Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: R1d5mVgSLq9+3lBYXVO1yFmpJN4GZa3SQLJJIgBbDL0=
Subject key identifier: 3B:97:49:DE:B3:8A:01:79:74:CC:48:1D:06:EF:3D:58:BC:3D:A1:7F
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 01A138C8D95551576630078F41F71EE714DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 08D8
Signing time: Wed 14 Oct 2026 05:00:49 +0000
Manifest this update: Wed 14 Oct 2026 05:00:49 +0000
Manifest next update: Thu 15 Oct 2026 05:00:49 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: QOvnlSj24k/xt8XLXLWgMb5jsSpqPzKuwV9LbkcCFic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c8:d9:55:51:57:66:30:07:8f:41:f7:1e:e7:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Oct 14 05:00:49 2026 GMT
Not After : Oct 15 05:00:49 2026 GMT
Subject: CN=3b9749deb38a017974cc481d06ef3d58bc3da17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:7f:70:a3:60:51:3d:4c:04:0d:75:db:03:
69:e7:5a:74:0a:9f:99:bc:e2:e2:dd:69:ab:d0:47:
6a:3c:76:42:4a:e6:25:b9:7b:c5:13:d3:3b:c0:d8:
b4:cd:0b:81:c4:31:b8:f8:4b:6a:43:d5:8a:b6:6f:
73:3a:2a:80:c7:8f:1a:10:90:51:fa:0f:46:20:8e:
1d:20:2b:e1:96:6e:64:47:3b:5f:1b:54:54:bd:11:
53:52:44:f3:54:30:3f:03:cc:5f:04:97:db:02:c0:
6f:b7:96:1b:dc:3a:8c:36:31:2a:d5:cf:c0:3d:13:
55:28:a1:30:9f:b3:7d:cd:48:03:dc:aa:56:fa:78:
1a:d4:41:ee:74:11:01:fd:92:4a:49:8e:22:41:a3:
74:81:2e:aa:23:31:57:57:38:47:fc:c2:6c:79:cf:
76:fa:31:67:e3:6d:f6:ca:ac:0d:6a:82:11:af:9b:
23:cc:d2:ac:05:7e:ef:cc:78:a6:17:82:1b:5c:49:
59:52:bc:7a:a0:89:33:66:12:80:bb:80:37:8a:ea:
4e:ad:7e:ff:29:56:7f:e8:96:13:4e:b2:c8:0b:cc:
40:91:ee:72:11:9c:fb:6d:5b:e3:41:ba:11:c4:c4:
b9:c8:f5:ce:8d:0f:18:88:d0:c8:37:10:94:fe:46:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:49:DE:B3:8A:01:79:74:CC:48:1D:06:EF:3D:58:BC:3D:A1:7F
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:a8:07:46:70:8e:8c:04:85:c6:57:f5:99:bf:0f:d5:95:
98:5d:c3:74:62:26:5e:5a:68:e5:4a:3a:93:e0:b4:a0:20:04:
e0:05:d5:26:95:28:40:a2:44:ce:d7:e1:10:0b:76:d3:a6:2f:
69:04:5a:a8:6b:62:69:60:04:eb:70:aa:d1:8c:c6:e1:c9:fe:
cf:b5:52:e5:9a:39:45:46:d2:d0:3d:0d:e5:fe:cb:48:54:ac:
62:51:36:27:63:35:4a:79:8d:18:77:83:ac:a1:3a:bd:e5:85:
8e:5e:1e:80:dc:e3:3e:83:37:b7:15:ff:d1:a4:fb:44:fa:c2:
61:58:35:e6:67:fb:74:ef:91:95:10:2b:0d:49:4f:3a:63:f7:
85:40:76:1f:9b:af:25:5a:bd:82:dc:da:fd:a9:a9:b4:0e:13:
d8:40:06:b1:fa:bf:92:17:f0:8c:dd:39:5d:29:31:08:53:fc:
67:87:25:88:67:d8:72:96:97:49:60:e2:6c:7f:ce:8f:18:c3:
00:2b:c4:79:64:a9:96:9d:0f:8b:e8:ec:68:3e:f7:76:61:e3:
85:ed:b3:35:6a:54:01:7d:f4:60:51:84:ed:d8:c4:b6:4d:06:
b2:49:cb:d7:11:5b:27:cb:6d:c1:5b:8d:c0:d7:98:89:89:d1:
99:f0:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:39:25 2026 by rpki-client