Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: dBssaqkcMsLIFjoIKR0+BJqPNPbTY2LL6ipd8ubFguI=
Subject key identifier: 3E:8E:AE:E9:C7:68:03:FE:E7:04:90:7D:C0:F1:9B:96:4B:59:D2:52
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01A0DC171987234B97235986C812FC3475FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:36 +0000
Manifest this update: Sat 26 Sep 2026 05:01:36 +0000
Manifest next update: Sun 27 Sep 2026 05:01:36 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: N5nseuqc7a+No10V7AeOThOA9WIl5LmZvUIgToxfXn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:19:87:23:4b:97:23:59:86:c8:12:fc:34:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Sep 26 05:01:36 2026 GMT
Not After : Sep 27 05:01:36 2026 GMT
Subject: CN=3e8eaee9c76803fee704907dc0f19b964b59d252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:7b:e1:3c:5c:64:9c:fa:e5:b4:f3:8b:b2:
96:d6:8e:c2:9b:a1:fa:ca:1a:2b:72:aa:c2:d8:10:
aa:2f:98:65:0a:67:00:0b:01:cb:2f:3d:95:e3:6f:
68:be:50:9e:f6:9d:b9:31:0e:3c:b3:81:f6:3d:b5:
1b:b7:db:51:2a:ee:c7:e7:ff:4c:30:2b:9a:8a:0a:
5c:0a:ec:aa:88:b0:01:e3:df:f8:c3:10:cd:70:c7:
6d:cb:6f:3c:3c:38:be:20:2e:85:b0:a5:bd:07:14:
d5:1e:d0:eb:f8:37:73:93:91:28:d2:9b:be:58:6a:
1c:4f:30:57:ef:39:97:3e:ea:1a:0b:1c:da:8e:ca:
51:cd:2a:51:68:b0:e1:2f:89:e5:9a:42:a6:50:c8:
52:e7:66:d3:b6:ab:b5:09:d3:bb:08:3b:ab:ff:e3:
9a:93:32:87:e9:c7:65:de:4b:b4:d3:49:e3:d2:c9:
d0:14:64:10:c1:dd:4c:26:ee:4d:23:bf:71:cb:b2:
67:73:af:20:40:70:22:51:96:05:d8:1f:2b:c9:4e:
cd:4f:f0:29:1a:2e:a3:36:46:7f:b9:ed:de:09:db:
02:8f:5e:4e:4f:19:5c:93:4a:ce:42:ea:64:fc:87:
5e:d0:79:ea:a9:f8:d1:88:ba:6d:58:2f:70:be:f7:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:AE:E9:C7:68:03:FE:E7:04:90:7D:C0:F1:9B:96:4B:59:D2:52
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fd:a3:4a:89:97:c6:39:1d:73:52:0c:02:54:8d:ad:3e:56:
36:58:17:13:4b:94:50:ac:1a:b4:23:e7:0e:6d:cf:fe:06:65:
24:37:31:cf:59:b7:0c:86:e5:c7:13:f7:ef:ba:6b:fe:d1:ac:
33:bf:26:4f:52:bc:39:24:3e:ff:f8:ca:5f:a0:bf:37:45:f6:
22:1e:33:b0:e1:db:36:ac:f4:c6:76:df:94:2f:18:bd:99:ab:
cf:18:d5:69:e5:98:95:3a:5e:4c:c7:0f:24:57:46:f6:08:eb:
b0:3f:35:05:3a:0b:db:c0:7d:42:ae:2a:9c:0f:14:24:46:29:
fc:41:6c:af:37:10:61:87:0d:f3:54:31:5c:3d:51:cc:0c:31:
37:27:c2:e3:62:14:b0:dc:4c:7a:ea:a8:ae:61:03:6c:e5:de:
32:bd:23:30:9d:99:42:c1:ed:f0:85:63:3d:e4:ec:ab:07:fd:
cf:69:73:9c:b5:d2:a4:fb:56:e8:0c:45:a6:36:3c:09:64:f0:
b4:25:22:14:5a:7b:88:b1:44:0a:96:39:bb:6d:45:5d:d7:1f:
d9:aa:91:af:c8:31:6a:9b:f1:fc:51:16:75:d6:c7:34:3a:7e:
c6:fc:b3:6f:20:02:a0:1e:fe:c2:15:c3:b8:2f:7f:a7:dc:19:
b1:58:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:54:57 2026 by rpki-client