Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: GYW7O1VUh+cvl6mF8W7mW98Hb0XqIspF1uO8M1VQ1iY=
Subject key identifier: 94:E8:7E:45:AF:10:FA:B0:29:28:0E:A6:82:B0:F8:28:C7:0C:D9:E0
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 01A0D45D0268C51F60C8DEA011661F21E5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 0579
Signing time: Thu 24 Sep 2026 17:01:00 +0000
Manifest this update: Thu 24 Sep 2026 17:01:00 +0000
Manifest next update: Fri 25 Sep 2026 17:01:00 +0000
Files and hashes: 1: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
2: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
3: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: au0q+vsSKuMmoddTwiiwh7LySq8jHp0Yf1lVD/sxp6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:02:68:c5:1f:60:c8:de:a0:11:66:1f:21:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Sep 24 17:01:00 2026 GMT
Not After : Sep 25 17:01:00 2026 GMT
Subject: CN=94e87e45af10fab029280ea682b0f828c70cd9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:5f:0e:c1:c1:94:82:63:9c:9b:ea:58:ad:
53:51:40:60:be:52:1a:61:9e:43:30:ae:62:f0:37:
e2:cd:12:68:44:1e:c3:9a:4d:f7:f0:97:32:33:47:
ee:29:c1:ab:97:60:26:f0:c4:6a:51:a5:fb:f9:38:
95:08:81:e2:4f:b4:dc:86:8e:30:0e:a4:49:fc:03:
8e:91:03:8a:7e:33:5d:1d:6a:5c:ec:b3:b4:71:3c:
14:a1:f5:6a:d3:ba:e1:01:50:47:30:2c:b7:35:44:
90:d6:82:0d:af:c4:de:09:de:d1:60:8b:dd:20:8f:
2a:8b:9f:af:ee:f5:df:89:61:65:bb:68:e8:a9:87:
30:1b:95:ef:e6:da:5e:62:23:30:8d:6a:7f:78:53:
f8:11:8b:08:71:e5:74:92:9e:eb:18:08:72:55:40:
b0:58:3a:70:43:56:f4:07:5f:34:44:58:db:09:64:
4d:75:0e:c8:1d:69:ff:36:23:0b:ea:6f:5b:90:95:
e7:05:30:39:9b:24:f6:7c:14:42:e1:0a:84:aa:e3:
d2:8d:17:83:01:3f:f8:cc:87:d9:2c:c4:5e:bd:6c:
ae:d2:2b:12:9f:1c:15:aa:be:1c:38:07:d6:59:be:
75:bd:9c:72:a4:09:2b:ea:eb:f8:f0:36:2c:d5:97:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:7E:45:AF:10:FA:B0:29:28:0E:A6:82:B0:F8:28:C7:0C:D9:E0
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:47:ce:8e:89:86:cd:28:c4:fe:2f:96:c5:23:45:7b:9b:73:
b4:de:6a:1f:f6:87:6d:91:5f:ee:2b:ac:c8:62:b6:53:88:30:
1e:15:9e:47:09:73:27:85:80:1f:14:3e:10:9c:e9:0c:7a:a6:
75:73:5a:6c:d3:5e:b4:62:2c:4a:e5:39:c4:c5:8f:b6:a6:50:
69:62:18:50:58:3b:23:f3:81:58:7c:04:da:ff:69:9d:2f:5e:
87:07:cb:b6:fe:bc:70:4c:b3:2c:14:6e:05:72:ff:a9:9b:75:
c4:44:13:72:dc:32:b7:c9:9d:95:18:89:94:db:6d:e8:ab:02:
8f:32:0a:87:38:63:c9:34:55:c9:b3:e4:ca:54:1f:46:02:52:
dd:77:63:9a:6c:6e:50:a2:a6:4e:d8:e0:e3:6d:9c:20:f9:a7:
a0:e1:ea:41:97:1e:3f:c6:c9:98:92:68:2b:5a:b7:82:d8:93:
4d:69:aa:d1:1e:ca:ac:b4:da:92:85:16:a8:8f:07:07:94:e9:
5f:a5:ed:d5:ad:76:7c:79:1c:99:b3:cc:be:2c:6f:e2:5c:4f:
f3:6b:60:47:a0:b8:e7:1d:7b:55:1b:63:59:5b:a2:ad:eb:c7:
5c:22:01:3a:91:48:87:9a:82:c1:49:71:ef:5d:e2:81:a8:99:
29:46:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:26:37 2026 by rpki-client