Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: UsA9jCQwAp3323ZP5qFEK0MPUe8hkMPjd+rOLEdTZm0=
Subject key identifier: 3C:2A:B8:F7:BE:FC:88:61:E1:0A:F5:FD:79:54:BC:A8:47:9C:AB:05
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 01A0D45DA9E7336C222149D43741C6EDD461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0A8E
Signing time: Thu 24 Sep 2026 17:01:43 +0000
Manifest this update: Thu 24 Sep 2026 17:01:43 +0000
Manifest next update: Fri 25 Sep 2026 17:01:43 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (hash: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=)
4: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: ZKftUOUmf7ygGmOkf8ozMMFgLQFJIWv+peU/6PafUqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:a9:e7:33:6c:22:21:49:d4:37:41:c6:ed:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Sep 24 17:01:43 2026 GMT
Not After : Sep 25 17:01:43 2026 GMT
Subject: CN=3c2ab8f7befc8861e10af5fd7954bca8479cab05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:22:38:a5:ee:19:3b:cf:d1:85:85:36:3a:
c0:aa:01:55:c5:0b:b6:a9:f9:e7:f0:19:41:06:77:
23:b1:66:9c:9e:59:b4:9a:7f:e6:4e:39:f2:e1:22:
81:13:44:bb:ca:c0:4b:e0:3a:af:0c:c3:83:c8:bf:
09:ca:69:a8:db:42:24:58:5b:f7:83:4a:4b:be:73:
27:e0:9e:17:e0:07:ca:d4:7b:14:c2:61:10:50:ec:
63:97:6f:a4:8d:bc:25:58:e6:88:ba:df:4e:13:89:
dc:df:d0:b0:07:cc:8d:89:20:25:33:1d:54:38:ec:
4a:0f:d3:90:f2:42:51:d3:63:15:1d:94:d7:8f:72:
0c:6e:20:6d:de:06:14:0b:92:2f:c6:91:ca:25:df:
f8:1d:c1:da:6a:68:92:d0:2d:4c:91:1e:14:14:a8:
d4:8a:8d:6e:ef:32:8f:17:3e:c4:90:84:1b:c1:b7:
1f:f5:79:4f:5d:66:1b:d6:07:10:13:68:a0:d7:c9:
0c:3c:e8:f5:7d:74:f0:7b:01:a0:f0:ee:14:04:b7:
79:10:af:77:00:0d:e1:f9:ed:a3:bc:8c:46:dd:d3:
2f:0c:fd:ac:f6:83:bf:0d:7c:64:31:a1:b7:55:9c:
d4:4e:84:78:93:e8:ab:a6:59:08:68:27:69:e5:1a:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:B8:F7:BE:FC:88:61:E1:0A:F5:FD:79:54:BC:A8:47:9C:AB:05
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:d3:d5:24:77:9c:dd:6d:16:2e:86:d5:b8:a1:62:63:e7:
e0:5a:0b:54:8e:91:c1:56:2f:5b:c7:f6:da:70:23:39:b0:0f:
71:e3:89:5d:2e:26:59:0a:4f:23:b7:ec:3a:4d:a6:11:34:0a:
eb:f1:4c:e8:8e:fc:0a:44:a3:d4:6d:43:7d:c2:a1:14:5f:87:
c1:8f:6f:ae:10:38:69:5c:63:72:df:86:0f:ae:1d:98:c4:76:
63:99:98:43:9b:a3:67:5d:65:e9:3c:ac:d5:41:93:ed:cf:77:
e5:b2:5b:ef:73:2e:ca:1a:56:b4:72:1b:4a:11:a3:6c:fa:3a:
0a:e5:80:f8:16:55:1f:9d:10:f9:0f:47:b4:14:17:a6:94:8b:
c7:9a:33:6f:de:e2:26:0f:74:6c:0e:1d:3e:cd:61:2c:16:db:
f3:de:9a:70:16:46:85:f5:a1:17:06:14:72:6f:6e:f9:d6:32:
54:61:0c:45:2b:11:f8:12:95:a8:06:4d:b6:0c:32:1f:5a:4a:
2c:c2:fb:1e:34:02:e8:1a:ba:16:59:07:dd:10:a8:e7:ec:a3:
4e:89:2d:a1:f5:f4:30:b6:54:0c:15:91:f7:c3:85:b0:2c:3d:
8b:f3:26:b1:2e:fe:5e:af:96:3e:73:70:b4:49:3c:eb:23:a7:
bb:a3:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:10:12 2026 by rpki-client