Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: IQvKmkc+cUCQ7DkBSrbGceNJrkoyhd32wIColLB9ke4=
Subject key identifier: E5:BA:FD:76:B5:9C:3B:5B:2E:58:8F:60:A1:BA:98:62:B5:B2:D5:D4
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01A0D15BD03A723B4072F2D4D557813C9CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 03:00:50 +0000
Manifest this update: Thu 24 Sep 2026 03:00:50 +0000
Manifest next update: Fri 25 Sep 2026 03:00:50 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: gI0vgdcKn9UcPTZh5ct+HNB6k+sOa9pSD17Oo1n43gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d0:3a:72:3b:40:72:f2:d4:d5:57:81:3c:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Sep 24 03:00:50 2026 GMT
Not After : Sep 25 03:00:50 2026 GMT
Subject: CN=e5bafd76b59c3b5b2e588f60a1ba9862b5b2d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:e4:24:2a:50:5f:76:61:74:47:95:d8:d8:
a3:79:ff:2a:59:56:72:7d:cd:62:eb:e9:7a:c9:d1:
ab:07:cb:a4:03:79:b9:c2:c7:17:6b:0a:95:5d:8d:
38:ab:1c:f2:97:26:8c:a2:cc:9f:c5:d4:63:f7:f5:
17:19:cb:55:71:08:2d:23:21:bd:5f:65:95:56:04:
fa:e1:1b:7b:e8:15:54:cb:c0:10:c7:03:99:a0:d0:
46:2b:ff:86:4f:cd:bc:1b:95:47:3d:7a:b5:71:d1:
67:f2:06:4a:68:65:0d:0d:8a:e1:55:d4:e5:48:3f:
2b:7a:1b:e8:8b:a3:e6:20:a4:25:78:bc:d7:f8:7d:
bc:fe:69:6d:da:dc:16:a6:c3:19:4f:dc:97:8f:c5:
36:53:9b:35:dc:cd:a7:49:4c:35:01:cd:df:0c:32:
2a:87:52:5f:88:55:66:03:93:d2:dc:64:45:b4:66:
11:02:0d:3c:af:dd:a5:64:23:cc:9a:ca:3e:f9:3f:
74:7d:ef:49:cc:54:6e:ae:06:d1:34:46:45:63:3c:
04:5c:90:6f:4e:dd:a8:04:29:36:45:30:0a:db:b6:
31:24:be:29:05:d9:aa:24:f2:6b:1b:39:07:7e:fd:
b3:09:1d:a0:28:a5:42:14:a2:c6:18:c9:ac:ac:f2:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BA:FD:76:B5:9C:3B:5B:2E:58:8F:60:A1:BA:98:62:B5:B2:D5:D4
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0c:39:69:ed:f4:49:3e:a7:97:b6:f8:3a:a2:39:67:4f:27:
e9:36:12:29:7a:86:30:6b:9e:9c:d8:cb:f5:92:70:2d:e8:ae:
22:bd:0f:87:c7:b1:a3:22:f3:7f:11:86:a4:23:5f:2a:5e:09:
0a:c8:88:08:15:a2:9d:4f:00:fe:0a:84:0a:45:00:ae:a6:6c:
90:73:c9:7f:c4:76:2b:7c:98:7f:97:16:2e:75:44:29:0a:0d:
92:8c:ee:d0:af:2a:d3:ae:21:87:1c:23:13:ad:a2:d6:b6:e5:
d1:aa:12:47:db:ed:e6:a1:ab:a5:c4:ad:55:c5:1d:09:44:c0:
fb:cf:04:f6:e6:77:50:fa:30:d3:50:2b:21:5e:98:46:5e:ec:
77:76:79:88:7c:6b:e4:c6:74:1e:a8:88:6e:01:6c:e7:92:3a:
ac:cd:df:96:8c:e1:98:a6:14:d0:49:1a:d3:08:bb:49:ac:26:
fa:cf:64:ef:22:fe:bb:8c:a0:79:b2:a9:46:eb:e0:5d:c3:5c:
c5:9f:16:fd:70:d6:65:b4:92:ba:7b:62:62:8e:99:22:9e:87:
25:53:35:f0:8e:63:e3:d4:8f:04:bc:72:95:8b:b5:45:34:2a:
3f:7e:72:55:f5:d7:59:dd:8b:73:c7:0f:dd:bc:7b:f3:ba:03:
7a:6b:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:40:05 2026 by rpki-client