Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: nPVNCG/Dm/f1n135pk+NJwI8iyCqafaApaEDzr+seCA=
Subject key identifier: BB:04:51:CB:69:89:75:92:75:E9:7F:30:47:00:81:E5:6D:5D:F0:AA
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 01A0C6A0ED9097338F042903AB71AA5D46A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 04BE
Signing time: Tue 22 Sep 2026 01:00:30 +0000
Manifest this update: Tue 22 Sep 2026 01:00:30 +0000
Manifest next update: Wed 23 Sep 2026 01:00:30 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: iGdr3YLiLVQi6j5DQ01DGKsu5ss.roa (hash: h6FlbN1+Nek1LKhgDeDKXC7AdnM99VdSyR1ScXlrIKc=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: RryeeqPahBVxpiyzqa4Q1xlqwGww9cNIxmbREirZEvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ed:90:97:33:8f:04:29:03:ab:71:aa:5d:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Sep 22 01:00:30 2026 GMT
Not After : Sep 23 01:00:30 2026 GMT
Subject: CN=bb0451cb6989759275e97f30470081e56d5df0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:83:e0:13:1a:98:39:0b:2b:6b:bc:f4:11:
50:9a:a2:eb:d5:3b:89:19:7c:f6:be:c6:a8:9d:a2:
dc:5a:07:03:11:c0:a5:6c:61:a6:40:3f:da:da:51:
61:51:20:6e:cb:49:ef:97:5c:90:a3:7b:d3:df:18:
0e:ca:fb:97:0f:9e:4c:b2:ed:b2:06:9c:5a:aa:25:
f7:84:2e:81:3f:ea:db:a5:e6:3f:78:33:05:0a:95:
8d:78:ba:d2:ee:b3:85:13:23:86:75:67:74:61:38:
d1:b9:df:09:7a:6e:58:1c:0a:bd:4b:0e:37:12:30:
69:36:0b:94:0a:a9:8a:d5:eb:40:24:92:bd:ab:f1:
e7:61:9b:59:20:e5:fb:14:20:c9:3e:b8:a4:c6:b7:
d8:7b:31:b3:8e:ef:c8:8e:d7:d3:71:94:24:ef:5f:
37:15:8f:d6:01:a5:a0:95:1d:e8:ed:1f:22:c3:66:
98:01:93:47:25:46:a1:fe:1b:3c:2a:a3:35:d4:48:
2c:b1:2f:7c:f7:c5:70:b9:6e:85:80:99:d8:99:36:
ca:3a:d0:96:2c:34:17:f3:7f:24:3d:03:ef:f6:12:
f3:ae:21:19:31:43:e1:c0:d0:1e:60:79:a6:7f:3a:
a4:39:7f:ad:d2:69:8c:3a:e9:4f:35:ca:b2:b2:f7:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:51:CB:69:89:75:92:75:E9:7F:30:47:00:81:E5:6D:5D:F0:AA
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:5f:0e:ae:de:f3:91:7f:8e:d7:a7:36:d9:53:77:99:a8:
cf:9e:5c:d6:3e:4e:aa:c8:7d:30:e1:b3:fb:2b:2b:d0:c8:6d:
8f:28:e0:7a:7e:6d:4d:d4:99:77:ee:c1:6c:49:3b:1c:f9:f5:
08:8c:3e:5c:72:41:3b:c3:fd:6a:61:1e:6b:6f:c9:f3:56:84:
2f:16:ca:f7:35:44:67:b9:74:5d:b3:5c:2e:b4:14:eb:e6:7a:
60:f3:73:b9:7b:90:5a:3b:f1:b8:c2:9c:de:ee:65:69:a0:88:
e2:7d:6d:06:0f:a1:16:31:c9:bb:26:d1:43:b1:e9:2a:7f:ea:
10:88:e9:65:15:08:84:da:48:95:a0:13:46:b4:af:41:58:f9:
3d:bc:a7:9f:c3:d5:a6:26:81:5f:a1:b3:76:1b:29:f8:cf:07:
04:2d:4e:32:9a:8f:73:c8:79:07:65:17:2d:c3:66:cd:eb:77:
3d:66:2b:1c:5a:ef:b6:c5:8e:2b:18:dd:31:1a:4c:93:4c:95:
02:b3:26:01:3b:a5:44:1b:c0:ae:bb:d1:9c:dd:dc:a3:fa:91:
54:bc:0b:a7:b1:c9:27:3a:8c:d9:33:b1:6f:cd:7e:36:6b:e7:
31:39:f5:3c:14:30:ff:39:21:1d:59:ff:8f:0a:67:34:95:7a:
0d:92:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:09 2026 by rpki-client