Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: zbysCYtnFifjB8XtCNTeBqYZqYo1L/4yMsn01XV5+u0=
Subject key identifier: D0:89:C3:F7:34:E8:A3:46:71:74:33:04:CE:C6:FF:8D:29:52:EA:93
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01A0C74688F8B57EA07420345283A11DBFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0D46
Signing time: Tue 22 Sep 2026 04:01:23 +0000
Manifest this update: Tue 22 Sep 2026 04:01:23 +0000
Manifest next update: Wed 23 Sep 2026 04:01:23 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: On/X6E5vymHh3oesYTfawdsPxynBerRq4tMPn9c3Tx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:88:f8:b5:7e:a0:74:20:34:52:83:a1:1d:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Sep 22 04:01:23 2026 GMT
Not After : Sep 23 04:01:23 2026 GMT
Subject: CN=d089c3f734e8a34671743304cec6ff8d2952ea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:45:11:f3:e8:e4:2d:b5:23:cf:53:74:3a:
b0:8d:08:13:31:93:a5:78:a0:af:fc:14:36:2f:bb:
95:89:a5:2c:fd:f4:48:83:7a:09:e8:4c:fc:b6:b4:
18:09:d3:e5:05:e9:a6:2c:ee:d1:06:1e:f6:ad:1f:
dc:c6:a5:43:7b:6b:db:48:69:25:82:d3:f5:03:09:
db:ad:09:32:5b:5b:a8:16:5f:bf:ae:10:b2:4b:fa:
bc:5e:27:bb:f3:e8:62:9f:3e:21:8a:be:14:62:63:
40:1a:c7:85:1c:b6:7f:78:c3:c6:7e:19:42:5a:de:
fc:a5:44:a5:f9:4f:7b:be:3e:dd:76:6e:a0:05:6c:
52:ea:ce:e0:1b:38:76:5f:f4:c3:e5:5b:2a:34:7d:
ab:15:77:bb:9a:17:75:83:a4:c2:59:12:9f:37:5b:
40:eb:35:84:b1:b1:c0:8f:17:24:b4:1c:c8:cb:0d:
2d:87:8e:35:75:4e:70:c4:d7:6f:8f:3b:67:d1:9b:
b8:b1:d0:05:94:b3:a1:68:b1:ea:f0:2d:62:eb:f9:
30:e4:00:56:56:87:e6:ba:9c:d8:27:6a:16:b1:1b:
ea:a9:56:87:7c:9a:53:c0:cf:f6:12:14:6f:b7:f6:
7e:69:fe:8f:0f:0f:8a:50:8a:7f:0c:1c:88:fa:31:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:C3:F7:34:E8:A3:46:71:74:33:04:CE:C6:FF:8D:29:52:EA:93
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:3e:4f:e5:fc:52:ac:8c:47:58:72:a5:79:b9:cb:d1:53:
91:29:1d:bd:ed:0a:1c:20:db:7e:c7:46:f5:49:59:2a:d8:74:
5b:6a:4b:11:f4:f2:15:d7:63:a0:ac:9b:ff:00:4d:fd:71:1e:
88:57:8f:92:8e:e3:8f:98:e4:a8:17:84:49:04:ce:ee:47:cb:
e0:b5:b7:82:ef:8b:48:f7:c8:51:db:01:27:ba:45:d3:23:6c:
77:47:12:e1:68:1e:40:07:5e:c4:c9:3e:1a:f2:62:07:d8:d1:
d0:13:97:b6:99:aa:c8:ea:d8:f2:d6:7e:f6:29:19:65:0f:01:
5b:bf:74:bc:59:78:1a:c2:5c:fd:ce:ae:83:de:2d:0b:cb:c2:
c3:08:4e:97:e3:f1:eb:4a:a9:28:9b:13:e4:6c:59:7f:ce:bb:
9c:25:1a:c2:d0:18:57:7a:25:18:9e:f4:c4:0f:f6:62:fe:92:
05:d7:83:49:ce:73:ff:c4:b3:b2:75:e5:b9:41:b3:92:d4:86:
a5:19:2d:79:51:b8:36:1e:ab:ed:c3:5c:fc:92:61:12:5c:56:
49:fd:23:25:99:6b:63:93:43:00:f2:81:44:b6:cb:ab:ef:51:
f9:2d:53:13:ec:b3:df:25:e8:6d:3f:23:6c:04:3f:e9:95:df:
63:7d:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:06:26 2026 by rpki-client