Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
File: yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft (raw, json)
Hash identifier: udmYBX8LutXOtE6OVGHP+r3UAAVU0UwGPmpSYVDqaVc=
Subject key identifier: 9B:F5:C9:67:24:89:D1:F5:AA:66:43:90:AF:EE:70:C3:E7:57:F2:2C
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 01A0C858E0F5E3F5B96F25352F24B45E1C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:02 +0000
Manifest this update: Tue 22 Sep 2026 09:01:02 +0000
Manifest next update: Wed 23 Sep 2026 09:01:02 +0000
Files and hashes: 1: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (hash: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=)
2: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (hash: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=)
3: yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl (hash: /mfC26inlR0e+U8DRMm7bzxjqnrVJzaVD9KCWA2KkTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:e0:f5:e3:f5:b9:6f:25:35:2f:24:b4:5e:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Sep 22 09:01:02 2026 GMT
Not After : Sep 23 09:01:02 2026 GMT
Subject: CN=9bf5c9672489d1f5aa664390afee70c3e757f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:1d:e0:78:f4:4b:71:56:e6:35:84:c9:15:
89:41:5a:c1:17:44:d5:73:c7:cf:40:4e:1a:91:03:
1a:85:3e:74:ee:f7:af:ff:6b:42:f4:d8:3c:48:b3:
e5:2b:53:ee:bd:65:c3:ca:0d:9b:32:ab:89:11:b8:
5f:35:33:46:7f:ec:ba:61:d4:75:4a:d3:77:d7:38:
80:5a:c4:45:78:1d:f5:c3:21:9d:ab:17:89:f7:01:
3f:5c:b6:6c:4f:28:7a:46:82:f0:93:60:a8:3a:f5:
0e:4a:a2:8c:59:b9:a1:8f:db:3f:3f:22:e5:04:4f:
c0:27:0d:03:de:25:a7:e8:f7:91:ea:75:53:10:2c:
e1:52:42:4a:f7:60:b6:d7:55:a4:8a:47:55:57:b6:
a8:6d:fd:dc:8a:2e:25:19:7c:30:66:85:b6:17:21:
32:f6:27:f0:aa:69:93:3c:49:03:9f:1a:dc:46:99:
19:a8:d0:fc:49:9d:48:24:60:3a:45:98:92:38:f6:
83:0e:bb:75:9c:63:c8:1e:02:11:1e:ee:6b:29:3f:
05:16:9e:1e:27:2c:c4:ab:53:8b:d6:7f:55:3b:fc:
6e:3e:6b:69:2f:ea:7d:4d:4e:4b:c8:c6:d7:b0:12:
9b:b3:c8:c0:80:03:3f:7f:d9:b5:3f:56:6a:17:a0:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:C9:67:24:89:D1:F5:AA:66:43:90:AF:EE:70:C3:E7:57:F2:2C
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:6d:a7:38:52:d6:e8:3d:21:1c:b2:4c:77:92:d2:bf:00:
0a:3f:a0:c9:f5:ac:5c:91:20:b4:21:ae:86:6c:7e:8f:98:06:
6a:df:d7:d1:f2:8b:39:2c:b3:f3:19:34:b4:af:94:04:6e:7b:
30:5f:9d:aa:9c:72:98:0e:50:b6:40:36:46:fe:c4:10:dd:1d:
30:62:24:4a:31:53:66:c6:1a:16:d8:02:32:93:22:d9:cc:c3:
64:5e:5e:01:5f:c0:b2:b1:a6:5d:08:32:69:c5:2a:ee:0e:53:
90:cf:0e:53:44:ba:70:a3:41:f4:cc:58:1c:a0:e6:72:04:f1:
cd:50:df:9e:b8:7c:a3:a8:46:13:da:ea:85:52:55:38:4e:25:
5c:e7:9a:00:78:77:dc:49:1b:17:a4:41:2a:a8:ae:a8:1e:36:
d9:1c:7c:29:3f:f6:5c:87:96:6c:45:9b:4b:e7:66:da:af:b0:
85:e0:60:b6:a5:dd:e2:9e:70:16:1f:ee:bc:9f:27:67:23:5f:
ec:08:db:63:69:af:c1:2c:aa:c1:a1:fe:05:b7:f8:43:09:9d:
e2:3d:f0:26:1e:a7:8e:c6:de:75:1d:4e:2f:83:ee:cf:eb:3d:
04:59:93:6c:fb:18:ab:27:5d:d3:68:6d:71:85:96:8f:72:f0:
f3:52:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:59:39 2026 by rpki-client