Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: 1pWeasQc/l+7GIpwNGTeu7BPls8R7clI35PF9iWeNf4=
Subject key identifier: 2D:C1:ED:0F:78:70:4F:DD:3E:30:AE:2E:6D:4E:EA:ED:12:4B:C5:3C
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 01A0DE060212EC1E3335D53B6EA0CE4D777A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 04B1
Signing time: Sat 26 Sep 2026 14:02:10 +0000
Manifest this update: Sat 26 Sep 2026 14:02:10 +0000
Manifest next update: Sun 27 Sep 2026 14:02:10 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: JKS3uVzt9Jx+U1RLXpTH6WjhecO2wqUO8Kttngl9ARk=)
2: YO6OstzVnVo9QhzrIx9loswdAJg.roa (hash: +INj2IveiQZp/sokzKmgLlYwMzOhLR6s+/Ir+302j9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:06:02:12:ec:1e:33:35:d5:3b:6e:a0:ce:4d:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Sep 26 14:02:10 2026 GMT
Not After : Sep 27 14:02:10 2026 GMT
Subject: CN=2dc1ed0f78704fdd3e30ae2e6d4eeaed124bc53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:d3:59:fd:e6:43:11:f6:5f:6c:2e:db:8b:
47:5c:3f:c9:fe:b1:9f:4b:00:98:9b:35:48:6c:97:
81:c6:0c:4a:a0:c1:50:6b:68:07:98:9f:35:99:b4:
ab:7a:6e:c2:76:8b:15:4f:50:f7:34:05:ca:08:e4:
f8:e5:39:85:f2:7c:4d:bd:43:65:58:23:5e:23:e7:
e9:3e:58:a2:6e:98:5b:e0:fe:26:42:fd:77:2d:7d:
f8:38:de:0e:f9:92:19:1d:ba:ba:87:41:fe:35:df:
cf:ae:29:ef:78:ad:cf:5d:59:f0:58:1f:eb:6f:e2:
70:85:7f:c9:78:2b:cf:15:dc:7a:9e:3d:66:d9:b3:
c7:b5:16:9d:09:98:7a:bd:b7:bd:bd:f9:35:75:b7:
8f:91:65:c9:25:33:9f:ce:32:84:41:c3:10:f5:60:
8e:a1:9a:54:37:a3:69:96:2e:1a:11:08:82:0f:52:
8c:58:04:5c:90:a5:d6:cb:99:12:ad:10:43:49:c3:
e3:9f:68:38:e7:74:90:be:27:01:2c:5f:66:56:b9:
e4:cc:ba:80:f9:89:98:aa:8f:16:4f:08:8a:6a:57:
7f:82:94:a8:af:3e:3e:31:9c:48:6d:49:aa:00:6d:
45:89:92:c3:1d:91:20:bc:8f:e1:85:fc:49:b7:cc:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:ED:0F:78:70:4F:DD:3E:30:AE:2E:6D:4E:EA:ED:12:4B:C5:3C
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ef:65:f5:9a:85:ae:cc:ff:fb:39:99:46:5f:e7:4e:9e:29:
b1:64:9f:eb:eb:a7:84:7d:fb:dd:2b:a1:6a:46:65:f5:6f:9b:
55:75:87:ef:fb:00:c8:25:86:13:93:d6:64:65:c4:3e:af:b0:
00:dc:29:a9:91:51:f1:b9:9d:9f:8a:e2:42:bb:09:75:5a:ff:
7e:c3:c0:b6:7f:a1:21:d8:0f:43:ce:1a:3e:4f:52:a2:9e:13:
21:c9:5d:5c:58:fc:90:99:5d:56:ae:49:24:49:c6:54:01:a3:
41:ee:3b:5d:aa:51:db:29:9f:bb:dd:ed:24:34:9a:d7:92:f6:
f3:29:c7:d3:74:db:f1:20:d6:64:8e:5d:44:b5:d0:5e:48:7e:
71:50:a8:81:89:0c:4b:31:6d:a6:5b:3c:f8:3d:c3:0c:16:c6:
76:2c:37:a1:6b:23:c4:20:ee:da:4a:1f:20:8b:ac:02:d1:98:
76:66:b9:b5:17:df:db:17:ef:89:2b:4d:8a:18:7b:4a:15:48:
1d:d6:65:47:cd:b3:bb:dd:5b:33:c4:be:e9:6e:6a:8a:cf:4c:
c4:5c:4d:bd:78:c1:1a:2b:6b:cb:22:d8:17:4d:f3:55:5b:6a:
ce:14:47:e6:77:08:c2:66:5f:6d:cd:d9:ce:26:7a:5e:08:26:
f0:fa:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:51:36 2026 by rpki-client