Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier: ztM/Sf2aGcgN56p9zhGCqvRIFQwP0rAOv2x49uvJmGE=
Subject key identifier: 08:5D:21:46:1C:17:F3:C1:6F:79:31:38:1D:8B:6F:FB:6D:C1:BB:92
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer: /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial: 01A0C746600E295CBD5821A44ABAC02F5D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number: 0161
Signing time: Tue 22 Sep 2026 04:01:12 +0000
Manifest this update: Tue 22 Sep 2026 04:01:12 +0000
Manifest next update: Wed 23 Sep 2026 04:01:12 +0000
Files and hashes: 1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: 4hWktl8AAh55rcD8yKL5aBote7aqOmyN3D5hZFaO3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:60:0e:29:5c:bd:58:21:a4:4a:ba:c0:2f:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Validity
Not Before: Sep 22 04:01:12 2026 GMT
Not After : Sep 23 04:01:12 2026 GMT
Subject: CN=085d21461c17f3c16f7931381d8b6ffb6dc1bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:b5:2b:60:28:c1:44:72:ec:74:15:8e:e2:
fc:d3:28:e3:6a:3d:c1:75:86:04:c6:b9:a7:b3:25:
ec:06:cc:e6:e6:8e:aa:1b:51:5b:7d:90:c5:39:20:
13:99:b0:00:e2:5b:62:e6:81:be:ba:f4:7a:f2:7a:
cb:b7:76:11:a1:1a:9d:3c:e3:91:a0:60:5f:1c:ca:
02:e0:64:72:d2:39:b3:f5:d1:e1:c2:b1:72:c4:64:
41:75:3c:40:f3:34:79:db:03:33:7e:c5:13:5e:15:
7b:23:16:f0:a8:6b:a9:a3:2c:f8:3f:56:15:c5:41:
36:37:b4:b8:31:51:14:56:27:d9:af:31:b4:49:eb:
60:6f:27:38:f4:be:29:04:53:58:41:52:6e:6f:49:
f1:43:22:da:85:b7:54:5e:34:41:91:e9:ae:0a:4b:
11:c4:53:dd:16:4e:0f:84:04:e2:89:1f:cc:48:0b:
a8:18:a1:96:1c:02:4c:f2:0b:95:c4:41:c1:0c:46:
81:7f:cd:94:94:0b:14:91:13:09:84:fc:81:b2:22:
e4:d1:d9:72:fe:8c:09:71:4c:6f:17:ab:de:a0:70:
3d:5c:bc:35:6c:ee:eb:47:69:a6:ab:ae:0d:33:f7:
84:5f:20:aa:3e:7f:9f:a4:89:47:69:d1:f8:f5:b2:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:21:46:1C:17:F3:C1:6F:79:31:38:1D:8B:6F:FB:6D:C1:BB:92
X509v3 Authority Key Identifier:
keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:52:44:c9:d7:7d:b4:af:36:54:d9:a8:45:3a:e2:c7:0a:
a1:b4:3b:b1:a8:af:e1:f5:80:1a:05:b1:20:63:b1:e3:92:0b:
17:2a:ba:7c:c6:1f:7d:fa:85:0a:a2:3f:90:dd:ba:98:77:a7:
24:25:86:e2:5f:dc:99:9d:e0:12:f8:ea:d7:c8:46:94:29:eb:
ca:eb:75:63:38:2b:9c:1c:c9:b8:21:3d:52:4d:d9:59:95:dd:
9c:a8:89:57:98:19:bc:5d:1b:21:0b:05:06:da:1c:6d:4a:0b:
ea:d4:10:4b:ec:f0:11:81:d7:8a:20:1b:f6:09:5a:9d:2b:94:
d1:5b:9a:d6:1a:b9:92:eb:56:1a:ad:f6:89:8a:94:00:09:03:
f2:ca:35:65:7d:6b:d9:42:08:bb:1e:a8:9a:49:f0:8a:7d:0b:
5b:5a:00:6a:04:80:35:78:9e:92:93:1a:e2:f7:96:ae:de:69:
e6:0c:9d:07:d2:1b:cc:ec:9f:d2:38:02:1d:7e:b9:97:ce:33:
ad:2b:6b:8b:7f:5b:26:6c:5d:71:da:8c:fd:8c:79:8f:a3:0a:
0d:54:79:82:3d:22:49:0c:e9:1a:07:30:47:65:9e:18:09:19:
c3:e2:97:ca:1c:07:5f:52:55:2e:fe:81:34:2f:3b:80:92:f1:
cf:dc:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:46 2026 by rpki-client