Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: /VCBdwYOnyBONueChdYICn9X2UA1a1xZrXx3/9aycOk=
Subject key identifier: 05:3E:3D:67:7E:24:7A:A2:F6:A3:E9:B2:8E:4B:8B:47:E0:81:45:EF
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 01A0BF8CE75004412704E8DAC5DD461450F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0AE0
Signing time: Sun 20 Sep 2026 16:01:17 +0000
Manifest this update: Sun 20 Sep 2026 16:01:17 +0000
Manifest next update: Mon 21 Sep 2026 16:01:17 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: SMciMFmRfTCEnQtdPR+hkHa1hwnRLTHDsBT+Uqd4rKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:e7:50:04:41:27:04:e8:da:c5:dd:46:14:50:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Sep 20 16:01:17 2026 GMT
Not After : Sep 21 16:01:17 2026 GMT
Subject: CN=053e3d677e247aa2f6a3e9b28e4b8b47e08145ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:11:cc:23:62:65:3f:49:57:88:e3:61:9f:
fe:dd:33:50:07:a3:82:63:e0:32:80:d3:4c:6b:d4:
62:95:dc:6c:54:ae:4a:9b:a4:ee:d2:d9:ca:4f:68:
18:87:18:c5:ad:59:c4:2d:6a:1a:28:b1:f6:2d:cd:
d3:bc:79:92:30:5d:64:e2:50:d4:7d:f2:81:4e:be:
fa:90:09:cc:be:ec:9e:3b:7c:63:44:c9:a3:66:ab:
be:ae:38:8a:b1:87:f3:75:25:86:70:8f:4b:ac:89:
b4:32:0b:d3:6f:35:3c:14:88:d8:76:05:49:7b:01:
ad:a8:aa:a9:27:d0:98:7b:f5:cb:f2:ff:10:fe:bf:
3e:28:ca:87:55:fd:77:40:77:75:7e:33:46:96:6a:
f2:25:69:03:36:87:b5:92:7c:39:a1:07:51:58:a9:
c6:60:df:0b:43:8a:56:77:d1:3c:74:f6:4b:63:e5:
a9:8d:06:f4:36:7f:2b:14:79:3f:95:25:16:4a:24:
17:e0:17:17:c8:c8:12:33:2c:a5:62:34:f7:fc:bf:
95:56:a5:f8:0c:49:6d:82:92:41:c6:d3:6b:8f:e1:
02:44:ed:12:ad:8b:9b:1e:87:53:78:64:fb:43:2d:
49:81:70:6f:93:48:e8:e1:b1:75:52:34:52:35:1b:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:3D:67:7E:24:7A:A2:F6:A3:E9:B2:8E:4B:8B:47:E0:81:45:EF
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d7:b6:ae:e8:8e:06:f2:80:cf:96:bb:b4:05:16:80:94:4d:
01:09:5f:44:ac:a4:09:71:25:7a:30:57:79:09:42:ba:48:6d:
fd:30:95:d1:fc:6a:60:d4:1f:af:d2:a0:a1:00:c5:5c:fc:1e:
bd:af:dc:0a:78:27:b1:3c:a8:98:42:ec:44:3c:df:96:d5:67:
3f:87:52:b0:b4:92:ae:3e:1e:56:e3:23:64:a7:92:10:d8:30:
ef:16:4f:7e:d4:32:7d:0e:3f:b3:aa:e4:01:80:ad:51:5a:c4:
f4:55:1a:80:c9:f4:7a:6e:0c:57:2c:ce:65:50:b5:49:88:4d:
7b:61:d4:b3:61:63:95:ba:fe:6e:42:61:54:52:9d:7a:c5:7f:
e3:33:7a:fa:ef:0e:cf:36:fe:ad:d6:79:f5:02:2c:58:5b:29:
a7:1e:dd:f4:9d:9f:43:42:b2:d5:8f:f1:7b:bc:ed:1b:e4:cd:
7f:7b:44:28:11:a0:9e:86:73:a5:7c:05:86:c4:32:d6:12:37:
6d:a7:c6:0c:ea:3f:c5:c7:76:5c:4e:7f:56:19:ba:cc:70:83:
37:e4:51:d8:c9:e8:3e:85:0d:16:8f:28:a7:8d:5e:3c:d0:0b:
d1:8a:9e:7c:d0:0a:bb:51:67:af:3b:b1:2d:8e:38:43:be:1c:
43:2e:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:58:37 2026 by rpki-client