Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: MFkJ0bHfZAO9h13Koqc9PmNlIjUYjuDNaUyhM3J8xek=
Subject key identifier: 73:9C:6B:9E:B5:BE:B3:2E:94:5E:08:9D:26:B7:1B:4A:16:F8:8B:8B
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 01A0CE5A704A747E20CF5077267445F8DAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 04C2
Signing time: Wed 23 Sep 2026 13:00:28 +0000
Manifest this update: Wed 23 Sep 2026 13:00:28 +0000
Manifest next update: Thu 24 Sep 2026 13:00:28 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: pNi5F5IPRqSiEf4oTtHRZc/rfs3wjHwfVnl5Z59HDLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:70:4a:74:7e:20:cf:50:77:26:74:45:f8:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Sep 23 13:00:28 2026 GMT
Not After : Sep 24 13:00:28 2026 GMT
Subject: CN=739c6b9eb5beb32e945e089d26b71b4a16f88b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:23:5a:46:76:0d:8b:34:cb:b8:a2:df:93:
d7:5c:ec:f3:ae:07:7b:61:5e:f5:db:8d:ae:ce:a3:
c8:f1:7a:d5:41:74:9d:73:44:27:74:4a:82:25:34:
f8:3c:29:a9:a2:a3:cd:61:fe:f7:04:ff:57:78:fc:
3d:0b:df:a4:5e:a6:05:f2:7f:04:12:45:a4:c0:3c:
b3:ce:69:37:0f:a1:9a:2a:4e:11:e9:b1:88:2c:c4:
ab:14:71:13:7a:78:54:27:59:e8:2d:6d:90:18:e6:
0a:17:2c:0b:c7:3b:37:c0:07:6f:5d:82:0f:8c:87:
ce:c0:35:c3:ef:1d:00:3a:08:ad:94:be:3a:a6:af:
16:0a:ca:f0:13:48:e8:6f:f2:3a:6c:e7:5d:51:a1:
86:46:c3:7a:a8:97:b7:e6:ef:93:8e:20:ab:bd:b0:
c0:41:e3:ea:b6:e0:59:39:84:cf:c7:d1:c0:b4:6a:
5a:bb:d0:7b:9b:4f:c7:b9:7f:61:2d:5c:1f:aa:e0:
7c:2a:39:fc:f4:ca:c8:43:5f:11:eb:29:64:ba:ae:
26:22:a8:e5:a6:15:04:59:5e:e5:20:2e:81:fe:bc:
4e:6e:40:43:ca:b4:2e:f6:2e:42:bc:a7:5a:22:e6:
6e:2f:fb:d5:04:45:81:79:c2:b6:82:6a:28:c4:04:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9C:6B:9E:B5:BE:B3:2E:94:5E:08:9D:26:B7:1B:4A:16:F8:8B:8B
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dc:e8:66:9f:93:c3:14:57:ed:f6:69:77:7e:90:79:71:39:
45:60:1b:08:cb:5f:3f:bb:e1:90:ff:0f:49:de:f0:d0:77:ad:
14:7e:df:3a:46:84:65:25:90:d0:31:b1:a0:9a:81:ec:23:76:
1f:13:9b:5f:25:73:44:7d:37:59:a2:46:da:04:d0:43:1d:cc:
8e:70:a0:5a:72:82:b5:f6:ac:8d:38:e5:56:b0:f2:2b:b1:a4:
fa:dc:e5:b3:17:9d:2a:81:09:51:a5:fd:2e:6b:8f:e1:8d:3e:
9c:ca:00:70:38:5a:3d:20:b8:19:8b:8f:a5:61:79:db:6e:ce:
3a:26:7e:a9:42:78:1c:5a:83:88:58:5a:9c:1d:86:73:16:f6:
c5:1a:0a:d9:75:75:c0:ef:8f:92:64:7a:00:e2:cc:38:6d:ed:
d8:71:75:33:5b:42:60:98:6e:e9:10:03:15:6a:00:10:21:b0:
4b:91:c8:db:0a:8f:5d:eb:a6:2d:a7:36:5c:fc:13:77:7f:da:
a4:1c:35:d3:74:8b:aa:a2:10:e0:c8:1d:2a:65:43:74:20:4e:
5d:d7:2e:c8:7a:80:c6:93:33:9b:35:8b:47:64:a6:3c:9b:03:
64:c8:f0:93:79:07:c5:18:a6:02:27:72:53:58:6d:61:4b:59:
2c:6e:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:21:44 2026 by rpki-client