Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: xbYXcQEiArkbrOULXtPiyK4LCZdA0RrsmQtxKelKHko=
Subject key identifier: DC:4F:07:2E:F7:2A:2A:5D:A1:3B:F4:81:DA:0E:59:C4:F2:98:08:A8
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01A0D538FF3C13F8C3CCFDF6DEAE125E4AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 21:01:17 +0000
Manifest this update: Thu 24 Sep 2026 21:01:17 +0000
Manifest next update: Fri 25 Sep 2026 21:01:17 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: dGa69shEENEoHaPH/wpihXiFLoI2wuF6VHo4BfjDcHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:ff:3c:13:f8:c3:cc:fd:f6:de:ae:12:5e:4a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Sep 24 21:01:17 2026 GMT
Not After : Sep 25 21:01:17 2026 GMT
Subject: CN=dc4f072ef72a2a5da13bf481da0e59c4f29808a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:aa:68:e2:76:05:29:ca:ed:ff:05:e4:b6:
4c:89:0a:d8:a7:83:16:ad:6b:79:d8:ed:d7:1b:44:
b3:e0:c7:1c:45:35:f2:a4:14:5d:bd:d2:e5:1c:f3:
43:24:b3:fc:c0:8e:10:d5:69:0e:bc:c9:32:ca:b0:
dc:90:e9:63:90:e4:92:82:5b:c3:1a:67:ce:fd:8a:
3e:d4:84:06:8e:ce:d2:0c:90:21:5d:f2:fe:15:ab:
44:e0:07:87:99:07:5f:41:97:e3:ce:15:b3:e1:94:
b3:9d:df:b7:74:0e:7a:e3:98:44:49:30:84:25:27:
64:91:7d:71:31:ee:03:11:5c:d6:08:6b:3a:78:cc:
07:30:4a:3a:67:a6:63:57:56:3f:93:b4:0c:67:17:
8a:6c:c1:bb:44:0b:7c:58:a3:8f:0f:58:fd:9e:c1:
b3:47:df:a8:09:1e:0f:f6:a5:57:01:9d:2c:83:64:
0a:d7:51:cc:a4:6a:93:4e:ef:db:04:33:3f:40:de:
ab:a9:4b:1f:31:29:31:55:ef:9c:4d:bf:fd:3e:af:
30:ef:eb:a5:92:db:39:f7:5d:4c:c1:b3:81:2b:81:
39:58:40:9a:c1:03:6d:92:d1:f7:15:fa:b9:3a:1c:
22:f8:94:7b:11:44:a4:34:90:cf:ff:07:79:50:dd:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:07:2E:F7:2A:2A:5D:A1:3B:F4:81:DA:0E:59:C4:F2:98:08:A8
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5e:eb:f2:8b:4d:04:fb:91:bf:d7:20:44:77:b8:d6:f0:99:
01:05:e1:40:51:3e:b0:19:64:91:30:53:21:b0:c3:51:ba:63:
04:e6:11:38:e8:91:72:fd:43:2c:65:63:8c:21:87:10:30:df:
88:ca:02:02:1a:bb:61:96:47:a2:40:16:4d:33:c5:83:62:86:
8c:c3:77:fc:e4:6a:f2:b2:74:93:e2:77:cb:7a:e9:53:4e:82:
d6:34:78:b8:f0:fd:08:d6:9f:b3:b3:2b:9a:57:e2:35:9c:1d:
a1:b0:19:d4:a3:8e:90:af:9c:f2:fb:b9:f0:81:1a:ae:9e:99:
52:4c:5a:b1:a4:64:57:a2:c8:d0:8c:a3:b2:45:a1:ce:ee:73:
8a:4e:c5:3b:50:02:bd:e1:d0:fd:47:aa:2d:ca:f0:49:b9:65:
16:8d:a6:50:73:03:ac:8e:6e:d2:6e:12:f9:00:11:bf:8c:db:
85:5b:ba:e8:4d:a4:04:97:19:00:22:77:04:92:b2:97:f4:86:
48:97:60:b5:be:4b:ef:6e:1a:23:3f:d8:47:48:1f:ec:4d:e0:
a4:ae:68:41:59:2a:a9:19:57:39:58:73:fb:be:4d:d5:b6:7a:
74:6d:e3:6f:41:ce:29:33:87:3a:14:48:16:dd:0a:36:f1:5d:
fc:71:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:32:04 2026 by rpki-client