Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: U9KnB/KhhO3jt/pVV2UCxzYQ24EYvGw1v+HlvzY6pw8=
Subject key identifier: 01:24:EE:FB:8F:8C:97:55:A5:6D:85:94:3E:82:44:EA:DC:50:70:7A
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 01A0BDD530FC5EB1B287CDB87450CFE43BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 08:01:00 +0000
Manifest this update: Sun 20 Sep 2026 08:01:00 +0000
Manifest next update: Mon 21 Sep 2026 08:01:00 +0000
Files and hashes: 1: hNF8tXFLZNTcaH0gIBkBAvcKbVY.asa (hash: iwvNN6FtVQiEqz8CUKwZlaVHqu5n7aizrJShOvIXCR4=)
2: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
3: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: Uvh+GotRcyQqlwUqPzbF5YBUcCEmsEid44GzuaT1n+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:30:fc:5e:b1:b2:87:cd:b8:74:50:cf:e4:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Sep 20 08:01:00 2026 GMT
Not After : Sep 21 08:01:00 2026 GMT
Subject: CN=0124eefb8f8c9755a56d85943e8244eadc50707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:a6:3f:1e:b0:bc:b8:7b:5e:99:46:0c:32:
a6:dc:89:5b:05:0a:77:34:9f:16:a1:4a:47:1a:f4:
48:f2:54:9e:5c:53:4f:4f:fb:b4:55:1d:f9:54:30:
60:d6:24:48:ba:6d:ee:64:75:8b:57:2a:3d:ba:ad:
ce:d9:77:d1:18:dd:61:13:90:27:b4:42:6b:bb:94:
7c:d7:70:04:5e:63:f6:7e:8e:e5:e7:99:7c:ab:06:
1f:8a:1e:27:7e:22:06:05:a0:8b:a3:b5:ab:99:f2:
88:f1:fb:f2:e3:40:24:36:e7:b0:1a:d6:ec:aa:17:
62:4b:a0:89:05:a1:59:54:c1:3e:5a:ab:95:2f:19:
80:5c:a6:58:bd:83:70:03:b7:0f:70:b0:7e:f4:f7:
1a:b3:e1:0a:98:f7:78:d2:40:1b:5c:49:5c:17:df:
15:8c:ab:de:da:60:58:a1:04:38:13:72:9d:7d:3f:
f5:64:fb:70:8f:b6:31:4e:1b:88:6f:a3:43:7b:92:
17:d6:d8:34:9c:c3:74:40:0c:c4:39:c1:5e:10:32:
81:7a:38:9f:c4:a8:93:4a:b1:5f:8b:f0:02:9a:4d:
44:32:5d:fc:00:e3:df:29:a3:95:7b:01:d7:08:60:
86:93:20:db:90:23:46:03:9d:7a:26:e9:a0:47:f5:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:EE:FB:8F:8C:97:55:A5:6D:85:94:3E:82:44:EA:DC:50:70:7A
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:87:aa:01:6c:df:53:54:15:3c:68:4e:9a:34:18:6d:e0:
57:8c:42:02:48:bb:85:fc:97:77:7f:42:28:e3:c1:04:1c:b6:
56:ea:d6:13:0a:b7:1d:89:0c:d2:c5:e0:63:29:e7:8f:95:36:
fa:1f:a1:07:8e:35:cc:c5:57:e7:70:02:27:ac:b3:7b:13:74:
6a:16:c5:9b:c8:97:cf:f8:47:4e:79:f5:7a:32:c2:3c:1c:67:
fa:20:22:6a:d0:10:cd:af:71:71:95:32:b2:11:0a:f5:c8:1f:
27:d8:53:6d:95:16:8c:e6:c0:2f:ac:51:6d:e2:f2:b4:45:d9:
61:61:17:f9:64:0d:8e:4d:8f:97:91:86:bf:92:77:5d:10:36:
47:6e:4a:f1:7c:c9:19:c5:54:0e:54:e5:90:28:4e:9c:11:be:
9b:83:40:db:2b:c5:89:ca:33:65:fd:7f:9b:3f:21:74:6d:7d:
84:44:0f:05:f1:c4:f2:6f:91:85:fa:ed:e4:3f:8a:5d:f9:9c:
58:99:97:4f:6e:83:4c:c2:a7:c7:ca:80:60:95:c5:66:06:b9:
c1:8a:49:33:20:66:9b:b4:18:bc:45:65:c3:84:cb:d3:18:b9:
71:27:51:39:f9:b6:5d:1f:5a:53:63:a3:18:3a:d5:bf:d8:9b:
e4:3d:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:49:21 2026 by rpki-client