Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File: yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier: Q25hk86S2tK6rq2xmNTUmq1Ya9QGX/ND8H9LSbjmoLQ=
Subject key identifier: 70:39:1F:79:6F:78:24:2F:F9:2B:15:54:45:D2:E5:8B:6D:26:1F:A3
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer: /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial: 01A0C8C6AD33A7D7F85F83E9D4F4F913914B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number: 0165
Signing time: Tue 22 Sep 2026 11:00:58 +0000
Manifest this update: Tue 22 Sep 2026 11:00:58 +0000
Manifest next update: Wed 23 Sep 2026 11:00:58 +0000
Files and hashes: 1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: jOpHcTyjqcqs1ukXs2EgM8uv4jYaTXrVnglDr7/fyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:ad:33:a7:d7:f8:5f:83:e9:d4:f4:f9:13:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Validity
Not Before: Sep 22 11:00:58 2026 GMT
Not After : Sep 23 11:00:58 2026 GMT
Subject: CN=70391f796f78242ff92b155445d2e58b6d261fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:93:78:4d:29:3b:fc:ff:57:32:30:f6:61:
d3:6d:d8:df:cf:4b:8b:19:b2:eb:0a:1d:3e:ea:81:
ae:ef:04:ef:19:8a:3b:63:ff:54:f3:06:42:20:bb:
5e:65:94:5d:4c:ee:2e:64:cc:93:da:e0:e1:ac:8b:
d8:59:e2:0a:eb:2d:20:ab:95:ed:23:b9:17:73:5f:
c7:91:4f:a7:1c:ac:08:2f:37:de:48:9b:b5:5b:34:
79:1a:9e:b4:23:e7:47:12:84:cd:59:b2:66:3c:57:
8d:d8:80:6b:20:45:bb:82:69:b3:87:cb:93:1b:79:
78:28:3b:b5:d8:32:02:3e:44:27:01:57:a4:9b:1c:
d1:3c:25:8e:78:30:78:f5:87:62:09:2c:ad:06:0d:
ce:9c:f6:0d:f9:a3:d9:89:6c:8e:93:98:93:ea:39:
ea:47:5b:25:81:79:ba:4f:51:40:4c:52:5d:22:be:
85:76:7a:94:2f:ec:06:23:79:63:58:83:83:6b:0d:
ec:6a:0e:52:ee:1c:c1:be:da:90:84:79:ba:6e:5b:
85:70:52:2e:dc:0f:81:d7:7d:cf:9c:dc:b5:52:60:
6f:c8:8e:bb:b9:8e:d2:16:15:41:75:a0:78:57:2f:
21:f7:9c:d1:75:5d:ce:81:20:4b:4b:2c:7e:fb:1e:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:1F:79:6F:78:24:2F:F9:2B:15:54:45:D2:E5:8B:6D:26:1F:A3
X509v3 Authority Key Identifier:
keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:21:bb:f6:0d:3c:5f:4e:dd:57:33:f9:87:34:5e:3d:db:
83:b9:df:96:4e:1f:51:b6:fc:a6:dd:52:7c:38:00:41:ba:22:
8f:43:39:63:a8:69:2b:22:f2:20:7a:11:13:7e:fc:c4:1d:7d:
41:60:14:e3:d9:b6:0a:4e:3f:a4:c2:8e:0f:4a:47:57:32:0b:
a7:05:18:b6:44:4d:bf:23:60:aa:b4:fe:7d:e7:ac:f0:82:35:
00:ab:7d:95:7f:a5:c9:a9:2e:48:16:ba:c8:6e:31:d2:62:65:
2c:38:58:b3:14:49:2e:1d:d0:58:56:12:9a:20:72:2f:83:1c:
05:9f:5f:43:72:bc:a2:28:ec:63:fd:33:27:25:c0:5f:2e:a0:
8f:96:92:1c:cb:07:1a:0e:17:c5:3e:44:6c:95:48:18:4d:ec:
b9:75:f3:a0:86:ac:cc:7a:4a:b2:52:53:e4:d1:d1:51:89:36:
e5:92:77:eb:76:fe:bb:5a:44:c8:be:ee:45:ac:fc:fd:a5:d5:
8b:1f:a4:f4:f6:e9:7b:a5:5c:7f:51:51:56:0d:f8:be:46:35:
bc:c6:54:c8:26:e3:bc:11:fc:94:5e:1b:0b:7d:3e:a2:29:6d:
90:9a:4e:ed:e7:47:ff:16:e7:39:80:c3:43:9c:71:97:ec:3e:
b5:71:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:38 2026 by rpki-client