Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: 9eYtWW4lTJKVVwxPhtn83S7oY4vTW6ueSAEz1m3yEQQ=
Subject key identifier: 21:69:E8:83:59:E0:2B:5A:45:AD:2B:CB:35:F8:C5:F8:B7:55:61:AA
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 01A135C807B2BFB1DF1976F6E4E415A4EAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 0435
Signing time: Tue 13 Oct 2026 15:01:03 +0000
Manifest this update: Tue 13 Oct 2026 15:01:03 +0000
Manifest next update: Wed 14 Oct 2026 15:01:03 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: 3Ul0odCO6cPt/k1hDI97IMMAhS0qU6xEoTQhw8f/0aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:07:b2:bf:b1:df:19:76:f6:e4:e4:15:a4:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Oct 13 15:01:03 2026 GMT
Not After : Oct 14 15:01:03 2026 GMT
Subject: CN=2169e88359e02b5a45ad2bcb35f8c5f8b75561aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:eb:b4:6f:a7:f2:eb:05:2c:db:96:b9:22:
21:64:59:3b:f2:40:35:ca:e3:10:14:2c:22:b8:e6:
17:2f:8a:1d:97:02:57:d5:d1:10:a1:01:54:49:ea:
74:39:e6:26:31:73:6b:34:7f:4d:16:48:9b:e0:d0:
bd:6a:39:b4:51:87:27:e2:55:70:cc:36:c6:0b:d2:
6d:97:04:4a:12:ed:66:08:1e:9a:4c:b7:0b:65:cd:
ae:5c:59:60:1c:1b:83:51:18:b6:2b:7d:ed:92:c5:
ad:b6:59:b8:14:bf:4d:5a:d6:10:8c:2d:a7:ba:1b:
57:c8:89:7c:c6:b3:c6:77:57:05:cb:f7:67:a6:30:
f8:21:6b:74:e6:b6:db:2c:01:0b:7f:a6:df:3e:bc:
20:f0:38:d8:eb:be:b3:72:c2:2a:76:65:2b:d7:3b:
8d:9e:70:54:95:f0:ec:0b:22:fd:55:5f:47:09:35:
3a:c0:36:37:52:14:f9:be:1b:51:ae:1e:5f:26:e7:
d8:a5:12:e1:6c:23:af:f0:2a:4f:f3:f2:e8:6d:7e:
35:31:b8:c8:a0:b0:d8:a4:bd:0d:fb:42:25:fb:e0:
2d:76:ef:a4:da:88:07:b8:6a:71:d7:bb:da:c7:d9:
ff:b5:f1:28:1d:dc:51:9f:88:f1:e8:50:b3:05:b6:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:E8:83:59:E0:2B:5A:45:AD:2B:CB:35:F8:C5:F8:B7:55:61:AA
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:f2:ad:88:8f:2b:d3:1c:c1:c8:73:b9:42:de:82:3a:d1:
0c:23:78:b5:4d:9c:4c:54:c6:58:57:81:e7:ac:b3:c5:80:91:
a6:63:5e:7e:3b:07:af:5c:4f:0d:fd:ae:d0:3a:14:20:b8:fc:
11:d8:85:9e:6e:06:fe:c0:07:de:76:a5:47:a4:69:fc:dc:10:
9f:96:1e:3c:a2:47:0a:32:93:2f:96:aa:5f:0c:8b:ce:d2:ed:
3d:38:70:12:fb:ad:ab:e2:4c:32:6c:ca:1f:43:0a:82:b7:bd:
27:0a:59:12:4f:a0:a8:08:e9:c4:d7:12:47:8d:5d:4b:c9:53:
8d:49:99:dc:e0:cf:3f:a8:43:74:d8:11:b1:a8:30:76:39:5d:
43:a4:62:86:ed:16:fd:56:61:a5:24:dd:30:e5:de:ef:d7:3c:
53:ea:c8:7b:51:a4:97:94:c1:0b:d5:07:df:3c:b8:38:36:1f:
5f:07:79:e6:07:6a:53:a2:02:c5:3b:46:e9:cb:7a:5c:35:83:
06:80:9b:79:97:e7:83:6c:2f:65:49:f7:f2:51:c0:0e:4c:0b:
4c:82:89:7c:78:f9:f9:ab:3e:29:8a:94:e6:65:7a:04:57:ed:
8a:2e:0f:d6:58:5e:16:ce:ae:42:45:c3:69:8b:7e:db:48:e1:
23:fa:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:11:48 2026 by rpki-client