Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
File: yiAvZExIQuX41ATgaJ-B9SwVS1E.mft (raw, json)
Hash identifier: sYVkDCaxdhWcjA1JOCTWNUy/huVNtmYLcfaJENnzxP0=
Subject key identifier: CF:40:82:87:B3:72:B4:44:01:57:AA:AF:B5:37:30:10:7A:79:AF:0E
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 01A0CE242045DB44D1D65228EB63B564B821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:09 +0000
Manifest this update: Wed 23 Sep 2026 12:01:09 +0000
Manifest next update: Thu 24 Sep 2026 12:01:09 +0000
Files and hashes: 1: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (hash: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=)
2: yiAvZExIQuX41ATgaJ-B9SwVS1E.crl (hash: mB4u+MksqpmlDIpvDWvfQuvXcnzd1DS/iUXFWsq4WQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:20:45:db:44:d1:d6:52:28:eb:63:b5:64:b8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Sep 23 12:01:09 2026 GMT
Not After : Sep 24 12:01:09 2026 GMT
Subject: CN=cf408287b372b4440157aaafb53730107a79af0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:ef:49:07:b8:64:75:87:5b:17:9f:7e:52:
97:e8:43:a9:30:ef:26:ef:3e:b4:27:4d:a9:f4:f1:
0b:48:af:81:48:a2:f8:b2:7b:dc:c4:7f:ac:45:81:
89:be:9c:a6:8e:b2:47:23:2c:44:9e:48:11:c1:0a:
a5:57:25:02:c6:52:18:9b:f6:14:2a:00:44:0d:96:
0f:d2:82:a8:33:b4:80:3c:0a:41:0d:c1:65:91:1c:
3f:30:98:c2:bc:41:dc:4b:49:90:1e:b9:d6:9b:55:
8a:35:44:29:9e:14:d0:bd:22:5f:bc:b0:ae:29:90:
15:8f:12:74:e7:7f:95:e6:84:37:24:96:e2:22:7c:
7d:78:b8:86:5b:d8:44:e3:36:75:3d:e1:15:cc:c6:
9b:36:e0:fc:81:21:83:c3:be:69:08:7e:41:de:8e:
a9:35:fe:12:e1:91:7f:c7:30:d6:f9:6e:2e:3a:8c:
9e:54:44:91:6e:71:86:78:71:bc:fe:bf:0f:c3:3e:
e3:0b:6b:9d:25:64:3b:d5:69:5c:f9:69:49:c7:6e:
a5:34:35:65:7e:cb:33:7a:5a:bb:ed:74:de:28:4c:
c7:a8:6a:c7:45:2d:23:1a:87:70:e4:8c:f1:b2:04:
63:18:48:6c:58:35:8e:35:1e:d6:8b:db:44:da:37:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:82:87:B3:72:B4:44:01:57:AA:AF:B5:37:30:10:7A:79:AF:0E
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:75:b6:3d:19:4f:fa:94:bd:5e:3f:e8:f8:ba:c1:b5:d2:96:
04:7d:d2:ee:61:6a:44:6d:7d:e1:35:e5:e4:90:35:1b:79:16:
db:d2:41:ba:12:b7:56:13:63:f6:b8:b6:51:62:76:b2:5b:4f:
1d:00:3a:fc:68:de:93:75:3f:ed:69:a3:d5:42:09:da:f2:80:
e6:cf:d0:4d:e7:50:5c:a7:42:9a:96:55:b2:b1:32:bf:6f:af:
74:b2:f2:b5:e9:55:fc:04:b5:c5:75:be:dc:d0:d2:2b:17:1d:
c3:e8:a1:c6:8f:4c:ac:f8:d8:42:2a:63:5b:ec:88:a2:10:a1:
c7:6e:69:d0:1f:14:1f:02:26:0c:3e:cd:25:fd:23:a1:48:83:
46:6e:b4:7b:b7:6c:51:d2:91:73:15:a2:8a:00:70:04:71:8d:
e7:9d:1b:40:16:4d:eb:f0:50:db:d3:5f:e0:e9:b3:b3:04:fa:
30:6e:d5:09:14:4e:59:53:1a:90:01:99:bd:a3:55:4c:76:a3:
8b:58:43:eb:3d:2f:db:d4:03:e1:d5:05:50:65:1d:2a:7a:b7:
f5:a1:49:76:4a:96:4a:da:5b:e7:39:0f:74:69:9b:18:f6:ad:
b7:e1:f3:b7:55:c5:1b:00:0b:1e:9d:db:63:18:a8:4e:45:68:
16:87:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:43 2026 by rpki-client