Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: Haf58ocQfev/WTkAJXO8FN3gAfFCc4MV+/j3RdF77GE=
Subject key identifier: 0C:2D:F5:60:43:53:3A:8C:60:D4:A5:95:62:F8:27:33:58:FA:ED:DD
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 01A13DB870A9E87FD602B61E0871207717A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 1269
Signing time: Thu 15 Oct 2026 04:00:59 +0000
Manifest this update: Thu 15 Oct 2026 04:00:59 +0000
Manifest next update: Fri 16 Oct 2026 04:00:59 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: ZbejGMEtHHVDAsYmdy7d1Z6ipb0BHtboP3YY2xqmAH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:70:a9:e8:7f:d6:02:b6:1e:08:71:20:77:17:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Oct 15 04:00:59 2026 GMT
Not After : Oct 16 04:00:59 2026 GMT
Subject: CN=0c2df56043533a8c60d4a59562f8273358faeddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:fb:cd:19:d4:53:f4:ba:0d:92:b4:0a:60:
04:be:ae:6a:8b:da:2a:ff:03:d1:ac:96:17:7b:2e:
23:95:23:ac:a2:0e:ea:0b:aa:81:80:3a:fb:1e:6e:
8e:07:24:66:1a:69:bf:3e:c5:ba:64:f8:cc:b1:92:
ed:99:bb:80:f2:00:41:14:7f:92:a9:7e:94:86:87:
d9:14:a2:e5:ec:1f:5a:c7:16:af:7e:98:e9:4a:43:
ba:5e:17:03:eb:21:a6:27:04:52:d5:6a:55:a8:73:
77:c8:8f:82:ad:56:92:9d:91:fe:28:99:e2:77:f8:
61:e1:95:99:3e:68:ab:24:32:97:c2:04:95:d3:e5:
67:28:41:14:c0:75:c8:59:43:8c:62:c2:b0:49:58:
0f:be:5e:76:83:e2:bb:2f:aa:ae:cc:04:44:fc:51:
27:39:f6:38:2e:b1:91:ef:03:51:c7:64:62:5d:66:
4d:0d:7c:33:99:95:32:81:27:34:60:f7:76:dd:de:
ed:14:a8:c3:89:6f:40:9b:75:c5:f2:50:6e:89:df:
e0:e6:70:8d:17:ba:44:4c:36:dc:63:dc:67:ae:ab:
36:4d:cc:53:97:63:22:b7:5b:3d:bb:82:5f:a1:3b:
ad:7c:06:c3:f8:fa:6a:e9:08:03:14:d6:04:c8:1d:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:F5:60:43:53:3A:8C:60:D4:A5:95:62:F8:27:33:58:FA:ED:DD
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:f3:07:d7:25:c5:b9:90:ad:55:df:80:ec:64:a0:7f:2a:
87:ff:e4:b5:57:66:b8:c7:70:8f:8b:88:30:9f:d7:49:cc:61:
e7:29:78:8d:0e:40:1d:87:98:f8:fd:ed:e9:6b:df:56:0d:48:
25:55:24:01:71:0f:4d:b1:b7:bd:4a:69:78:3e:d4:dd:b9:c5:
e6:49:f3:60:e1:fe:65:99:3d:f7:85:7c:7a:70:45:78:82:22:
de:94:14:47:06:69:be:74:3e:71:fa:7f:19:e2:93:6b:4f:50:
5a:ef:55:c5:b8:61:32:56:e8:c4:be:fe:27:f3:38:5d:87:65:
ea:1e:46:c2:13:51:15:e2:c3:33:0c:16:18:62:e6:91:25:48:
0d:07:94:18:f3:0e:76:2b:f0:a5:28:fc:ef:43:4a:95:c6:69:
6a:b4:71:e1:65:32:55:75:38:21:5c:a8:bd:75:6d:92:c4:5e:
e5:b2:a8:64:83:db:24:f4:cb:eb:b7:bc:26:11:99:bb:d9:ba:
0f:42:3b:a6:80:f9:55:6c:b8:b6:bc:65:66:6d:34:0c:8c:db:
08:45:1a:ad:4a:ca:0b:34:ff:8b:ad:7c:10:f5:cb:9f:c2:8c:
8b:bd:9c:02:d5:9a:6e:c9:25:6a:6a:66:7d:87:75:86:9a:6c:
30:0e:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:19 2026 by rpki-client