Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: YXT8unHOHEX8LJ0t9YgjH1mHfM1rB6IkVuqzqfbwDMc=
Subject key identifier: 0E:47:A7:45:9A:AB:D7:7A:25:2F:3E:E1:FF:1C:F2:9D:C6:E5:91:5B
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 01A0C5C517E1D13E2D10EBF6690A5AFBA2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 1020
Signing time: Mon 21 Sep 2026 21:00:23 +0000
Manifest this update: Mon 21 Sep 2026 21:00:23 +0000
Manifest next update: Tue 22 Sep 2026 21:00:23 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: Bk84c+TjS5u2uRLPJSvrGk/A303fx1+EGAcT7Wx0ils=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:17:e1:d1:3e:2d:10:eb:f6:69:0a:5a:fb:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Sep 21 21:00:23 2026 GMT
Not After : Sep 22 21:00:23 2026 GMT
Subject: CN=0e47a7459aabd77a252f3ee1ff1cf29dc6e5915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:86:e4:e0:91:d0:f0:29:85:f1:21:b9:d3:
46:15:6b:4b:90:01:74:7e:cb:7b:2a:e6:f2:f3:86:
48:c4:16:d9:25:19:6d:43:56:5d:4a:65:f6:fb:e0:
68:a8:bd:1f:0b:24:9f:36:37:5b:87:98:96:ae:8c:
27:96:37:cc:12:07:27:ca:cb:4a:b1:9b:01:2e:15:
b7:5c:de:15:d2:6f:1f:d6:e5:4b:ad:eb:1e:ca:87:
ca:32:83:2e:76:a4:7f:e5:2d:e3:cb:bc:09:17:e6:
71:a0:ee:c9:aa:0a:6a:74:98:bb:3f:e0:1c:f8:ae:
75:fd:9d:77:9d:42:50:e5:dc:79:ef:82:a2:0c:cd:
25:55:f1:67:97:3b:82:8c:c6:ff:6f:40:f6:6e:2a:
2e:5b:18:44:82:dd:f3:d3:46:40:48:ea:cc:bb:77:
55:ee:01:09:9e:ed:35:05:65:2f:67:f5:55:5b:db:
c9:01:f4:58:50:70:29:ab:f5:17:15:0f:4f:a1:2a:
de:47:8f:d9:3a:d8:cd:eb:35:a3:a1:eb:9c:b8:aa:
d4:3a:17:51:11:b9:da:54:a5:c1:0a:8e:01:26:dc:
b0:60:39:ec:ba:d7:df:f3:66:66:95:f0:48:6d:80:
06:50:f9:fe:f9:73:d2:86:a5:f1:a9:06:91:b0:ed:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:A7:45:9A:AB:D7:7A:25:2F:3E:E1:FF:1C:F2:9D:C6:E5:91:5B
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ae:28:9a:e3:ed:bf:4d:34:a9:8f:51:68:ab:0e:45:0b:f9:
60:40:b3:99:a3:d8:13:8b:30:53:b6:97:8e:4f:76:c7:c7:4c:
78:53:97:7b:1b:06:dd:37:76:85:61:ae:c1:e7:45:22:b5:9d:
a2:ec:93:2f:f6:d9:bb:03:37:c6:8c:6f:e4:4f:a8:bb:1a:6a:
4b:ce:f9:cb:ff:fb:e7:ea:72:6b:44:ce:c9:5a:20:5e:21:70:
da:68:7d:25:ad:05:29:11:f5:a9:65:1f:dd:b0:08:8c:55:61:
e7:76:e4:dd:e6:5a:0d:24:f1:3d:e6:69:9c:62:bf:ec:dc:65:
bf:08:7a:9e:5a:2f:fe:70:46:25:3b:0d:82:81:91:e1:e9:36:
e6:50:54:17:3e:f5:5a:84:24:90:5e:23:66:fb:c1:9d:a2:5e:
f9:03:0b:15:97:1c:33:bf:e5:2f:a2:f2:ec:00:69:c9:34:6a:
5f:ee:0e:38:73:1f:ab:62:4e:be:c2:df:6b:c6:aa:69:78:67:
b7:97:eb:05:d9:1a:94:08:ee:96:d1:1f:f2:82:70:56:78:8e:
28:aa:f7:49:ae:99:c0:ba:dd:c8:44:ce:53:61:5c:03:c7:f2:
a1:a5:87:5c:0f:bc:6f:ec:30:1f:dc:05:1b:b6:88:45:7c:f4:
55:0d:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:46:30 2026 by rpki-client