Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: OFLfD2pEmnWXNXKyKXJXk10c45FuCDH/X6uPpjtTG8I=
Subject key identifier: 7B:8B:FE:BB:01:52:F5:DA:54:AB:E1:D2:F9:6C:FE:1C:69:21:23:0A
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 01A1DEDE251E0B2E4617A276DAFA821C6463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 11:01:02 +0000
Manifest this update: Sun 15 Nov 2026 11:01:02 +0000
Manifest next update: Mon 16 Nov 2026 11:01:02 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: Q71oLbDzbIfGIYcuzPJEdt2PrYt/Mu1YKn5EbnEgchI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:25:1e:0b:2e:46:17:a2:76:da:fa:82:1c:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Nov 15 11:01:02 2026 GMT
Not After : Nov 16 11:01:02 2026 GMT
Subject: CN=7b8bfebb0152f5da54abe1d2f96cfe1c6921230a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:d4:18:37:b8:23:1e:8a:69:f8:eb:25:27:
4f:9c:a6:f9:65:77:17:7a:33:99:21:8d:2c:0b:7d:
e9:ce:c4:7f:2b:77:fb:c9:45:41:de:a3:dc:f7:ad:
aa:89:29:5b:2c:32:a3:1b:b5:76:53:82:7b:61:c4:
f2:4c:77:38:f8:04:df:74:ee:ab:36:5b:22:59:df:
05:85:fc:74:79:df:68:ae:27:7f:dd:8f:cb:a5:69:
2b:59:3a:b3:3f:1f:ed:d4:f9:dc:48:6e:b7:fd:95:
a6:34:35:36:7e:50:62:5a:6c:f5:29:ef:68:25:cc:
68:be:1b:9e:82:e4:63:bc:3a:e1:f4:86:c6:20:48:
38:c9:66:9f:45:db:88:a0:61:1f:49:ab:79:8b:00:
f9:f1:82:2c:ae:c6:8c:a6:70:da:81:81:45:49:b4:
5c:1c:51:3c:c9:0c:5e:fd:3c:f4:af:0a:59:54:93:
a4:29:6d:7d:53:8c:95:50:e8:81:cf:fa:ef:89:3d:
ef:ec:08:cc:c1:00:85:77:76:55:b6:5b:56:f6:55:
48:00:29:d8:a6:ed:1c:59:98:f6:64:f2:2b:6b:09:
c4:f5:5b:ca:9e:75:31:bd:ea:e1:c1:22:a7:97:29:
f9:06:e8:f0:c2:66:3d:7f:98:e4:8b:2e:04:66:49:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:FE:BB:01:52:F5:DA:54:AB:E1:D2:F9:6C:FE:1C:69:21:23:0A
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:00:7e:a8:50:d8:3d:6f:41:b5:eb:3f:33:29:21:c3:a3:6d:
87:e0:23:65:2b:27:e4:2c:32:88:bf:e0:21:ec:59:e6:4c:b4:
fd:66:bc:ee:37:e6:6b:b8:7a:a1:e2:10:da:5f:04:79:9b:99:
12:92:e6:1e:3c:03:2c:36:de:ae:66:99:12:06:81:7d:eb:bb:
1f:f4:a7:d9:0c:5a:3a:ed:d0:46:99:59:65:de:2b:65:e1:6c:
36:e4:8b:cd:0f:47:36:54:44:80:a8:70:9b:cd:bb:b4:cd:4f:
57:c8:18:d1:bb:10:7e:13:d6:6b:cb:3b:ce:bc:a2:97:01:11:
dd:62:bc:09:9e:67:36:e0:70:ee:92:4b:30:d1:9e:ff:37:16:
bf:e3:26:21:b3:09:8d:e4:71:5a:b9:12:9a:17:08:b4:75:52:
47:0e:31:1f:b8:2b:a3:61:7a:24:a5:70:b0:61:9f:f4:22:71:
67:db:bc:87:4f:ce:ef:20:56:15:7f:3f:6a:eb:77:50:8e:07:
aa:1b:dc:98:fb:8d:cb:f7:44:36:92:d2:ee:97:10:e0:2e:c6:
43:02:14:37:e3:d9:c9:1e:fe:2b:4c:1a:cc:c1:b5:f0:04:db:
a2:89:31:d5:f8:8f:bd:60:4a:58:b8:3e:c9:24:61:56:3c:b8:
0b:34:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:38:09 2026 by rpki-client