Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: qMwr7vY3ibXSa+0zlBIYdr/+e2+J59S9ebykys3GFfE=
Subject key identifier: 5A:C0:A8:A2:7B:66:00:B9:4F:40:F3:F2:8F:E2:AF:45:5B:EC:0A:7F
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 01A1DEA7478BCBC0BD720A93BD88F824ACD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0A7C
Signing time: Sun 15 Nov 2026 10:01:07 +0000
Manifest this update: Sun 15 Nov 2026 10:01:07 +0000
Manifest next update: Mon 16 Nov 2026 10:01:07 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: hH570+Qe/M2xlp08EqygvJ2o3+0sWi9O7rycZe2hpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:47:8b:cb:c0:bd:72:0a:93:bd:88:f8:24:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Nov 15 10:01:07 2026 GMT
Not After : Nov 16 10:01:07 2026 GMT
Subject: CN=5ac0a8a27b6600b94f40f3f28fe2af455bec0a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:b3:61:01:3f:61:dd:10:20:34:c0:78:40:
02:f6:a4:82:23:e4:a5:84:ae:e5:a7:30:06:d1:b5:
6e:2e:d7:09:7f:3c:b5:10:e9:b1:07:13:56:5a:ee:
00:e6:af:3d:79:66:d8:99:0f:ac:8b:7c:7e:db:f9:
12:2f:be:82:0a:1e:3b:13:6a:3c:d0:49:17:97:e8:
fd:90:f8:5e:ec:da:db:c3:20:66:dd:ca:e5:21:e6:
d3:ec:b3:15:5d:be:ac:f2:a9:5a:e0:a0:e8:98:5a:
1e:e9:7e:5d:db:e5:45:32:c2:c3:b7:22:1b:c8:bd:
39:25:70:44:bc:d4:ec:5b:d9:0d:65:22:05:24:d5:
25:a8:b4:55:ff:75:73:7b:33:c1:c0:ee:43:7b:07:
17:d2:07:c3:1f:65:ca:85:aa:c2:ee:da:c4:7d:88:
23:f7:7a:5c:1e:6b:e1:3f:fa:84:36:14:a7:9b:0a:
a0:21:1b:8a:80:91:9b:ba:79:a8:94:59:f0:79:f6:
9f:84:d5:a3:81:2b:6b:82:1f:de:f4:9f:15:7d:c3:
89:b9:35:b7:0b:ef:2a:75:d5:c3:18:d1:40:cf:b9:
f2:07:f0:58:ec:ad:7a:8d:72:d3:58:7c:bf:9f:b9:
72:8b:0c:b1:86:5f:5a:3c:ec:c3:d4:f4:88:8d:a2:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:A8:A2:7B:66:00:B9:4F:40:F3:F2:8F:E2:AF:45:5B:EC:0A:7F
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:a6:d8:f9:53:87:37:e9:1c:8e:36:b1:85:c5:1f:fc:fe:
46:1f:bf:05:cb:38:fe:92:f9:4a:31:4e:df:41:a7:2c:04:40:
38:b1:85:f0:83:28:24:d4:d1:3e:40:e4:0c:84:53:1c:eb:2d:
02:b9:58:7d:ab:4d:8f:9e:29:b0:da:73:a5:60:73:34:af:bf:
64:03:81:24:d9:ba:5e:18:ec:06:aa:87:51:54:30:f8:d0:de:
6f:e1:2f:04:9b:a7:86:62:4e:67:35:e5:06:b7:b3:e9:a6:68:
5d:64:48:27:e6:f2:b1:67:07:5e:df:0f:66:92:1b:f3:b8:e3:
d1:8c:c6:31:67:f5:b5:3e:e6:2b:74:a0:c6:c5:f9:59:13:f8:
7a:67:a4:fa:ae:d8:b3:a4:8d:94:21:15:75:6f:04:33:91:c7:
a3:3a:04:3c:26:bb:87:34:ce:f4:85:59:0d:91:d2:e8:04:80:
62:9f:71:18:db:bb:1b:b6:f1:ab:5e:b3:e9:66:68:de:34:aa:
30:a8:b9:27:61:f4:7f:e1:9a:ce:1e:92:4a:e1:9c:4f:de:5f:
e9:b7:58:32:14:3a:a1:96:c3:14:ec:7f:56:29:51:32:ff:f0:
7d:a3:58:60:80:a4:a0:4c:b3:ee:ed:97:29:69:cf:18:8e:94:
8f:02:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:18 2026 by rpki-client