Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: w4x1TDpQP0textv/p+0D0NlU9B5WB64ndcPngcRZUKA=
Subject key identifier: C6:24:A3:2F:F2:88:41:70:85:F8:3F:05:58:9F:E6:DC:C7:0F:E5:F5
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 01A0C4448F3B711D7043FF55CF3C45CC51CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 0844
Signing time: Mon 21 Sep 2026 14:00:22 +0000
Manifest this update: Mon 21 Sep 2026 14:00:22 +0000
Manifest next update: Tue 22 Sep 2026 14:00:22 +0000
Files and hashes: 1: 5InSNvZa6NPl2XUprALXEFXI9UU.roa (hash: 4bmKKFl9D3EfIWxPnS9UJq20YLXV0+HL+F87z2lo5Zo=)
2: Yv_j5-onBr6pMd-sNU5F9dGQMyU.roa (hash: Ud/VdUNLwM8U8Wf4qqElLCvSQBMZGtbKM6rNdGJ2xtI=)
3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: y3NPUvegR/1QRRxEkS9+zZCZtNbs3wXocjKoYKmzZMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:8f:3b:71:1d:70:43:ff:55:cf:3c:45:cc:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Sep 21 14:00:22 2026 GMT
Not After : Sep 22 14:00:22 2026 GMT
Subject: CN=c624a32ff288417085f83f05589fe6dcc70fe5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:3c:e0:a7:82:eb:cd:27:e4:c4:4e:b2:f7:
60:e7:26:a4:d4:78:9d:fc:5d:4c:e5:dc:4b:5e:61:
2f:c8:02:3e:da:96:c2:49:32:61:ed:a9:27:2d:3d:
dc:ca:14:38:8f:13:76:69:d8:a1:58:9d:69:ea:65:
3a:7e:73:ce:1f:9d:55:98:5d:95:e1:cd:36:b2:0a:
f0:54:df:c6:a4:e2:f8:a7:41:e4:89:77:11:19:2d:
5c:65:68:35:db:1b:9c:b8:e4:ff:d2:4b:fb:c7:3c:
62:7f:f9:81:25:d4:41:58:a7:a2:3f:69:b8:fe:b4:
b9:1b:5d:7b:f2:56:e1:38:91:5f:54:53:1c:57:16:
fb:72:cc:aa:52:45:69:16:c2:cd:16:35:e1:99:44:
41:ba:fe:6b:50:53:d4:35:74:6f:40:91:7d:ad:d5:
38:f8:16:f0:19:c8:c2:f9:4c:19:0f:ad:19:61:26:
03:4d:81:40:18:e3:0b:c3:40:12:34:e4:08:44:ed:
e4:6e:76:e0:d7:6f:0b:7d:8d:b5:0b:18:5f:c0:bd:
e1:01:69:b4:03:3a:2e:e3:87:ad:b1:a3:5f:a4:fd:
3b:cf:07:b0:29:dd:6f:5a:f0:9f:b2:de:e8:b4:81:
ea:13:42:57:08:40:a2:b6:85:70:96:02:39:85:0c:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:A3:2F:F2:88:41:70:85:F8:3F:05:58:9F:E6:DC:C7:0F:E5:F5
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:5d:6d:0c:2c:05:01:9b:6e:de:3a:d4:a9:63:24:4d:18:
1c:b2:12:0e:dc:b3:fa:6b:92:b7:5d:ee:43:85:2b:88:93:11:
ab:b2:98:f9:c2:d0:97:0d:c5:e1:08:13:89:cf:3f:52:d4:c7:
5d:e3:02:4c:45:0c:d1:ed:35:75:84:cf:d6:ae:54:a7:53:28:
cd:26:0c:f0:59:ab:f8:94:1b:2c:f5:4a:14:e9:76:c3:05:16:
7a:c9:2f:26:96:86:2b:d8:4d:7e:af:27:b7:bf:11:6f:80:c2:
f8:a3:81:24:7e:fc:07:10:65:ca:6d:f2:a1:bd:ed:c4:ec:a8:
7a:ce:99:46:8f:04:be:5c:91:6e:68:fd:60:6f:78:88:97:e1:
a5:28:c5:06:2a:16:83:2e:10:67:f7:70:3e:67:7a:c4:2d:31:
e5:e2:65:d3:fc:43:4f:c7:35:51:72:e1:cd:86:89:74:08:e9:
af:1b:66:c9:a7:ec:6b:e9:5a:2d:01:f7:d1:6c:61:dd:d0:bf:
da:01:89:93:40:f6:2c:76:3c:69:88:4b:2c:19:e5:6b:9d:ad:
8b:c5:af:ee:34:54:43:44:66:bd:dd:3f:bc:a0:c5:b4:47:a9:
6a:a0:ff:f1:29:f4:24:cf:33:02:05:a1:1a:6b:40:63:7d:e0:
9a:d2:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:25 2026 by rpki-client