Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: z/A2GQ2qTwoqVrnTvi89WFfVNWrdV0Ibl6w6+raS8VI=
Subject key identifier: 77:F9:A6:CE:C2:39:8E:6C:B9:6B:6F:90:09:6E:2C:44:CA:6C:5C:A7
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 01A0C8583E8D2C92D8B70D59D487780800A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 19FC
Signing time: Tue 22 Sep 2026 09:00:21 +0000
Manifest this update: Tue 22 Sep 2026 09:00:21 +0000
Manifest next update: Wed 23 Sep 2026 09:00:21 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: sJV2PnfGekNNFOiXsgm0tFXCUDnuFLoZc1e3BvibC2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:3e:8d:2c:92:d8:b7:0d:59:d4:87:78:08:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Sep 22 09:00:21 2026 GMT
Not After : Sep 23 09:00:21 2026 GMT
Subject: CN=77f9a6cec2398e6cb96b6f90096e2c44ca6c5ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:47:68:03:15:6c:c0:98:62:58:df:bb:20:
26:ab:4b:45:e0:74:32:59:72:8c:e7:54:42:00:cf:
55:7c:63:c8:ab:98:0c:9d:00:79:aa:0f:39:04:4e:
04:45:5d:26:8d:ae:a9:34:86:12:69:e6:7c:3b:c3:
04:d4:2f:03:db:75:6f:ed:74:31:68:9d:99:24:66:
39:46:eb:e1:ad:1e:3b:08:69:e1:22:e7:38:b8:39:
94:4b:3f:fc:4d:2b:45:d6:ab:79:24:a7:78:25:5c:
1c:8e:e7:28:4f:8d:3c:64:c6:40:e4:13:2e:45:11:
c2:d2:c8:36:a0:86:eb:ae:be:4f:ce:15:90:b7:83:
f5:15:a9:07:6c:8b:1e:2d:b6:f8:53:96:df:74:94:
c0:4a:97:b4:e2:1c:40:84:24:a0:43:19:50:1d:4d:
df:05:49:51:fb:4f:01:0a:fe:c1:5b:07:78:d0:a3:
2b:87:68:37:66:76:b1:0f:b3:6a:5f:e9:0a:32:74:
dd:8d:8f:c1:5a:b7:4c:71:cf:77:05:b7:b3:d8:e4:
91:8c:3f:a4:6a:1b:fa:fd:74:f3:79:2a:fa:32:50:
87:e8:80:a4:4b:73:09:3d:7f:b8:ad:8b:2b:e2:5f:
c3:5e:27:be:2c:b4:26:c4:7b:3a:34:c0:85:f7:13:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:A6:CE:C2:39:8E:6C:B9:6B:6F:90:09:6E:2C:44:CA:6C:5C:A7
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:0f:7d:30:e7:26:f0:0d:a8:ef:48:e5:6a:c9:83:40:1d:
c9:e3:63:fe:a2:a7:6a:02:66:12:d1:50:42:11:2e:52:a1:15:
c5:08:08:4e:11:71:5f:4c:19:33:2c:a7:75:44:00:9f:ac:22:
9c:de:bd:b0:b0:fb:f8:04:92:f5:56:54:51:ae:d9:22:4a:7d:
3f:d6:c7:90:e2:13:93:30:1a:d3:37:29:e9:22:4c:03:b4:0b:
eb:5e:62:b1:6f:02:28:9b:0c:63:c4:dc:5a:03:b3:f2:ce:be:
fb:22:97:62:4f:c7:0b:3e:75:67:58:c5:37:5e:7c:cb:35:c7:
23:67:c6:6f:77:12:53:a5:6a:be:91:4c:8e:63:72:ea:db:28:
ae:50:ca:56:d8:b6:da:c0:01:f8:c7:16:b6:ff:60:95:73:58:
67:bf:fb:3a:cc:1b:b5:46:87:4f:46:1a:43:17:c3:d0:5e:fe:
16:95:c3:2f:3d:d2:6e:0e:f4:61:c1:76:df:5c:a8:66:f6:1c:
cc:ec:5a:68:d9:ba:4a:5f:79:7d:0f:5f:bf:85:b1:5c:c0:af:
e5:96:2a:0e:93:88:1b:b4:18:8f:7f:03:c5:f6:54:74:1d:93:
b8:bc:7a:23:be:22:dd:ed:28:0b:9f:59:97:99:01:db:86:27:
5e:4a:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:53 2026 by rpki-client