Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: YctahZZXE/1BlO6UvqH/j/i8UU4+1Uc+QBg9IPStIb8=
Subject key identifier: BE:F3:75:3B:F1:5D:B2:1A:B5:15:FE:6F:70:AE:19:95:B0:EF:FA:CD
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 01A0E106B92D2C443CF2501DAF4144F3BCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0A17
Signing time: Sun 27 Sep 2026 04:01:49 +0000
Manifest this update: Sun 27 Sep 2026 04:01:49 +0000
Manifest next update: Mon 28 Sep 2026 04:01:49 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: TeFm3PUBnDNI+TqZV5cNJ7eZWKX2DEI+LiWLiKwtb/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:b9:2d:2c:44:3c:f2:50:1d:af:41:44:f3:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Sep 27 04:01:49 2026 GMT
Not After : Sep 28 04:01:49 2026 GMT
Subject: CN=bef3753bf15db21ab515fe6f70ae1995b0effacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:7c:7d:57:a6:7d:c9:26:49:40:ee:65:0c:
ab:bc:3f:9e:f5:81:93:ba:2b:60:9d:5c:a3:2a:76:
18:d7:ca:a1:12:84:e4:04:94:4d:60:c1:d1:14:ce:
5b:aa:4b:22:d6:7d:02:1f:33:69:40:41:ff:7c:39:
28:05:4d:4f:5f:dd:d6:a4:a3:f3:f0:61:6b:5d:2e:
45:87:31:4c:41:fe:49:83:4b:86:d1:66:54:af:45:
9d:fc:ee:7d:8c:8c:c9:a4:58:11:41:32:1f:18:3e:
b2:bd:b2:3f:43:97:1b:13:d0:6e:ef:c1:2b:ee:44:
24:a0:4c:f9:79:3a:33:40:92:92:f7:14:fe:9f:13:
ac:b1:9c:4e:32:a5:fe:65:df:dd:78:f6:43:66:4a:
42:73:e5:46:75:2e:5c:fd:ce:84:49:56:03:6e:52:
41:57:0a:48:23:7e:52:97:3c:89:a9:01:ef:ab:73:
db:d8:fd:4f:14:2f:d4:f4:21:a4:17:61:2d:ad:ad:
2d:2f:d0:a6:26:2f:bc:41:22:b3:53:68:d0:f5:10:
85:99:ed:06:bc:b8:64:42:7c:b7:40:cf:19:bc:37:
25:05:e4:d8:05:83:86:8c:bc:47:cb:ac:e6:9e:ee:
20:de:40:1f:75:eb:f0:32:39:4a:67:db:4c:6a:02:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:75:3B:F1:5D:B2:1A:B5:15:FE:6F:70:AE:19:95:B0:EF:FA:CD
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1c:ee:f5:e9:58:26:7b:c6:05:c3:f7:44:b5:38:2c:cd:ca:
4a:99:6c:df:a4:00:9e:f2:d0:1b:fa:93:2f:d7:54:bb:db:85:
2a:73:6c:25:af:73:50:ad:46:ac:b0:7b:b6:ce:a1:e2:f8:f2:
69:11:db:a3:d9:e9:03:1a:8e:c5:d6:40:c2:1b:13:94:f3:0d:
f2:39:6e:d4:66:8e:a5:86:30:6a:06:6c:8c:25:8d:dc:a2:20:
5c:90:df:a7:ce:7a:fa:f7:34:40:4f:fc:45:bf:dc:8d:21:ca:
5b:43:e6:21:6b:ed:e1:c8:ff:e8:ea:3c:f4:16:3b:81:b7:d7:
1a:76:73:17:8e:75:61:07:84:7b:75:76:ec:7a:8b:24:e4:24:
88:f4:8b:aa:2d:31:22:60:50:f7:e4:18:22:3e:5f:f3:18:36:
a5:15:3d:31:34:9b:ce:48:a1:d4:71:80:6a:c7:1d:5f:b0:9a:
77:79:05:62:3c:b0:b8:e2:88:27:bd:28:13:73:e8:5d:d7:b8:
38:e7:15:71:31:77:27:fd:73:cc:f0:84:e7:8b:1d:f1:91:20:
d7:bd:6a:d6:46:79:36:75:0c:40:3b:3f:2a:05:2b:a6:27:1b:
3c:64:4a:d6:19:dd:7e:a4:4a:7a:0a:5c:80:a6:ec:7f:29:81:
ae:5c:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:23:01 2026 by rpki-client