Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: ptyFrOp2ZstECewprHMpvw7H50SJELpOduakpeKF5+Q=
Subject key identifier: AA:C0:F6:03:4A:0C:64:6A:4D:A0:A1:FD:CE:B4:DF:1F:0D:29:01:79
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 01A10701AE3F41224E785CBEEE90F1CC57F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 13:01:52 +0000
Manifest this update: Sun 04 Oct 2026 13:01:52 +0000
Manifest next update: Mon 05 Oct 2026 13:01:52 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: n2PlDCslhLZe1ab7W7CP0M1DhRjCqGE2dlXveAGpHoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:ae:3f:41:22:4e:78:5c:be:ee:90:f1:cc:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Oct 4 13:01:52 2026 GMT
Not After : Oct 5 13:01:52 2026 GMT
Subject: CN=aac0f6034a0c646a4da0a1fdceb4df1f0d290179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:d3:f1:87:68:59:57:22:85:41:53:ce:38:
e9:56:f5:2b:98:f1:f3:f7:af:cf:cc:3b:19:c7:40:
9f:07:3e:4e:fe:8d:63:bf:8f:2d:f7:97:b7:34:17:
2e:c5:a4:5e:f7:06:a3:3f:b3:db:73:0a:98:ca:b0:
9e:e4:cb:93:e2:b6:15:df:33:9a:ab:d7:e6:03:6c:
32:a7:d3:66:7e:c5:86:ab:9a:06:39:52:5a:e6:88:
f9:58:55:f2:b4:17:a4:ee:77:9f:02:21:e4:b6:cc:
3f:40:4b:41:a9:07:bd:78:73:10:e3:27:31:69:d7:
36:f8:20:14:d6:d0:04:be:b9:54:64:25:4d:6d:f0:
2e:96:c0:31:8f:a8:ae:6c:4e:95:fc:f8:89:8e:dd:
f3:86:aa:51:9e:62:02:03:c3:1f:bf:b2:c2:c6:bf:
1c:a8:ac:04:45:ad:91:7d:62:88:da:e4:4c:74:b0:
28:ed:12:47:89:de:47:4e:3f:57:bd:d2:4d:17:21:
0f:6d:20:87:6c:b0:2a:a3:fc:39:65:bb:7b:d7:da:
27:41:60:a4:e8:9e:70:0c:6a:d4:3f:63:5a:49:b5:
d1:d3:74:7c:37:69:dd:9a:af:38:70:52:f1:43:5d:
b2:c2:c7:47:6d:99:1a:35:de:5b:df:f5:cc:30:4e:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:F6:03:4A:0C:64:6A:4D:A0:A1:FD:CE:B4:DF:1F:0D:29:01:79
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3d:1f:2c:05:08:7d:78:2b:6d:86:fe:dd:70:d6:d8:a4:e4:
14:3a:09:41:f0:38:2d:de:0e:d8:57:96:15:0e:04:5e:45:7d:
ee:60:cd:2d:3a:8a:2c:a0:ac:3a:b2:70:e1:ce:b0:e2:65:f9:
b4:79:90:c3:f9:3c:f4:93:ff:ee:d7:6a:8f:87:3e:6c:ce:33:
cb:86:a6:77:08:9c:c9:fc:cc:0a:5a:e3:ec:f2:e5:92:22:ee:
f9:ca:90:f3:de:ca:c7:7e:f2:1c:ac:6c:81:8a:0d:0c:e2:c2:
90:90:e4:a5:4d:60:d0:8d:cc:93:14:47:45:ae:95:a9:a9:5b:
10:19:03:c5:49:67:a5:1a:57:bd:b4:76:da:03:64:db:79:dc:
a0:f4:1b:1d:0a:8c:c4:fe:b4:89:30:17:56:60:5a:85:a1:ab:
6a:37:aa:6b:57:87:e6:c1:73:4d:65:81:e7:7b:c5:9a:73:e4:
f7:ec:dc:c6:f1:91:79:e0:1a:8a:7e:de:a8:47:f5:01:53:d4:
10:be:e0:dc:62:bf:86:bc:3e:bd:c7:8d:d7:40:84:1d:cb:b6:
55:f5:46:03:8c:50:9c:b4:ec:ac:4b:e0:56:fd:14:68:37:28:
cd:b5:98:fe:8e:cb:1d:23:a8:c5:cd:a4:d1:53:d4:dd:77:d1:
21:5f:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:28 2026 by rpki-client