Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: DPfpUPoujGn5TOiwSJTcIt5koqO2T8FF2OhWqcbnk6M=
Subject key identifier: 5E:07:23:E5:22:64:AB:9D:30:18:88:22:C5:D0:BE:4E:3B:B8:18:28
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 01A0D7279FF62A4CEDC7207B74EA2FB5855A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 19E4
Signing time: Fri 25 Sep 2026 06:01:33 +0000
Manifest this update: Fri 25 Sep 2026 06:01:33 +0000
Manifest next update: Sat 26 Sep 2026 06:01:33 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: qjE82AEjWgNyYjlSfHchQKsETDmbWIk0lQyv9h9kqEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:9f:f6:2a:4c:ed:c7:20:7b:74:ea:2f:b5:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Sep 25 06:01:33 2026 GMT
Not After : Sep 26 06:01:33 2026 GMT
Subject: CN=5e0723e52264ab9d30188822c5d0be4e3bb81828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:9a:91:99:09:1e:7c:b8:0c:98:21:51:58:
cd:3e:9c:08:9b:bb:92:15:18:2d:6d:07:5e:f0:7a:
c4:68:32:29:8f:7d:d4:4b:47:e5:d1:23:29:3e:ee:
52:2c:bf:4a:66:3d:f3:e1:74:82:b2:69:a6:d0:64:
d4:94:68:08:17:2d:e6:c7:8e:7e:15:44:e8:cb:11:
55:5c:63:ea:ef:1c:6c:b5:26:14:ab:bf:0e:aa:34:
91:dd:27:ae:86:f5:26:f5:57:a5:de:2a:0c:45:ec:
c9:b5:ff:a6:6c:4a:4d:88:e8:66:c5:63:44:7c:c0:
13:5b:bd:8a:18:ac:1a:80:cc:fd:0a:90:7a:be:73:
72:35:ed:ec:1d:ec:fd:36:dc:e9:1f:83:b8:1a:79:
a0:50:14:29:54:d8:8c:12:fe:79:4d:d4:a3:6b:a1:
c7:b2:2a:c4:5e:90:7e:de:82:2f:11:95:91:91:79:
03:b7:e4:0e:92:1b:d8:55:c2:65:60:27:38:c5:d0:
4a:e7:e6:12:46:4b:06:89:49:c5:bb:8f:b8:85:d7:
2a:e1:75:95:c3:4e:5d:6d:35:e3:d3:40:5a:00:c1:
5d:2e:13:9e:ad:b0:f1:fc:67:f7:f0:d6:a6:16:23:
d3:1d:ee:a7:9b:d5:2c:8c:33:6b:b4:73:df:ea:90:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:23:E5:22:64:AB:9D:30:18:88:22:C5:D0:BE:4E:3B:B8:18:28
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:ad:2f:a7:cc:77:1a:85:5d:6a:e5:12:fe:02:54:7a:62:
0c:60:24:1d:c9:09:f8:25:e4:e0:7d:17:74:51:d4:03:e6:57:
69:bf:55:93:bc:b3:f8:99:1b:de:9a:a1:be:50:bf:8a:e2:1b:
f0:c5:f5:e9:75:be:20:d9:08:ca:8c:aa:79:d5:5c:22:53:a9:
03:f0:50:08:7e:9f:4c:87:1a:ef:b8:7c:bc:b4:00:41:33:76:
16:2a:63:c3:d9:64:d2:87:f5:73:5c:89:05:b9:70:fd:56:cd:
2b:21:ed:89:68:c9:44:21:91:2e:2d:a8:f6:bf:d5:43:10:7d:
ba:ee:49:88:89:e0:24:d9:68:57:44:22:0b:08:0f:91:3d:0b:
44:ff:dc:e3:67:96:65:66:e3:92:35:87:d8:e3:d7:ce:f9:4a:
d4:b7:f6:e7:c3:28:a7:b1:29:07:1d:b6:dd:7c:18:7c:e4:06:
39:ab:ad:d3:1a:e0:13:cd:23:41:61:74:a5:72:23:0f:3b:0d:
b4:7c:3f:f5:6e:2c:51:a1:25:9a:3d:08:36:82:05:cf:ff:82:
54:a0:f4:42:60:ed:57:f3:74:6f:74:a0:24:6c:e9:b8:82:2d:
c6:1a:11:e7:e8:63:2f:71:9d:9c:c8:5c:01:d6:43:1e:00:19:
49:b2:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:17:35 2026 by rpki-client