Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: 9uE38vM2bXrELn/7ZfiLH2dPT7TSm9vU5R5SRLD+avI=
Subject key identifier: 1A:E7:1F:67:89:48:C9:66:8A:75:16:27:69:C3:A8:39:0A:41:7E:E1
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01A0F0795D60CFE4DE7E8F5CC5986866D870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1A7C
Signing time: Wed 30 Sep 2026 04:01:20 +0000
Manifest this update: Wed 30 Sep 2026 04:01:20 +0000
Manifest next update: Thu 01 Oct 2026 04:01:20 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: 0ADXaO95JthU6aVB+qkx/wDoj/8gtqQ6usx3Yi6662Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:79:5d:60:cf:e4:de:7e:8f:5c:c5:98:68:66:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Sep 30 04:01:20 2026 GMT
Not After : Oct 1 04:01:20 2026 GMT
Subject: CN=1ae71f678948c9668a75162769c3a8390a417ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3b:85:69:4b:bf:6e:03:01:2a:0b:9c:16:bb:
15:02:c2:09:8a:fd:fd:e0:39:d0:2b:f7:cf:b1:42:
3e:5b:a5:94:cc:72:1c:ab:d2:56:5e:7b:29:27:9f:
05:a8:fd:74:46:f4:67:41:c8:17:2a:c9:3b:d8:d8:
fd:0e:2c:0d:9d:78:c0:eb:e8:35:f2:a9:10:8b:a8:
87:53:3f:68:f5:74:47:03:1f:b4:d1:1b:b7:04:5c:
0b:d3:6d:68:c2:6c:84:cd:52:1a:3c:38:a5:8a:34:
94:ea:b2:54:6c:a6:57:d8:24:35:0c:ec:59:63:31:
e8:b1:49:27:fc:80:ba:de:9c:a3:ad:68:94:e3:77:
18:80:f2:6d:85:7d:07:60:96:70:ef:26:e6:2d:67:
c6:08:8e:89:59:e0:64:01:ba:e2:2d:ca:1a:14:85:
c2:6b:54:db:69:10:f7:25:05:c0:f6:5b:3e:87:7d:
52:ff:76:a7:95:20:8d:32:e8:0c:7e:cf:46:95:c2:
85:a0:70:36:dd:47:52:f8:6b:57:c6:d3:14:24:9a:
78:46:9b:f7:d1:5f:b3:84:6f:58:d0:2a:3e:80:c2:
34:9a:0a:cc:8a:c8:e2:68:15:44:12:a2:22:3f:7d:
a0:fc:82:f9:0c:c3:e4:ae:4a:dc:a2:50:9f:02:92:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:1F:67:89:48:C9:66:8A:75:16:27:69:C3:A8:39:0A:41:7E:E1
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:50:24:96:30:ae:38:c8:c3:8d:96:dd:75:52:bb:4b:50:
eb:12:f5:ed:c2:0e:a1:e8:dc:67:f2:e6:03:3b:5b:89:a9:50:
08:b7:3d:61:80:03:25:6b:f2:ff:4d:d7:28:9f:c5:d4:2e:ab:
1e:ee:93:b1:48:23:a9:57:04:95:a9:65:96:55:9d:c0:b9:3c:
6b:6c:fb:6e:3b:b1:4d:22:5b:ce:72:e3:47:54:0a:ce:bf:2e:
0b:f7:93:4d:71:f8:dd:b3:af:24:3b:b9:97:07:d7:09:57:50:
9a:8e:b0:1a:b3:3b:50:61:44:34:52:64:95:21:64:95:84:df:
dc:b8:b0:96:53:71:1c:1a:6c:d5:5e:ad:63:d0:1d:f3:a3:c1:
fd:26:72:23:d9:02:2f:e3:1b:6b:8a:27:71:b6:90:f1:b8:af:
a3:21:18:6c:e8:91:40:60:e7:94:8a:4b:0b:33:ea:d6:be:44:
8e:e3:a7:8a:52:dc:41:e9:48:bb:b4:98:7c:ed:bf:9d:c7:09:
05:84:bc:0d:db:83:15:7e:a3:d3:8f:8d:d7:d5:6c:67:e5:f7:
84:db:74:0e:8f:92:00:54:87:47:47:04:52:04:dd:37:d9:da:
d6:48:af:c0:14:51:51:8c:fe:b1:d9:c6:63:79:94:01:76:ba:
2f:1a:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:27:37 2026 by rpki-client