Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: ifBDc/lNcNApH2rz45N5t+s+29kn+8jG75VS6DlgMAE=
Subject key identifier: A3:F6:B1:96:BF:BC:B9:53:85:68:F2:98:CE:85:A5:7A:B1:A9:45:59
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01A0D83BBA9127BE6FB8AE04F47CC2E8C2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 131F
Signing time: Fri 25 Sep 2026 11:03:07 +0000
Manifest this update: Fri 25 Sep 2026 11:03:07 +0000
Manifest next update: Sat 26 Sep 2026 11:03:07 +0000
Files and hashes: 1: VtjyHb4s274etwzVUjylBtzFrRA.roa (hash: oA1AsUwnVCSE3157ftEsjOoWA2vVqf1jyknmggbbv8s=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 9JCvTNDVhEV4mQdxuhBSiK4hLfEovxOSQS/55jFgzKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:ba:91:27:be:6f:b8:ae:04:f4:7c:c2:e8:c2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Sep 25 11:03:07 2026 GMT
Not After : Sep 26 11:03:07 2026 GMT
Subject: CN=a3f6b196bfbcb9538568f298ce85a57ab1a94559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:a3:87:70:3f:00:98:9a:e6:87:a8:71:c8:
51:7d:1d:c0:45:b2:90:e3:18:81:a9:23:40:2d:b3:
06:28:8f:e3:65:6e:a1:f1:29:32:7e:03:fa:99:93:
e1:46:08:10:68:2b:f7:c0:20:d1:7d:93:38:bc:f5:
b2:01:ce:97:64:f8:7b:12:0c:f0:dc:3c:cf:31:b6:
5b:6b:36:4e:4f:9c:0f:23:a9:32:64:a2:88:dc:f5:
7b:17:f8:06:34:d7:cd:c5:11:03:60:13:e1:29:65:
96:6c:07:96:c5:f5:cf:85:49:ed:9e:c6:36:7f:c1:
69:a2:88:4f:5e:96:6d:7c:ca:9b:89:d5:24:6d:9a:
36:e9:de:51:98:db:1a:6b:e1:48:54:cb:33:3b:ca:
5d:7d:95:35:fb:e5:a3:89:10:97:e9:10:e9:6e:bc:
2d:32:11:27:a6:20:8f:33:7a:2c:74:ac:20:79:88:
53:bd:95:8c:9e:13:ec:58:c4:a0:ab:9d:77:e6:d2:
bd:39:70:04:45:9e:05:bf:14:fb:fd:20:18:d5:86:
f8:32:a7:d8:c7:b9:00:e3:38:de:8f:e8:0b:01:9c:
62:a3:43:be:6e:12:ae:47:ce:33:db:f5:18:48:04:
dd:9f:0c:e0:86:0a:92:b2:08:e5:60:ce:50:a7:ac:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:B1:96:BF:BC:B9:53:85:68:F2:98:CE:85:A5:7A:B1:A9:45:59
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:70:a9:1b:f4:dd:3d:03:a9:a3:2a:d1:4d:34:db:3c:b7:
19:7c:64:fc:7a:05:21:8f:ae:26:5c:50:36:3e:35:24:07:d6:
01:49:bc:5a:09:3f:00:58:4e:dd:7b:35:9f:ac:82:3b:d1:c9:
ee:31:05:8d:c6:b9:2b:ae:0f:96:97:50:50:2e:8f:c0:1b:61:
ec:a7:bf:db:70:7e:01:15:8d:40:fa:59:e2:bf:30:06:4d:47:
9b:0d:7d:29:39:c1:34:00:3e:71:53:b7:28:f7:a6:4f:d5:2d:
6b:4c:3c:6a:55:cd:79:88:e7:16:fc:4e:d8:39:85:82:04:fa:
6d:9a:4c:e5:0f:a1:60:7e:ee:f9:f0:91:81:3b:9c:65:72:e0:
25:03:d1:ae:6c:8c:5a:8c:91:00:7c:13:d4:f7:5e:2f:6a:2e:
2a:53:ed:0d:56:22:b4:22:9a:4b:5b:3f:a6:55:20:87:9c:b5:
f6:52:5d:d6:4d:61:28:0b:3a:97:93:3a:0f:8b:d7:19:c3:ab:
7d:ce:9c:82:08:77:2d:86:5e:9e:a1:fb:48:27:bd:62:77:2e:
64:9e:c8:1a:cb:f1:53:b0:e0:89:1e:d0:75:61:8e:21:b1:73:
30:5d:cd:bc:4f:58:01:cd:96:ed:a0:fd:34:3c:af:e4:2a:79:
d6:6f:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:24:40 2026 by rpki-client