Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: aB74foXEWqWGk7D7AWPBsVeXAT/tTQzjeNohWD0NN3U=
Subject key identifier: 53:63:DE:C5:34:63:8A:4C:8F:6C:E8:8C:14:4A:A1:6F:D7:05:DC:CF
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 01A0D83BC1B460CC4061C5B5248490D5CA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 01FB
Signing time: Fri 25 Sep 2026 11:03:09 +0000
Manifest this update: Fri 25 Sep 2026 11:03:09 +0000
Manifest next update: Sat 26 Sep 2026 11:03:09 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: vgbix7yRfhRigEVKLBSNQ0PeBRhB9r/aSOt1B9U14Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:c1:b4:60:cc:40:61:c5:b5:24:84:90:d5:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Sep 25 11:03:09 2026 GMT
Not After : Sep 26 11:03:09 2026 GMT
Subject: CN=5363dec534638a4c8f6ce88c144aa16fd705dccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:b8:52:c9:86:56:27:66:7d:46:13:c3:13:
3a:62:80:b2:b6:67:c1:ee:0d:7e:2c:29:17:94:ee:
0d:79:c9:db:94:ff:c2:89:cb:42:8c:ae:6e:67:39:
3b:b2:6d:e8:ea:39:c9:e6:31:69:3a:fd:9d:55:5d:
6b:68:3f:84:c1:d2:19:4b:8f:6d:bf:82:e2:3d:de:
1e:59:27:59:8d:25:07:6e:49:93:ef:57:15:f5:15:
40:3f:d3:7d:88:82:93:9f:63:39:e8:ff:da:51:f3:
57:3e:06:18:6f:14:fc:1d:14:89:36:d5:1c:e0:b8:
15:87:51:70:4e:a1:e7:b5:ca:06:f1:71:30:20:b1:
a0:91:98:0b:aa:b6:73:ab:09:1f:c3:e0:66:87:21:
d6:fb:5f:c9:71:a6:e3:ec:6b:9f:3a:21:69:96:d2:
3a:3e:da:24:a0:e8:80:4c:62:dd:e3:6b:54:82:46:
5b:d1:f0:73:ee:b5:f0:11:99:65:67:68:58:f3:0b:
db:9e:58:49:f8:a0:fc:bc:50:8b:a0:2a:85:b3:df:
52:8d:a6:d4:f2:af:62:aa:16:19:4d:8a:0e:89:c4:
61:bb:60:b4:5e:59:cf:b0:32:3d:a7:55:f2:fe:1f:
4f:27:3f:83:eb:45:ff:93:b9:80:b0:26:61:5a:8a:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:63:DE:C5:34:63:8A:4C:8F:6C:E8:8C:14:4A:A1:6F:D7:05:DC:CF
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:52:7b:4d:5f:b5:bd:07:a8:03:78:f3:ba:0c:db:28:95:
3e:4c:80:4b:c5:91:fc:86:ca:2b:77:22:1d:e0:18:7c:bc:a3:
af:8c:03:cd:08:1f:e9:f8:9f:dd:47:4e:57:12:a0:6b:0a:05:
d3:04:ee:d3:a2:08:ab:2b:82:f7:38:9d:60:d3:41:46:37:da:
a6:75:4a:c8:23:f7:1e:86:43:a8:0d:16:bd:5e:32:f5:73:15:
de:f2:bb:03:46:1e:42:ed:8b:4c:ce:ca:d8:fb:57:c4:67:df:
3f:69:ef:e3:f5:24:50:c2:02:0a:ca:05:c9:a6:b1:79:87:ba:
62:bb:7d:79:36:be:da:39:16:49:2a:33:20:69:c6:bc:5a:1a:
02:86:cb:41:9a:c5:61:5e:18:e7:81:e1:6c:e5:76:9c:3c:e4:
a8:5e:e8:05:f6:be:e5:5f:20:b0:f8:a8:e4:e2:37:ae:7b:14:
db:f8:e0:be:51:8a:f4:79:b9:81:8e:0a:b9:bd:de:4a:b7:c2:
2f:57:49:a2:46:e3:4b:46:4e:ad:50:5b:be:5f:51:1e:fa:01:
26:73:56:8c:15:af:f3:96:5f:3c:ad:79:bd:e2:f5:5a:bb:2c:
79:d3:88:3d:4c:e3:5d:75:c0:a8:9e:cc:df:f8:bf:bf:d9:5f:
99:83:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:24:13 2026 by rpki-client