Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: Rmk9seEOM9ROpIrZkyT38/XrodFk/Yt9ZyYJV4kOb2A=
Subject key identifier: 9B:E7:48:31:01:72:AC:31:D9:E2:AE:F8:AE:B7:A3:E9:68:94:66:64
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 01A0E6D2C95F12C3E03376F91F37CA597F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0795
Signing time: Mon 28 Sep 2026 07:02:48 +0000
Manifest this update: Mon 28 Sep 2026 07:02:48 +0000
Manifest next update: Tue 29 Sep 2026 07:02:48 +0000
Files and hashes: 1: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (hash: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=)
2: 9Px8z48R321lmmBfJpYZPXnmcpo.roa (hash: 2fda7ZTjyIH4HX9HuDuDyOX1MzL7aXtB6nPUNzP2md8=)
3: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: 0CyLL9Je4bOOl/Wl50otk5c0SNFKaaVNtMtyVQzCC28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:c9:5f:12:c3:e0:33:76:f9:1f:37:ca:59:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Sep 28 07:02:48 2026 GMT
Not After : Sep 29 07:02:48 2026 GMT
Subject: CN=9be748310172ac31d9e2aef8aeb7a3e968946664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:90:d8:65:71:dc:b6:b3:a4:de:59:da:c9:
0c:f0:82:f4:43:d7:d2:47:4b:19:fd:f7:b7:4b:cd:
7f:20:df:0d:06:b1:a8:63:01:94:0d:c4:09:44:b1:
c5:26:51:a6:05:35:4b:b4:f2:d8:a9:2a:d3:b2:8c:
81:d6:47:66:79:a3:48:69:75:4f:d4:59:14:32:99:
58:c5:9a:ed:7e:55:46:ab:9e:5c:c4:c8:16:90:b7:
a2:8d:1c:04:5c:5d:e3:5e:0b:ab:68:05:4f:33:02:
63:f3:6e:9d:1d:fc:03:10:d1:9b:81:4a:34:59:7e:
71:95:15:a0:d2:b5:75:f1:ae:07:1b:27:e5:d4:ea:
d4:df:63:95:6c:2a:94:58:6d:74:1b:38:e3:c8:4a:
89:7e:8e:13:72:dd:c4:f0:3a:d7:05:cf:fc:b9:17:
8e:24:c9:a4:5d:c9:47:62:8c:25:8a:8e:7c:a1:20:
d7:b8:a6:d9:f2:c4:a4:8c:bd:07:11:d4:d0:33:67:
9e:2b:20:07:58:01:fd:4d:73:ee:9a:b5:8c:76:dd:
e4:4b:2d:55:13:bb:3f:8c:28:10:43:21:bd:74:85:
95:b8:5c:07:b0:09:4a:db:e4:32:4a:58:9f:76:ea:
b7:46:a5:c9:2c:8e:de:db:03:19:c0:f3:2f:bc:a0:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:48:31:01:72:AC:31:D9:E2:AE:F8:AE:B7:A3:E9:68:94:66:64
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:f0:a4:51:25:4a:a9:f0:09:ca:07:7e:c7:e8:06:c8:28:
08:48:2a:32:db:1f:c1:aa:51:9f:72:b8:c6:91:71:33:21:c4:
c8:ef:96:14:c0:2b:45:79:4b:4b:3e:86:e0:60:71:6e:08:8b:
d7:ff:52:ef:4a:71:aa:47:83:e4:34:66:af:8a:c6:cb:0e:cb:
40:8f:19:f9:03:4c:f6:58:86:80:d3:fb:6b:e7:56:04:fa:03:
b5:8e:7d:60:13:33:95:48:60:56:07:e0:38:22:1a:f3:a5:9b:
36:f6:39:12:00:b6:04:c7:e7:db:95:48:0a:07:57:be:ee:7d:
52:fa:4d:9d:61:94:56:96:50:b5:af:31:31:f8:cd:78:40:d7:
29:59:bf:0a:85:c5:49:81:7d:54:3b:a9:97:71:d1:6b:0f:38:
dc:be:aa:2f:2a:ea:c0:b3:fb:d0:98:b4:31:f9:53:d4:5f:4e:
e5:35:82:f6:48:5f:28:19:9f:74:a0:10:15:d4:cb:7c:97:2f:
84:f9:10:61:6e:4c:9c:ab:d2:08:72:12:bf:e8:50:1e:a4:15:
84:70:4f:b7:db:d0:cd:9a:31:11:69:1d:d0:c1:74:f4:fe:b2:
27:10:8c:2e:c1:07:e0:3b:b2:65:fe:11:6f:a9:89:79:cb:3f:
ff:7e:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:05:13 2026 by rpki-client