Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: zZRNyp4DwVmoQQ9iOueb9ZG62qVhhC1/rtwOEKSYZmM=
Subject key identifier: BF:5C:32:6C:D3:EE:17:A5:36:DE:2F:4A:8B:37:2A:54:07:7D:08:CD
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 01A12D69A31DAA68D730D62CE4E1A9A3D986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 10DF
Signing time: Mon 12 Oct 2026 00:01:00 +0000
Manifest this update: Mon 12 Oct 2026 00:01:00 +0000
Manifest next update: Tue 13 Oct 2026 00:01:00 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: aaJWr7A6JY1myoEif5CEG4aCBXLRk8Vk8pUHgaXQa9Y=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:a3:1d:aa:68:d7:30:d6:2c:e4:e1:a9:a3:d9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Oct 12 00:01:00 2026 GMT
Not After : Oct 13 00:01:00 2026 GMT
Subject: CN=bf5c326cd3ee17a536de2f4a8b372a54077d08cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:d5:c9:1b:54:c0:58:43:94:02:ed:8d:58:
31:1e:6f:32:c5:df:17:47:42:85:4d:c6:5b:97:27:
6c:9a:c2:3c:24:b0:aa:39:7f:6c:88:8f:78:4e:92:
b7:fb:01:73:46:06:2d:fb:4c:d9:9a:dd:7a:a9:dc:
9c:87:2a:97:2a:1d:96:0d:70:c6:fe:b0:5e:0d:b5:
34:8a:ff:1e:91:93:ac:25:3f:f4:91:ff:74:23:60:
19:a4:72:e6:a2:e0:21:15:31:2b:78:2b:ce:a7:42:
8a:7a:d2:58:40:0c:f8:07:4f:fc:f2:36:67:b0:13:
da:73:04:24:6c:91:b3:98:22:4a:58:b1:18:60:34:
39:2c:04:f2:b7:da:1b:77:20:87:ad:75:42:b9:c2:
6f:44:7f:e6:0c:bc:66:d2:af:a4:99:8d:22:08:3e:
3e:90:83:2c:e9:ed:c0:00:ab:ca:1d:4e:08:e7:02:
2b:96:f6:95:b8:00:be:2e:cb:09:d9:b2:5d:e3:45:
76:e0:40:56:34:41:b6:91:c2:80:10:53:66:81:37:
b0:f4:26:ea:b8:ff:85:73:14:55:7d:53:51:42:22:
e7:68:19:4f:4e:c4:91:92:aa:9c:14:77:17:c8:d5:
1e:14:f9:18:e3:b7:86:ad:3d:5b:45:35:31:fb:2a:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:32:6C:D3:EE:17:A5:36:DE:2F:4A:8B:37:2A:54:07:7D:08:CD
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:a7:58:34:61:d5:e0:5e:cb:98:98:42:45:23:0f:a5:47:
7c:80:a8:4d:f8:f5:2e:f7:92:58:71:0d:e0:2b:ea:a0:2f:5f:
a4:8b:65:2f:8c:46:59:85:bd:7e:35:33:c6:11:dc:a5:eb:7a:
34:bb:d6:69:26:2f:d6:f7:ba:dd:81:fb:49:8a:26:3e:7b:49:
03:e9:be:fd:08:ab:21:53:f1:9d:3f:e2:cc:34:ba:3d:44:13:
13:c9:64:a7:1a:8a:84:a6:29:fc:3f:07:40:60:1f:0f:1c:ff:
0c:54:55:d9:32:b0:0f:af:d4:e1:4e:5f:39:89:7d:eb:0e:9c:
83:3f:af:e7:cf:48:9e:fe:88:18:1a:bc:9a:b1:8d:ee:b1:63:
aa:26:21:2c:c8:5f:d0:97:ef:a8:d1:d3:b0:60:b7:cb:1d:5f:
7d:b6:0c:6e:05:4a:12:5b:bc:67:f4:45:86:48:c1:97:98:55:
99:65:65:94:d0:0d:2c:03:3b:c1:8d:fa:e2:b8:cc:af:c0:20:
48:41:f6:30:91:11:65:53:1b:e5:1d:81:27:13:39:6e:d2:c6:
50:6b:35:60:4c:3e:14:f8:c4:e2:7f:05:55:16:ab:ad:6f:08:
ad:4e:6a:04:ab:41:c6:08:d2:1b:62:ea:6d:97:3e:14:25:a7:
8b:1a:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:46:50 2026 by rpki-client