:
5e:75:ed:c4:44:12:45:b1:dd:6f:48:a6:cc:d5:f2:
c4:86:af:cd:54:46:ed:6e:dc:ed:c0:28:31:80:3f:
6a:36:85:91:08:a2:c9:2c:42:8c:3b:5d:7a:77:3d:
53:5a:0a:ac:1d:04:21:9d:72:b9:47:e3:e5:53:36:
44:ce:41:1d:a0:e6:4a:18:75:00:5f:62:3f:59:cb:
e8:bc:08:4f:bf:5b:6d:8c:f6:f9:06:1f:98:a9:59:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:CE:E8:1A:F4:DA:CD:4E:E5:25:DE:D4:58:82:85:7D:AE:57:76
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d9:f1:51:e4:9a:2b:87:81:16:5b:89:db:c9:a9:d1:44:a4:
c3:43:01:db:53:0a:eb:bc:5e:9b:70:49:d4:62:c8:7d:ba:ad:
9d:5c:57:4c:79:14:be:f8:11:a2:26:99:c5:a8:57:59:df:c0:
9f:13:8f:22:39:42:f9:de:19:21:02:a3:c2:be:92:a4:9a:6a:
88:6b:3a:58:3b:a6:60:a4:d1:ff:93:7e:a8:cb:1d:ce:62:bd:
18:7a:76:84:d9:16:47:6d:5a:2e:50:bc:3a:33:ad:8b:58:c6:
69:e1:29:2e:d1:84:c8:aa:e1:cb:64:4b:2d:a7:1c:56:7d:e9:
43:24:ca:5f:6a:0b:27:53:dc:f2:da:15:51:16:8d:0e:48:e4:
50:52:f6:ad:8c:78:1c:d7:2b:65:cd:0f:0c:b8:ed:f0:53:ea:
b5:1b:c4:2d:0f:f7:8b:47:d8:be:13:73:c9:f4:c5:a8:ab:da:
ce:a9:db:a8:75:da:21:0c:81:33:f1:5c:4a:94:3b:42:75:68:
d3:60:08:a1:60:9f:8d:49:c5:88:d2:9b:cd:b4:4a:90:49:0f:
9d:0a:c4:ed:d6:04:e9:84:a9:df:fa:60:9c:ac:89:e0:0b:8f:
8c:b7:7c:fa:f1:e6:db:96:ec:47:23:99:96:1a:3d:de:c7:fe:
4a:d4:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:09:46 2026 by rpki-client