Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: zfAlUXpKGwJIQSUd1GjOQe/4PBjanjIglLPcRLDPmX0=
Subject key identifier: 39:B9:23:B9:3B:9E:EC:08:8A:E5:98:44:2D:50:DC:28:2D:60:0D:51
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 01A0E32B49BAACF2C5062820700E86AE154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 16FA
Signing time: Sun 27 Sep 2026 14:00:59 +0000
Manifest this update: Sun 27 Sep 2026 14:00:59 +0000
Manifest next update: Mon 28 Sep 2026 14:00:59 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: E1GkACYw0Okt0q5A9nf1Vj7eYqcXYy/x6VD9rDaCXIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:49:ba:ac:f2:c5:06:28:20:70:0e:86:ae:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Sep 27 14:00:59 2026 GMT
Not After : Sep 28 14:00:59 2026 GMT
Subject: CN=39b923b93b9eec088ae598442d50dc282d600d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:7f:8c:88:5c:9b:58:16:20:de:5e:bf:cb:
e4:63:f2:6f:65:bf:22:f8:41:3b:b9:89:26:e5:76:
1b:8b:c8:40:4b:ea:a3:cc:10:a1:df:5e:e8:fa:32:
e2:ae:b4:f7:54:c5:eb:7c:51:fd:b1:18:d8:b6:c1:
12:49:e9:d6:88:7b:27:b2:c4:ed:40:4a:35:a2:4d:
72:d5:43:e2:1d:76:dc:4a:59:17:f9:e4:1c:42:69:
47:8a:cc:4b:55:e5:92:43:ac:ad:3c:cd:c4:70:e3:
eb:ae:13:38:62:54:48:0a:17:e2:48:dc:34:56:2e:
4c:b4:52:18:b8:63:d6:e9:6f:8d:47:16:95:25:53:
2c:cd:0d:32:4b:cf:83:b4:15:ad:5b:bd:f6:99:17:
99:cc:36:0f:1a:40:de:d2:5a:15:d8:6a:ee:d7:8b:
f7:90:c8:6e:7d:4e:1a:41:a1:6e:e7:83:5e:6b:7d:
ef:47:a3:b9:09:43:38:97:e0:53:82:9e:fa:ad:a0:
e4:a8:3f:41:08:c8:c5:d2:b9:06:34:93:69:d0:89:
c3:95:14:4b:29:ea:48:74:c2:bd:fe:d0:17:76:2c:
d6:93:70:10:82:93:33:ca:9f:29:11:eb:7c:ff:79:
42:d1:67:ab:6d:b2:2c:bc:c8:62:f2:7b:67:8d:2f:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:23:B9:3B:9E:EC:08:8A:E5:98:44:2D:50:DC:28:2D:60:0D:51
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:d9:e3:dd:58:3c:fa:ad:a8:b7:27:0a:c7:e6:e3:d3:b4:
bb:2e:e8:7e:f9:65:c3:c2:2f:d8:8b:8a:53:1d:66:40:f9:a3:
ec:89:40:06:18:0d:d0:18:72:1e:bb:75:89:9e:49:3b:6d:39:
70:62:eb:3d:bc:01:80:0b:0d:bc:a6:04:05:8e:1b:b5:2f:6a:
74:6c:82:75:e8:8e:06:52:c2:70:14:94:4b:bc:80:67:32:65:
12:87:a3:0d:5e:38:ac:86:77:bc:ce:96:6a:26:3c:80:04:b5:
bd:7a:ec:17:6c:76:f4:bc:f7:4b:da:af:f8:ba:eb:d5:5e:bc:
0b:a5:8b:e0:57:42:e7:48:57:67:9a:aa:48:2f:f5:2d:d2:e6:
d2:d6:00:d7:2d:bf:38:f9:32:1e:62:82:ab:2f:f9:90:9a:74:
7b:1b:7b:91:d7:38:23:1f:8b:79:ce:34:e5:8b:89:94:e7:86:
9e:91:22:aa:c3:dd:19:90:b1:59:74:ce:d4:7d:2f:5a:ae:42:
31:bd:c9:c0:5d:1f:42:4c:b4:28:3e:1c:86:fa:86:d5:99:c1:
20:1d:26:a8:df:73:f7:85:c6:40:79:25:2f:11:a2:37:a9:d8:
59:d8:4b:ae:21:b5:a2:42:d4:a3:8c:86:05:1d:1c:4c:d6:9f:
95:92:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:05:42 2026 by rpki-client