Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File: yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier: oh0kwJuDnSPli/yPha+geB8bpmGh9t5dr0zB7iirERY=
Subject key identifier: 5D:80:B1:9E:5B:44:91:14:B4:34:9E:70:19:12:34:F9:7B:FD:55:20
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 01A0D5DDB90E04ED8E25B1A6BD4860A1DE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:12 +0000
Manifest this update: Fri 25 Sep 2026 00:01:12 +0000
Manifest next update: Sat 26 Sep 2026 00:01:12 +0000
Files and hashes: 1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: ndWB7MEZHeXIMf/dfv70kwWscGXDqgPCoGXD+EuPSUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:b9:0e:04:ed:8e:25:b1:a6:bd:48:60:a1:de:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Sep 25 00:01:12 2026 GMT
Not After : Sep 26 00:01:12 2026 GMT
Subject: CN=5d80b19e5b449114b4349e70191234f97bfd5520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:bb:86:9e:14:40:fc:73:71:54:9c:bd:ac:
ab:62:9b:7d:90:95:cd:3c:08:4c:32:9b:b0:b3:25:
e7:2c:1d:19:95:fd:8a:ea:f9:31:30:ba:7b:01:af:
a4:71:7e:8f:c1:a2:77:1d:81:7d:28:d5:46:40:db:
07:ea:3f:5d:bd:17:bf:53:73:24:38:b0:8a:8c:f0:
c6:63:b5:68:88:aa:53:92:a2:d5:50:2e:ab:ba:85:
b7:89:56:af:73:ec:9e:3f:f6:16:29:d2:70:7f:c7:
90:65:c9:5f:70:bd:cc:6c:9d:82:96:20:db:43:4a:
b1:f6:1f:4e:82:35:2c:51:98:2d:8f:19:e1:dd:e0:
7d:96:91:f6:64:70:90:09:2f:e7:98:1e:e2:bf:24:
e1:57:f7:7f:d9:ea:6d:ad:71:27:34:4a:e8:dd:68:
8e:bc:cb:ca:be:dc:b5:b2:29:43:3c:5e:1f:9a:49:
d6:ba:d8:99:92:5d:1a:b5:dd:d4:d0:ca:3a:0f:9a:
21:6d:72:a3:c3:dd:20:51:bc:6a:07:64:19:58:0c:
3e:4d:5b:4d:67:c3:ff:b7:3a:d9:38:5a:91:f8:bf:
88:8f:50:6c:57:23:bd:06:4c:4b:4f:42:f0:5e:9d:
63:81:62:a5:2e:e1:30:ce:2c:86:da:86:3f:1f:30:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:B1:9E:5B:44:91:14:B4:34:9E:70:19:12:34:F9:7B:FD:55:20
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:60:75:56:ee:02:eb:a1:cf:d0:df:f5:55:92:97:8e:a8:
f9:11:56:a4:d4:98:5d:10:db:65:9c:9c:14:96:97:3b:e6:f6:
9b:6b:7e:6c:51:34:2b:ca:69:a7:45:81:e7:a9:95:ee:fa:ba:
8a:2d:aa:11:36:1f:67:74:be:57:18:69:51:8c:90:1d:30:8a:
40:c6:a6:58:27:f9:55:42:c1:75:3e:c8:23:75:82:98:d5:24:
69:87:cf:3d:3e:be:90:e4:ac:c3:28:e3:0e:12:7c:60:33:08:
a0:e0:b0:26:03:91:11:b3:99:0f:a9:12:ea:df:8e:c8:57:52:
fd:df:d2:6b:df:7b:db:97:6b:9f:f4:cc:81:cb:39:f1:48:b1:
5d:0b:f7:c5:46:d8:b6:d9:2c:42:99:5f:d7:2a:5a:c8:43:c9:
36:f1:e0:fa:6f:08:a9:1c:03:2e:9c:38:fc:e2:c5:1a:13:34:
20:d4:7b:ef:1b:dc:50:aa:c6:85:df:c9:8f:c2:82:8f:cd:9e:
c8:85:cd:45:2a:f7:fd:42:1f:3e:0a:25:82:c0:4c:4f:66:53:
0b:99:a5:79:df:9f:13:23:43:ef:e1:8b:a2:75:54:9a:d0:ba:
1f:95:3d:89:65:21:12:a0:82:3d:7c:f7:fe:3c:61:d2:c6:c2:
56:27:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:02 2026 by rpki-client