Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
File: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft (raw, json)
Hash identifier: 7gYfbOoMQS3/7cedEqGESwsh4YFHreK/BKdapVaYle8=
Subject key identifier: DF:22:74:4A:2A:78:D3:8D:D6:9E:5E:E4:CC:2F:0C:B4:E5:8E:84:1E
Authority key identifier: C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
Certificate issuer: /CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Certificate serial: 01A1DF837600EABDCDA62703111197BD505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
Manifest number: 90
Signing time: Sun 15 Nov 2026 14:01:36 +0000
Manifest this update: Sun 15 Nov 2026 14:01:36 +0000
Manifest next update: Mon 16 Nov 2026 14:01:36 +0000
Files and hashes: 1: seZEa9HD6L1qki5KhaAXkUiQOso.roa (hash: tF6XcB8iOSSA8S2CSCzo9TmsiQac4hB9BQ+U2m1E58Q=)
2: yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl (hash: 6EGoh3VSW8veiGn3acTa7TWe0uRWvqRIya8rlTSgVl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:76:00:ea:bd:cd:a6:27:03:11:11:97:bd:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a2591f56f6905407e0527fb7bb53cc1da4885f
Validity
Not Before: Nov 15 14:01:36 2026 GMT
Not After : Nov 16 14:01:36 2026 GMT
Subject: CN=df22744a2a78d38dd69e5ee4cc2f0cb4e58e841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:ed:e9:00:4b:7e:25:0f:4e:68:36:e9:af:
99:83:5b:38:07:50:58:74:0c:d4:5c:9d:f8:d2:43:
f7:bb:48:e3:31:d5:a1:78:26:50:83:12:c6:1f:80:
83:84:8e:4f:4d:08:44:66:2e:c0:79:8b:b7:d7:4b:
a4:cc:c7:48:93:52:db:5c:07:6a:db:fe:7f:f0:90:
c0:b5:91:22:51:ee:6f:ab:cf:f0:b5:49:d8:30:05:
22:6e:88:4b:dd:3c:4e:e4:48:3f:6a:61:01:e8:32:
1e:7a:e4:6b:7a:b5:5b:5e:54:34:66:c9:34:e9:4b:
f4:ae:59:9d:90:65:f0:79:a0:2a:0d:a6:ae:45:4a:
04:80:c5:24:bb:af:82:1d:bf:db:2a:c3:69:00:68:
e9:37:69:b7:f1:ab:f0:ab:0b:c3:d4:7c:24:48:c2:
45:a2:54:21:27:36:d4:d2:7b:05:1a:5d:f7:94:2b:
6f:15:ed:4c:43:cc:0d:45:ac:8d:ba:2d:e6:68:41:
98:c8:6f:35:04:34:ef:22:84:d1:f6:a5:4d:68:93:
ca:b8:b1:ab:83:b6:ce:3f:84:96:7e:48:53:55:81:
0b:8b:5f:83:49:e9:e5:ea:29:b8:03:34:be:fe:ff:
ed:5b:3f:60:8b:07:86:c3:42:d0:a3:98:38:1e:30:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:22:74:4A:2A:78:D3:8D:D6:9E:5E:E4:CC:2F:0C:B4:E5:8E:84:1E
X509v3 Authority Key Identifier:
keyid:C9:A2:59:1F:56:F6:90:54:07:E0:52:7F:B7:BB:53:CC:1D:A4:88:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/558d00-a2c5-496d-bdf3-75eafba3742d/1/yaJZH1b2kFQH4FJ_t7tTzB2kiF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f3:3d:2c:dc:b1:9d:4d:1c:98:fe:43:0a:c2:ba:53:bd:e6:
58:8d:d6:3b:e0:c0:9c:9f:85:bb:aa:56:6f:16:1f:71:68:7e:
d7:a6:db:05:f8:7b:83:8f:df:77:a3:df:64:c5:bd:f2:61:eb:
55:5c:a6:49:e5:9a:43:f9:e7:83:e3:36:1a:af:05:0a:96:69:
1c:c1:77:d5:5f:ed:12:48:2e:24:fc:28:69:a8:10:7d:98:90:
bd:ec:d7:d4:53:02:a1:10:e6:87:c7:23:02:dc:5e:6b:a8:01:
e2:8e:5c:2b:00:4e:0b:7c:48:f6:4a:40:fc:d2:69:a6:ac:50:
e5:fc:fe:c0:a4:7a:eb:4d:6c:92:05:12:c8:1f:4a:31:a0:c8:
2f:ae:5c:2c:32:f0:40:bc:ab:e6:e2:90:55:fe:d3:02:96:2a:
9c:19:e0:8e:f9:51:e3:48:0f:d6:23:29:62:35:6e:48:eb:a9:
39:2f:9f:3a:c2:93:d6:be:f8:b7:c2:61:e3:ad:8a:5e:a9:67:
03:68:a4:fb:70:4f:43:4a:65:2a:d9:6e:c6:6f:88:a9:02:ee:
d6:ba:a6:cd:70:33:29:9b:ce:b4:38:da:ba:0e:97:a8:00:2c:
4a:37:e2:4f:15:e0:e2:db:11:af:59:77:19:89:74:72:b7:7d:
b4:27:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:36 2026 by rpki-client