Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: VrXJn0p64Rb1PIUgiWS3vPc77O8OdDWHHVbeTKjxp/g=
Subject key identifier: 23:B7:68:6E:95:A9:CC:5A:2D:B8:56:93:4E:01:13:DB:52:8B:AC:21
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01A08AFB2EA068304BD00618637C31F4A1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:01:52 +0000
Manifest this update: Thu 10 Sep 2026 11:01:52 +0000
Manifest next update: Fri 11 Sep 2026 11:01:52 +0000
Files and hashes: 1: 9rZIiMZ6ODdS6-7osomnLuo9KL0.roa (hash: mMKWVhiXp6FA47OsmEFdEx0HM7JXDhXlbaodVXaA8iM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: L4ObCCZXxJ9rSBM56prPen6b1fpk1OLQ+fMleQLuMZM=)
3: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
4: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:2e:a0:68:30:4b:d0:06:18:63:7c:31:f4:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Sep 10 11:01:52 2026 GMT
Not After : Sep 11 11:01:52 2026 GMT
Subject: CN=23b7686e95a9cc5a2db856934e0113db528bac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:41:a9:92:45:a8:9c:d3:b1:df:ba:9d:d5:
09:a8:93:b1:e2:37:c2:b7:a6:3f:4f:da:af:9d:25:
93:dd:7f:5c:b0:9e:90:da:c2:44:b6:35:5b:c4:d6:
d4:59:12:ff:2d:cf:02:17:27:84:d0:7b:94:83:ec:
49:bc:14:f8:74:0b:44:b4:34:c1:1b:08:05:cb:0c:
fc:87:27:97:28:f7:f5:7c:07:45:c8:71:c1:5e:51:
b2:36:5a:a5:a7:08:e5:63:c9:ae:aa:59:e0:9d:38:
78:da:50:9e:68:d6:cf:ca:23:64:c9:89:f7:87:60:
76:b9:4e:73:d9:06:53:63:9e:58:a5:9e:9f:c5:a1:
90:6d:1b:ff:ce:ee:73:98:d9:ca:f0:1b:10:47:bf:
28:0c:ac:79:83:02:c4:7a:4d:bf:6a:8f:23:4f:7e:
4f:9d:56:5a:64:38:5f:7f:17:7d:dc:1d:d8:b3:60:
a5:b6:08:10:a5:03:e9:50:85:db:06:c9:1d:32:eb:
95:3d:40:f5:6b:39:1b:77:36:18:df:e1:29:f3:6a:
3f:eb:16:87:83:57:fb:c3:78:6e:f9:38:f8:cf:f4:
d7:66:ff:1b:9c:d8:c4:f5:84:06:5d:c0:63:52:e4:
cd:58:c2:7b:49:0d:b1:ba:ab:20:d0:59:cd:63:87:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:68:6E:95:A9:CC:5A:2D:B8:56:93:4E:01:13:DB:52:8B:AC:21
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:cd:dc:c0:5c:df:42:c0:4f:65:d6:4c:8c:48:90:80:22:
9e:75:2b:29:5c:5f:c7:99:cc:11:b5:d0:eb:35:da:1f:8e:37:
8c:0f:f1:fa:74:6a:97:74:90:44:a6:8f:87:fe:d6:22:0e:78:
7d:93:90:29:69:80:23:f7:10:64:73:5f:19:11:0e:66:63:c9:
da:51:f3:4b:d1:f4:93:f2:24:77:49:b8:d5:5f:9b:05:fc:44:
dd:1d:d2:23:15:2f:b7:92:4d:2e:17:5e:84:2c:0f:59:00:d4:
fc:1d:3c:a8:6d:56:e9:e3:95:01:2d:16:1b:e9:39:ca:f3:85:
1d:ac:58:bb:e7:84:53:96:6c:84:b5:d3:dc:fe:93:04:0e:f7:
71:3c:39:cb:4c:9a:33:27:7a:9b:86:2f:3f:eb:ce:0b:12:7a:
dd:7f:42:14:f3:85:f3:85:5d:49:b4:27:4f:69:e4:17:ca:b7:
a4:d7:bd:41:61:eb:8d:55:9e:b0:a0:6b:ff:d8:6e:53:68:00:
79:bf:ea:ac:05:2d:90:ac:2a:1b:6f:57:cb:9a:70:7e:ff:81:
6a:94:22:58:5f:6d:b6:b4:25:ae:b9:a8:f1:64:07:5e:a9:68:
5f:a2:f6:c2:bd:6a:70:97:f6:92:94:bb:0e:d5:f8:58:36:b5:
83:f1:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:10:09 2026 by rpki-client