Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: VsQvdbPQy69Pvym3BhCqzPMBwnsmwjYbIB6nNufKKGQ=
Subject key identifier: 70:E4:7E:26:4B:32:EF:8B:E3:1B:5D:A0:E0:D6:49:61:99:9C:71:AD
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01A0C3698A44CE66798E874644049CFCA714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0AE2
Signing time: Mon 21 Sep 2026 10:01:08 +0000
Manifest this update: Mon 21 Sep 2026 10:01:08 +0000
Manifest next update: Tue 22 Sep 2026 10:01:08 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: tKNhL2a+DoH4v7MQxQLG78j9elK7BzT7ZYgTZp/6aiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:8a:44:ce:66:79:8e:87:46:44:04:9c:fc:a7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Sep 21 10:01:08 2026 GMT
Not After : Sep 22 10:01:08 2026 GMT
Subject: CN=70e47e264b32ef8be31b5da0e0d64961999c71ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:c6:90:3b:5f:f1:da:78:61:cd:5c:64:e0:
f4:d8:d7:8b:60:99:c0:ff:86:4e:76:af:d6:31:66:
2a:e7:86:26:c2:7b:23:b6:17:03:a2:4b:5c:80:18:
da:46:c7:62:94:ed:be:9e:3b:ab:22:c9:7f:d6:c6:
5a:8c:73:37:df:16:7c:da:bd:af:12:63:f8:6a:75:
11:ed:98:ea:07:b1:19:42:0d:fe:65:1c:de:a4:ae:
4f:ef:b2:dd:3e:cb:27:52:6e:1a:29:87:15:2f:63:
c0:59:e4:1a:81:65:95:02:42:27:90:3d:be:27:1c:
ed:62:96:ee:80:76:2d:95:09:98:6a:a0:1d:18:8e:
96:9f:ed:d4:60:1d:15:0c:52:ec:29:cd:bf:eb:d3:
13:ea:fb:1d:c4:8a:d2:03:96:58:11:6a:a3:66:17:
7a:26:19:38:8a:d7:d3:19:9a:0d:b2:c0:97:27:45:
6b:2a:a2:a1:4a:29:f1:da:84:ed:c1:f2:7a:db:24:
f4:ba:ff:95:9b:27:81:f4:ec:ee:8f:80:fd:52:1a:
00:1f:50:28:ab:7c:e7:b1:b4:10:8c:1e:99:b2:d1:
26:72:34:d8:6a:19:5d:14:da:3c:50:c5:d2:86:10:
83:11:55:87:ef:55:4a:1d:81:c5:b0:5c:2f:93:42:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:7E:26:4B:32:EF:8B:E3:1B:5D:A0:E0:D6:49:61:99:9C:71:AD
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ee:cd:31:64:56:c1:ee:05:9d:38:39:87:7d:23:8b:e6:e9:
d3:30:9f:1e:5f:7d:30:34:d7:a2:b4:90:98:02:2a:8f:75:7d:
16:96:32:2b:9c:ac:e8:39:eb:78:f6:68:18:ec:70:4e:90:79:
be:22:72:2c:02:06:10:37:bb:48:e8:07:dc:41:b8:7d:db:df:
2a:95:15:43:38:6c:66:fb:d7:91:c0:f6:a0:d4:73:75:d8:43:
07:1a:06:e0:be:e3:58:1c:1c:c4:57:61:99:dc:3d:f9:f5:7b:
75:83:65:e0:d1:ee:09:59:1c:0a:f5:41:bd:ee:7a:4a:c1:6c:
a0:59:07:8e:86:fc:67:24:ca:d5:bf:b0:c7:ad:95:86:de:3f:
50:0a:c0:f6:42:9b:81:06:5d:22:1a:ea:f9:fd:14:8a:52:2d:
96:c2:96:45:d5:d6:e6:39:06:d5:34:4d:7c:99:6b:48:fc:e3:
4b:08:1e:83:b8:0d:e8:88:8d:80:c8:b9:64:cc:25:56:f3:79:
eb:0f:fc:b0:ec:fd:1d:52:ce:00:e9:77:d9:ef:9f:e9:38:36:
df:a0:c9:96:9a:35:66:81:0a:f9:5c:ac:4d:6c:ac:7e:a6:66:
12:81:48:04:6c:f2:ba:d4:0f:85:99:43:7c:0c:24:89:60:b4:
48:9f:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:48 2026 by rpki-client