Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
File: yZh_r4QGhFO856CF9-JEFZPET2E.mft (raw, json)
Hash identifier: UbGuwiMp8uwZP0JjNYob55hxi/Owevmw1+MmVDxTOAc=
Subject key identifier: 65:1C:BA:C8:B7:2A:59:B9:17:59:ED:2C:E0:D5:0B:07:77:F1:3C:24
Authority key identifier: C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
Certificate issuer: /CN=c9987faf84068453bce7a085f7e2441593c44f61
Certificate serial: 01A0E098F24599C3D0912C508344373D5346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
Manifest number: 8C
Signing time: Sun 27 Sep 2026 02:01:54 +0000
Manifest this update: Sun 27 Sep 2026 02:01:54 +0000
Manifest next update: Mon 28 Sep 2026 02:01:54 +0000
Files and hashes: 1: 4zUuJLxbytA58yz_8CPQ-fCeE_w.roa (hash: Je10rxa6GNXBQyt5VGMNbKvaC26HJG8fWwTPdKlrmSc=)
2: yZh_r4QGhFO856CF9-JEFZPET2E.crl (hash: 3WCEfR4WD91YGXxl3caHkOhrFU9vpNPHVwDDGv78Co0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:f2:45:99:c3:d0:91:2c:50:83:44:37:3d:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9987faf84068453bce7a085f7e2441593c44f61
Validity
Not Before: Sep 27 02:01:54 2026 GMT
Not After : Sep 28 02:01:54 2026 GMT
Subject: CN=651cbac8b72a59b91759ed2ce0d50b0777f13c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:f5:32:89:81:1b:04:d0:1b:e6:01:87:1b:
2b:9b:fe:c3:32:23:03:a7:bf:ec:1f:be:0f:32:e9:
f7:6a:0c:be:46:83:2a:23:61:83:74:85:55:45:a6:
7d:3f:68:bf:9f:38:73:4f:0a:1b:e4:f2:d2:08:da:
bb:c5:0e:67:3e:87:8f:bc:05:9f:80:99:f7:95:a3:
a0:b0:92:c6:53:a7:e6:1a:f4:97:33:7b:22:b5:b8:
04:88:e6:81:4a:5b:9c:19:39:70:1f:8b:1e:48:ee:
98:2c:d0:1b:4d:29:00:7e:9a:89:77:87:49:b3:7c:
c1:a4:9d:17:aa:4e:bf:4b:8b:99:44:22:74:28:4e:
8a:74:0c:20:9f:f5:65:3c:ec:70:65:94:74:1b:53:
57:86:c7:6d:8e:b6:fe:8b:97:c8:f2:1e:b5:7e:83:
98:a7:ba:5a:2d:de:ab:2e:76:d3:98:fa:3e:2b:ef:
09:c5:95:a5:09:e5:14:79:4a:14:aa:28:dd:30:d1:
61:5f:ec:4b:a3:ee:d0:73:b1:b6:33:4e:a7:e1:96:
de:7a:fa:76:81:fe:12:58:61:70:b4:63:b4:b0:b1:
d2:d5:fd:d1:7f:ea:fc:e9:de:74:8b:d2:ac:57:59:
d2:97:ea:fa:56:df:62:8d:8f:6a:91:cb:3c:87:9e:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:BA:C8:B7:2A:59:B9:17:59:ED:2C:E0:D5:0B:07:77:F1:3C:24
X509v3 Authority Key Identifier:
keyid:C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4d:3e:c4:a9:f6:1d:9a:e1:6a:75:5b:de:18:cb:62:5d:e5:
b2:68:0a:e4:48:5e:74:9c:f9:9a:77:5e:10:95:3c:21:74:c8:
69:9a:68:9f:a6:84:52:8a:8c:d6:79:3f:8f:e4:31:68:01:48:
0e:80:b7:ad:97:24:56:6b:f7:6f:93:53:86:fc:ad:f6:cf:68:
8b:bf:b3:04:74:f4:a0:4c:81:cb:01:1c:26:31:bc:c1:b2:b8:
46:10:13:f2:1e:60:ab:99:af:f1:94:ac:6b:2e:b8:7a:af:d7:
42:2f:e7:43:4b:0b:df:9f:18:68:e0:c8:b5:0e:ac:ba:16:a0:
68:8e:5b:46:77:fb:2a:c7:c3:48:e8:62:39:c5:9d:e0:99:88:
63:d8:52:e0:c3:3e:62:e7:7c:73:ef:c2:ff:a6:0c:c9:77:8c:
4b:5f:d5:4f:8d:b7:d7:65:30:76:bf:25:da:d1:f2:58:65:53:
2c:c7:34:dd:d4:3f:09:50:ca:78:02:4b:1f:cd:25:54:0b:18:
e8:a9:ab:ea:d4:82:18:6a:52:69:c7:38:d1:ad:d5:b5:1d:80:
74:85:3a:d0:c2:cb:91:5d:f2:42:fb:92:f1:00:64:d5:69:ae:
2c:ab:ba:10:fc:b5:ce:69:96:9c:d8:2c:6c:cc:ee:79:5e:f3:
1d:fa:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:20 2026 by rpki-client