Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: 73plKyANyVW7p7n4xqkvtE9t3C4pllBXrgUIfqLYrDo=
Subject key identifier: FE:71:4F:BB:D1:E3:A6:0E:3B:25:0F:F7:07:7C:8C:BA:D8:D3:5B:A3
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 01A127D571658FEBBF0DFB7E4AD5EA95C7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 22:01:01 +0000
Manifest this update: Sat 10 Oct 2026 22:01:01 +0000
Manifest next update: Sun 11 Oct 2026 22:01:01 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: tnZ7/8rPvx3VXj8S/l1RtqLOpXtUVAhzykP2duOPP/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:71:65:8f:eb:bf:0d:fb:7e:4a:d5:ea:95:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Oct 10 22:01:01 2026 GMT
Not After : Oct 11 22:01:01 2026 GMT
Subject: CN=fe714fbbd1e3a60e3b250ff7077c8cbad8d35ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:3e:54:aa:d3:b5:27:3c:8f:f6:59:db:63:
4b:c5:b4:c9:79:0e:f4:af:1d:23:1f:ea:cb:2a:44:
16:b5:1f:5c:12:83:d3:c7:05:e6:71:c3:6c:6d:c8:
50:88:b8:07:41:a8:7d:cc:0d:c3:33:dd:0e:b8:0d:
ce:98:de:75:64:4d:1a:56:40:c1:d5:3e:f5:2b:fa:
bf:b8:03:de:e7:6e:09:1f:74:01:d5:8c:88:48:9c:
0e:3e:37:ff:d2:1b:3b:6f:86:c4:6a:86:cf:23:56:
b0:f1:9d:d3:7f:b2:72:a4:4a:3e:60:e4:50:a3:cc:
22:af:dc:77:84:2d:c7:86:1d:4d:fb:76:4e:9e:11:
22:98:98:85:04:d7:a6:f0:5f:21:71:09:cd:fd:a1:
f4:41:52:3e:c5:a0:ab:dc:28:df:7d:ac:9e:65:14:
c6:d4:47:ad:13:c3:0f:58:f8:79:8b:e4:7d:47:7a:
70:e8:50:da:7f:1b:40:97:f7:28:80:f8:a7:69:cf:
ec:ec:f7:b4:c8:1b:8f:fe:bc:3e:bd:7e:c9:68:3e:
0c:05:7a:22:81:5e:66:39:f3:09:5a:1b:ea:6b:7b:
61:64:52:3f:e7:71:82:16:84:ee:a7:87:f0:7a:2e:
34:02:fb:a6:15:76:e1:21:81:49:b4:98:21:1e:35:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:4F:BB:D1:E3:A6:0E:3B:25:0F:F7:07:7C:8C:BA:D8:D3:5B:A3
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:38:75:8a:9c:8c:1e:fc:be:44:af:19:34:9f:b1:dd:b5:
4f:f8:fb:b7:b3:15:f2:04:f7:94:07:92:de:98:54:4f:78:eb:
21:d4:58:c1:22:49:21:ad:cc:4f:d2:56:6f:28:7b:9d:58:58:
aa:f9:fd:0d:f4:3d:8f:45:da:d6:39:71:6b:60:76:39:b4:17:
c2:8d:04:95:53:39:5c:f2:e0:85:ac:39:e9:0d:0b:2e:16:6b:
59:f9:a5:d4:72:7e:40:9b:0a:8e:61:1d:d4:75:fe:7d:3d:60:
6a:5e:4f:63:c0:df:0e:ed:15:40:03:7e:54:c2:54:3c:3b:7e:
d6:d6:9d:0b:f8:a8:08:6e:a3:2d:dc:b6:b0:13:69:d3:07:29:
a8:77:da:68:87:28:d6:34:90:48:11:f3:5d:f6:a9:f0:c1:38:
1d:ae:d2:d3:d8:7f:9f:6c:ec:33:12:5a:ca:21:52:65:16:83:
8f:97:e7:73:2c:d0:33:22:ae:b6:a3:db:84:a7:54:7e:5e:5d:
fb:04:7d:32:4d:45:6d:0d:86:94:1e:f7:e9:20:4f:af:d1:64:
82:73:93:95:e3:4e:41:b5:af:a0:d5:88:a5:42:8f:7d:1f:df:
40:24:f3:c2:cc:3e:eb:2c:16:6a:e0:b5:12:34:c1:de:61:f6:
be:69:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:02:56 2026 by rpki-client