Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: mh19egKFMjsVjJJURQwirSNwbYRC1bwuWiWC4jnlXXU=
Subject key identifier: C3:32:08:DC:76:E6:8E:43:98:D6:0B:7F:A0:1B:66:BE:2C:D9:CE:FB
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 01A0D9172F2205F304D0CD4B79557D458770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 15:02:50 +0000
Manifest this update: Fri 25 Sep 2026 15:02:50 +0000
Manifest next update: Sat 26 Sep 2026 15:02:50 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: CAaFUEM1RK5ekZQFbT/Vzd9yVuTImUlM0sUGW3GtUME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:2f:22:05:f3:04:d0:cd:4b:79:55:7d:45:87:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Sep 25 15:02:50 2026 GMT
Not After : Sep 26 15:02:50 2026 GMT
Subject: CN=c33208dc76e68e4398d60b7fa01b66be2cd9cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:0a:3a:6c:7e:8c:48:69:ab:71:e8:fc:bc:
09:6a:2d:0e:a1:5a:ff:9f:d2:c7:50:00:f3:b3:16:
1f:97:34:cb:6e:49:6e:42:20:ed:e0:7c:12:6f:4d:
9c:d9:eb:36:27:c3:23:f2:56:75:f2:d6:b1:19:a9:
68:d6:b8:8c:87:09:c3:4e:d1:9c:c1:17:67:86:b1:
15:d2:4a:80:27:3d:93:b0:f9:fa:92:60:12:9f:43:
f7:09:ae:a6:8a:ec:c8:30:fc:94:40:8d:17:4b:92:
a5:07:b2:29:38:64:f5:35:b3:1c:de:b4:18:23:f4:
30:28:45:40:e0:52:aa:f1:2e:93:af:1e:0e:9f:24:
be:d3:25:65:bb:7b:99:fd:86:d1:af:57:b7:42:cf:
31:ef:67:3d:46:ed:a6:19:52:91:75:9a:ae:78:80:
87:1c:62:cc:5b:be:31:42:ec:51:04:19:b2:42:be:
bc:6d:27:87:99:1d:fc:9b:5b:e2:8e:15:45:2c:49:
20:81:5d:90:d0:e2:ec:79:7f:d3:54:aa:41:a6:10:
e1:b6:12:a2:e9:e7:36:e4:39:09:3c:77:86:8b:2c:
70:66:97:89:1c:65:8d:d8:ea:f7:a4:17:dc:33:c1:
79:d8:35:e2:98:25:75:6c:c7:ae:05:63:7c:05:9d:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:32:08:DC:76:E6:8E:43:98:D6:0B:7F:A0:1B:66:BE:2C:D9:CE:FB
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:52:a4:35:a4:8e:12:bb:74:51:ee:68:42:8e:fc:94:82:2b:
4f:ae:70:2f:dd:91:97:e9:78:69:f2:95:a0:ac:9d:6a:7c:15:
94:d9:76:fa:72:59:d0:e1:75:ef:1b:29:21:c5:2a:8e:f4:95:
03:44:c4:7f:d2:5b:e2:cc:a7:0b:5a:4f:2d:b0:a8:60:d2:07:
47:f2:ce:4e:fc:48:61:d1:ec:b8:50:f1:f7:30:77:42:84:e0:
6f:39:63:ed:e6:a2:d2:7b:7c:e2:6b:77:96:3a:38:9a:16:dd:
3a:c1:ff:ae:be:5b:67:c5:a5:9f:93:ff:fb:9c:48:3d:87:c2:
ab:2e:fa:03:a5:2c:f7:af:00:9d:83:5f:45:95:6a:d1:0f:a8:
6f:b6:16:54:cc:b9:b0:83:4b:44:a9:36:59:d9:be:46:0a:99:
3b:3c:cf:74:5e:64:0b:0f:52:3f:8a:7c:ab:f7:68:f6:c0:4d:
30:09:d4:47:27:e6:38:71:90:20:ed:5f:3a:6f:1f:96:fa:0e:
82:c9:bc:28:d6:b8:1b:a5:55:07:a0:08:a3:da:60:96:51:99:
4b:a8:4c:09:41:9b:97:31:75:ae:00:a2:86:cf:12:14:d3:d2:
24:49:07:c8:66:e8:95:c6:79:ea:81:15:e8:85:f9:4c:82:0a:
2d:3c:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:25:20 2026 by rpki-client