Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
File: yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft (raw, json)
Hash identifier: emuy9POUvSM47/CF8SnmIEX/5Z39Ysnb/nMYFKi0TG0=
Subject key identifier: FC:8E:B9:17:2C:65:67:4A:7A:2E:42:DB:F5:CC:C6:90:C6:65:29:4A
Authority key identifier: C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
Certificate issuer: /CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Certificate serial: 01A0EA7725A107CFE86D5862FD49F23AD9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
Manifest number: A9
Signing time: Tue 29 Sep 2026 00:01:11 +0000
Manifest this update: Tue 29 Sep 2026 00:01:11 +0000
Manifest next update: Wed 30 Sep 2026 00:01:11 +0000
Files and hashes: 1: 3Yg8ZI_M55yTnDX3fw66DFkuevk.roa (hash: 9HTIHR/0mEzqSqmXuRSbxyoZq8o5zsBm7Dh1wZjR4mc=)
2: yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl (hash: VozEG3lrh9w4JmLMtfq8EGK+58xkYqSDGqQzxgt9F74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:25:a1:07:cf:e8:6d:58:62:fd:49:f2:3a:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Validity
Not Before: Sep 29 00:01:11 2026 GMT
Not After : Sep 30 00:01:11 2026 GMT
Subject: CN=fc8eb9172c65674a7a2e42dbf5ccc690c665294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:4f:cf:00:8f:4b:fd:36:f1:92:8a:0a:64:
8f:9c:5c:cb:31:77:7d:b3:7a:55:78:0c:bb:82:29:
5a:fa:97:ac:a5:05:22:bd:cf:ff:ed:f8:71:82:80:
38:a7:b1:43:ba:88:db:51:88:c1:d8:98:13:47:7a:
31:07:77:79:d8:6c:a5:16:15:86:c1:bd:3d:80:1a:
98:5c:9b:c6:ea:1d:b3:58:4b:86:3a:f4:22:79:d8:
81:12:3d:f2:53:4d:b7:e8:75:e4:7c:6c:d2:2e:b5:
61:99:79:ad:df:f6:79:59:13:c9:a4:46:6e:bd:00:
ad:14:f0:dd:e2:95:44:48:9b:45:a3:29:6f:3d:14:
9b:8a:0f:7a:a6:23:f8:1c:eb:a1:6b:67:62:02:53:
d5:d9:18:83:b7:31:40:d0:e1:c2:0a:96:39:86:9f:
57:d0:3c:fb:8e:08:b3:a1:21:6d:d9:08:0b:2b:30:
a1:1f:ad:ce:3c:75:ff:0f:ea:ae:9e:50:78:7e:81:
0c:70:a4:92:34:68:72:4a:3f:4b:5d:44:f3:98:c0:
85:d2:48:77:5c:28:19:1c:e2:6b:44:ff:33:c0:c5:
0f:3a:b6:6d:27:be:c9:39:8d:11:e4:80:22:6e:fa:
23:52:d7:72:f4:9f:1d:5a:ab:3e:a6:33:f8:db:fa:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:B9:17:2C:65:67:4A:7A:2E:42:DB:F5:CC:C6:90:C6:65:29:4A
X509v3 Authority Key Identifier:
keyid:C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:db:dc:5f:16:f8:9f:0d:80:b5:c2:5f:2e:34:6b:a9:51:
c3:63:ed:0e:b6:f0:84:3f:10:2d:14:88:0b:df:5a:51:9c:4c:
8b:0b:3e:8b:ef:59:35:c9:80:e9:6a:05:bb:10:b9:40:29:b2:
a5:43:e9:29:aa:bc:a1:40:0f:de:d6:23:2b:24:46:ac:cb:ff:
df:c9:ed:5c:89:c6:ad:a0:94:6b:84:80:38:cd:b5:db:c6:d2:
c3:b3:2b:0a:6c:25:92:45:a1:ac:bc:8e:45:42:38:84:6c:39:
f6:3c:7b:6a:f6:4f:eb:c9:47:88:cd:fc:bf:a9:d5:d6:80:5d:
54:19:c3:50:b9:f4:be:04:fb:5a:b8:ee:8b:bf:34:cd:24:5e:
89:d4:53:00:d1:a2:1d:7e:15:b1:48:2f:9e:50:ca:66:d4:9c:
4b:af:bf:e4:12:09:63:a3:27:13:57:3d:f9:e7:1f:1d:d6:14:
d0:ee:25:11:fa:ba:40:41:e2:c7:ac:0b:ae:55:81:9c:4b:8c:
ff:06:c0:2a:59:46:09:d8:74:b4:8a:5a:0b:56:b9:e9:95:67:
2b:8e:b1:d8:e3:f6:6a:a8:6c:91:a4:e0:19:08:c7:e2:a6:93:
11:f0:5a:de:1a:0a:60:ab:a5:74:17:d8:c8:03:86:af:e0:42:
8d:89:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:57:26 2026 by rpki-client