Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: 6cWonRd+cPRxOONJeZjI9Ed6TOPuH2dcqBI1ickqnvY=
Subject key identifier: F1:86:AF:EC:E7:8C:FE:96:B1:4E:10:78:F9:39:C3:A4:71:C3:04:0E
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 01A1103AE2B90B2952DC1639E678E0A3E20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 0598
Signing time: Tue 06 Oct 2026 08:00:56 +0000
Manifest this update: Tue 06 Oct 2026 08:00:56 +0000
Manifest next update: Wed 07 Oct 2026 08:00:56 +0000
Files and hashes: 1: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
2: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
3: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 9ST/gwlp1sBBqMF63xSG9PP326GM+3c+5v9aylsX/J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3a:e2:b9:0b:29:52:dc:16:39:e6:78:e0:a3:e2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Oct 6 08:00:56 2026 GMT
Not After : Oct 7 08:00:56 2026 GMT
Subject: CN=f186afece78cfe96b14e1078f939c3a471c3040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:2e:a3:cf:91:2a:38:94:12:a8:07:88:9a:
59:69:4e:0b:d5:60:25:94:b8:b0:0d:51:44:a4:9e:
35:ce:d4:f2:18:f1:d5:21:ab:bd:cb:d4:b2:c7:31:
ae:c7:04:d1:6f:34:20:3b:dc:64:2c:d0:a5:75:10:
17:d2:1d:07:a0:bf:0e:e3:c5:08:ad:04:63:87:c9:
a4:8f:d2:62:72:9e:da:a1:2e:c9:73:86:b8:45:c7:
c9:b2:75:3b:5a:1a:d2:aa:42:d0:f1:ff:a3:13:ec:
6a:f5:bf:ec:21:e4:e6:24:33:f9:ad:7c:cd:70:27:
4d:e9:bc:8d:90:a8:33:cb:6c:07:9f:cf:6c:f0:2b:
e5:fd:e3:6a:35:e2:b2:98:ba:8e:11:bf:e0:4d:d7:
e7:bd:91:a8:e1:34:c4:a7:7e:88:a1:c1:d1:85:fe:
e2:fa:e3:88:37:a1:7e:6f:32:ea:f7:5a:89:cb:6f:
0d:2f:80:ce:32:2a:fc:58:2d:7b:e4:0a:4e:de:eb:
b8:ab:0c:04:9c:5b:8f:85:b4:f7:33:3b:93:39:20:
45:6c:68:f0:c1:ee:1d:a8:de:ba:fc:23:f7:42:2a:
bc:e1:14:b7:4f:a9:bb:42:f7:01:99:0a:79:e5:3b:
94:1b:47:cc:a1:14:0c:9b:78:0b:64:e4:8a:d2:81:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:AF:EC:E7:8C:FE:96:B1:4E:10:78:F9:39:C3:A4:71:C3:04:0E
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:5a:7c:74:4a:bd:96:74:f6:f0:a7:25:82:4b:35:dc:f3:
c9:cd:d9:6d:4b:1b:32:18:8b:0b:03:16:04:1b:e1:d7:50:67:
59:98:3b:b3:47:7b:b8:b5:e0:4f:36:4b:0d:1a:20:c7:05:d9:
77:ee:50:01:79:d9:b3:5c:c0:cc:71:f2:14:a0:c8:1b:52:ae:
09:8c:de:fa:fd:7d:ce:7f:51:51:74:81:3d:66:86:31:0a:90:
01:0f:34:e1:38:fe:a6:5e:a7:7a:8c:87:2d:6e:0e:cc:e7:88:
50:a7:87:a5:b3:3c:04:aa:30:d7:b8:00:9b:a8:46:89:37:e5:
e4:ea:9c:49:93:79:fe:8f:1c:67:0a:c9:7e:a3:7e:8f:96:d0:
2f:69:dd:99:6c:e1:f1:27:1e:9b:47:20:1f:38:3a:35:5c:9f:
28:7a:1a:78:26:9b:fd:87:d9:e3:ec:cc:90:b7:e8:e6:af:15:
80:09:6f:2f:c3:02:b8:b5:8b:52:f2:6f:17:c0:30:f0:48:16:
6f:18:15:50:3f:44:5d:af:44:9b:ea:28:67:43:51:66:4e:d4:
0e:8b:6b:9a:ef:b5:5f:c3:b3:4b:38:33:52:c1:42:ed:b3:0c:
de:39:ce:62:36:73:80:cc:83:f0:04:96:41:72:37:c3:b2:d1:
61:95:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:25:46 2026 by rpki-client