Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
File: yFKOFLm6mFBWKUjNeshNKytqNx0.mft (raw, json)
Hash identifier: 8Rh6pYiDU4NR3Ni0QYhvydhYZ0S06YuMiCNpxsr6pO4=
Subject key identifier: 60:EB:F1:F4:00:85:14:A9:A2:7B:91:2B:3A:49:39:D2:0F:84:0F:ED
Authority key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Certificate issuer: /CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Certificate serial: 01A0DBA9E99E3939D87D52778E7FEF3FFEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:20 +0000
Manifest this update: Sat 26 Sep 2026 03:02:20 +0000
Manifest next update: Sun 27 Sep 2026 03:02:20 +0000
Files and hashes: 1: AdgSMzHPUmuKzAlrtS53QR76t1s.roa (hash: nKsP5GbM2QK6ia47o/bGf3bfq0W9Ls05zVJw81d/vE0=)
2: S3l9n0dTP3FXhNcpLdf8YCRxkuo.roa (hash: bOQ4f+wL3ADi6V1m/4nIBmXdvzaUBsd7Lu728OmlsTo=)
3: yFKOFLm6mFBWKUjNeshNKytqNx0.crl (hash: rDbmPEwbx3y34EgECtzAgx69/D6dQoWHYDFKQPPm8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e9:9e:39:39:d8:7d:52:77:8e:7f:ef:3f:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Validity
Not Before: Sep 26 03:02:20 2026 GMT
Not After : Sep 27 03:02:20 2026 GMT
Subject: CN=60ebf1f4008514a9a27b912b3a4939d20f840fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:ba:ab:f6:6d:14:d6:dd:e4:f7:88:9a:35:
1c:76:16:1e:8b:50:7f:d8:e4:ca:21:65:d0:5c:38:
6e:6c:d1:39:7d:08:52:7a:d7:f7:1e:f7:15:74:68:
47:26:98:49:f2:43:46:f4:66:a9:c0:09:3a:95:31:
d4:ec:4b:49:ba:cd:6e:96:25:df:7e:d6:ed:ab:44:
a8:07:34:03:66:ac:e8:6f:98:d9:84:a7:78:98:5b:
ca:8a:fb:e4:ab:34:5e:18:e1:dc:8e:89:2c:2c:07:
97:35:67:85:96:c1:c8:a9:d3:62:eb:52:3e:08:e3:
da:04:3f:b3:f6:18:0d:70:6f:2c:ed:c8:9a:b1:0e:
0b:e5:47:28:b0:8b:85:fa:85:24:3e:0e:85:6a:99:
88:98:35:a6:40:e6:7e:7c:1c:f6:a1:4d:fe:b8:57:
0e:e4:7a:56:be:26:13:01:0d:c0:34:c1:ea:5f:63:
de:a2:9f:d3:f7:76:90:29:b3:69:74:2e:45:ec:67:
5b:73:6d:26:23:54:3c:5e:55:4d:8e:8e:40:f3:b5:
4d:23:dc:c2:ce:c3:73:ed:f7:1f:82:2a:77:02:e0:
a0:4a:47:bf:6d:ee:45:aa:84:09:bf:e2:ff:c1:32:
83:f0:be:dd:f2:2a:b2:06:5f:49:22:e0:28:e6:55:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:F1:F4:00:85:14:A9:A2:7B:91:2B:3A:49:39:D2:0F:84:0F:ED
X509v3 Authority Key Identifier:
keyid:C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:48:04:36:0a:ab:76:1d:da:da:c1:01:65:42:79:48:84:d0:
4f:0e:b9:75:e1:e7:ca:37:81:78:33:40:42:17:fd:06:6c:43:
78:08:71:92:84:cb:1c:6a:f1:9e:bb:b6:c7:94:6b:d1:bd:b2:
f3:62:70:dd:5c:78:ad:c9:c0:20:44:f2:10:f1:d6:e8:70:a2:
f5:34:c6:53:f5:b7:74:30:7e:a3:46:4e:60:7a:b2:0b:16:af:
3a:f0:e9:b8:fd:b0:40:e7:0c:c9:a1:08:a4:c4:e8:84:bb:2c:
0f:db:d4:76:49:9b:bd:5e:88:06:c7:7b:53:b8:35:b4:69:02:
f0:1b:3a:f1:87:28:50:06:45:8b:01:94:c9:57:6f:ff:44:c2:
2b:86:b4:cb:6b:3b:90:14:a1:f3:84:d9:4a:20:01:22:c1:86:
2f:0f:20:4a:d3:47:fd:86:55:0c:76:7c:f4:c6:8e:86:4b:e8:
56:72:19:c5:53:1f:d3:b4:a8:c6:a6:ac:90:c1:47:00:64:f2:
51:24:26:8b:16:67:95:bd:d9:2d:3f:b2:03:4c:69:36:6b:c7:
b0:d5:c3:7e:ca:56:90:bf:04:21:bb:cd:d3:89:df:41:d9:c3:
55:be:bd:08:69:77:34:3a:d3:93:29:e8:1b:28:44:85:ec:fa:
ae:94:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:40:55 2026 by rpki-client