Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: w0qSR+RDFSnTuDhhCqUF19vdOUbHy0tQ1Zlp3RPPmJw=
Subject key identifier: C9:0D:90:D4:D8:2C:EE:6E:1F:38:DA:A4:70:60:E0:65:FC:D3:A8:A5
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 01A0CC34D6171E3655A454676F22803D87F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:09 +0000
Manifest this update: Wed 23 Sep 2026 03:00:09 +0000
Manifest next update: Thu 24 Sep 2026 03:00:09 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: HMBpJAeWcp8ib8AuMC25XwTMZXXvgKtvnhBc1QW2OKg=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:d6:17:1e:36:55:a4:54:67:6f:22:80:3d:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Sep 23 03:00:09 2026 GMT
Not After : Sep 24 03:00:09 2026 GMT
Subject: CN=c90d90d4d82cee6e1f38daa47060e065fcd3a8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:46:b8:96:95:fe:66:e9:0e:78:5a:23:bd:
e0:eb:bb:f5:41:4c:15:ac:0e:f0:8c:20:54:76:9a:
c9:b8:4c:56:55:ae:0a:b6:05:e6:c4:ff:8b:27:c9:
30:a7:4e:20:75:6c:6e:d9:11:ef:b7:21:f4:7f:02:
df:4c:3a:e4:57:0b:b2:ec:c2:f3:ef:19:dc:c9:21:
17:33:94:ac:03:a5:cb:1a:14:29:bc:aa:38:cf:05:
72:04:ca:df:1b:82:a3:0d:7b:e2:16:99:30:d6:f7:
17:90:17:56:4d:ba:cf:b0:5c:ea:42:04:14:7a:c9:
8a:4a:c1:7a:6f:09:78:27:60:f4:8b:82:17:9e:25:
c0:2b:5e:62:df:8f:e6:0b:05:07:b4:3a:79:8e:d0:
d5:88:3d:9f:e7:a0:79:7c:b5:7c:1c:7b:11:f1:ad:
1a:b5:5d:da:19:63:e1:3e:cd:22:9e:11:e9:93:81:
45:da:ee:99:44:35:52:d9:49:3b:2a:37:75:db:03:
64:0d:1b:60:fe:a3:5a:05:bf:02:b4:38:c7:f8:ba:
7b:66:df:9c:1e:ac:2c:c3:e9:c1:21:b2:6c:c2:aa:
9b:46:b4:45:77:e7:2c:52:39:36:e7:5f:fe:8e:d5:
c1:ce:86:76:c0:9d:c6:20:3b:23:07:18:7f:db:27:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:90:D4:D8:2C:EE:6E:1F:38:DA:A4:70:60:E0:65:FC:D3:A8:A5
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:31:de:43:83:69:24:68:8c:3d:29:ce:10:d8:3b:f7:f0:
c5:d2:ed:9c:bc:5f:56:11:bb:99:90:bc:54:22:c9:f3:fa:81:
4f:da:75:97:99:3a:22:fc:9f:de:3a:ec:9e:52:6d:66:b5:a3:
ec:e0:fb:9b:5c:56:b6:68:1a:94:d2:ad:76:fd:19:2b:68:3c:
0b:02:ad:7c:3d:6f:5d:61:da:b3:8c:aa:2c:95:c9:87:9b:5b:
75:d4:7d:dd:cd:7e:21:68:87:2c:2d:0b:d6:3e:68:17:e0:a5:
ae:7d:d7:2a:3e:81:13:73:63:2d:e1:ce:a1:8d:26:bd:ed:6e:
97:4d:29:0f:41:72:60:51:26:c1:a0:36:e6:26:8c:99:f0:66:
73:b4:d7:98:4b:0e:de:c6:61:8b:a8:1b:0a:b8:1e:80:ae:ef:
7f:ce:f4:10:f7:2a:bc:8e:43:c2:e3:b5:fa:1f:86:7e:30:ae:
a9:1f:bf:d9:ae:1a:74:7a:3d:a9:ff:8d:c7:af:a7:88:5d:49:
c1:6a:c0:45:7c:9a:5b:f1:8d:62:c9:d1:e5:de:a1:80:98:8a:
15:ca:47:ed:9f:ac:23:b2:d0:84:d1:29:17:d0:35:ea:3e:6f:
a0:17:e4:b4:4c:4e:7b:b7:ca:ae:cb:3e:94:b1:3d:ff:ec:2d:
c5:a1:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:34 2026 by rpki-client