Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: wphVU/0DCgdAIoipdRWsQodVk2ztPTdZCzosKyD0d5A=
Subject key identifier: CC:95:CC:EF:E0:B2:66:1E:AD:E9:99:7D:E4:9B:47:A8:6E:98:C4:6A
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 01A0C9D91191487908D0896B461AD0AEB8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0B14
Signing time: Tue 22 Sep 2026 16:00:41 +0000
Manifest this update: Tue 22 Sep 2026 16:00:41 +0000
Manifest next update: Wed 23 Sep 2026 16:00:41 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: hDVdboDJBqFhYZM9hPkP/aaKHyS6kwgkLiYp8vqb6Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:11:91:48:79:08:d0:89:6b:46:1a:d0:ae:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Sep 22 16:00:41 2026 GMT
Not After : Sep 23 16:00:41 2026 GMT
Subject: CN=cc95ccefe0b2661eade9997de49b47a86e98c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:57:61:95:d7:9f:c2:15:a5:2e:50:8b:96:
ae:2b:3a:8d:89:20:6b:10:e5:f0:53:a9:43:86:f6:
76:67:bc:78:5e:52:02:2e:75:02:29:51:1b:a1:f9:
4d:fc:e1:ca:15:49:7b:a3:44:d5:3b:32:42:08:8f:
ad:88:19:8f:f2:cc:5a:30:86:a9:39:d3:78:47:d7:
43:22:ae:3c:53:ec:7b:a8:48:6e:d2:e0:2b:94:82:
73:68:9a:0b:84:41:5e:10:cd:d3:cb:61:16:81:f8:
ae:7b:33:f0:4d:21:0d:a1:c8:7f:63:f6:30:d6:c5:
70:54:f4:96:12:a9:b4:78:71:80:c8:06:4f:bd:0b:
40:d4:f0:91:f9:4e:11:e8:c1:0f:83:85:63:ae:ab:
c3:d4:9a:87:92:43:12:b9:52:65:a1:17:73:a2:8e:
64:28:8d:44:d1:e1:6f:f3:72:01:36:e9:e0:b4:83:
e0:6b:d1:71:17:99:d6:0b:48:56:c1:4e:c1:db:31:
52:cf:67:84:77:4c:74:6a:91:01:28:67:b3:0c:e3:
f2:b0:a7:6d:68:3e:dd:1a:2f:4a:a4:0d:88:5e:8c:
90:b9:1d:85:e5:67:b7:c1:25:4c:ea:f0:62:02:4e:
dc:a5:2a:41:d6:d9:2f:85:7f:ab:3a:7d:ae:91:72:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:CC:EF:E0:B2:66:1E:AD:E9:99:7D:E4:9B:47:A8:6E:98:C4:6A
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d6:ca:0b:c1:56:cc:d7:10:b7:5e:2d:bc:4c:6e:4f:2e:8e:
3c:44:d1:06:e3:a4:a7:8f:42:42:75:37:41:6e:ff:0a:81:b7:
1d:30:1e:b2:68:2b:0c:e9:50:3a:35:5f:c8:c6:dd:09:d9:36:
7c:72:8e:15:2a:6f:d0:48:30:2b:50:c4:83:19:a0:f6:17:7f:
f4:df:43:31:da:c3:e6:00:4e:e6:88:c2:6f:6e:e3:f1:bb:12:
f4:c0:c1:0d:5f:a1:25:b4:56:a6:5c:36:99:28:a6:91:1e:e2:
5d:c5:87:54:74:f8:5a:cb:0d:4d:01:03:7a:eb:f8:e4:57:31:
d9:8a:ed:e1:c0:b5:5a:a7:39:4c:0a:c0:fc:7c:32:79:73:df:
53:a7:39:46:1c:48:41:a2:d7:9f:31:18:f8:f8:e9:51:e3:6a:
e4:86:9d:13:02:27:20:5c:ea:fe:2a:9b:6b:2c:8b:68:48:27:
ff:c3:c5:81:1a:6c:d5:e9:a6:f4:a2:19:e3:cb:71:67:72:1f:
4a:84:90:82:4b:b4:b8:26:c4:4d:5a:23:c0:f5:92:92:7f:b5:
1b:c5:56:1f:c7:15:eb:00:a3:28:3b:20:6b:c7:4c:02:c7:db:
4f:8d:bd:82:5a:6f:a0:be:f0:1b:b3:7e:0f:cf:a0:49:74:9e:
d9:fa:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:25 2026 by rpki-client