Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier: uxx+sTeg9OB7f/0+Q+Noj6Hp8w/Fo5BKyt3XHbGm/f4=
Subject key identifier: CB:D8:E4:C7:45:16:1D:81:2D:3D:9A:18:4C:23:A6:0B:63:4C:45:D2
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01A08F7C0B1CE4A310C7549AE60B72D6FF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number: 1605
Signing time: Fri 11 Sep 2026 08:01:06 +0000
Manifest this update: Fri 11 Sep 2026 08:01:06 +0000
Manifest next update: Sat 12 Sep 2026 08:01:06 +0000
Files and hashes: 1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: yEgzar3sNINfGyw/xfHk0W5IH4F8ONniaWkCPPVRbw8=)
7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7c:0b:1c:e4:a3:10:c7:54:9a:e6:0b:72:d6:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Sep 11 08:01:06 2026 GMT
Not After : Sep 12 08:01:06 2026 GMT
Subject: CN=cbd8e4c745161d812d3d9a184c23a60b634c45d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:55:7c:a3:d4:f3:84:85:d4:c6:cd:00:e2:
fb:72:0a:63:b5:e3:6c:42:06:a8:80:ad:f2:06:9e:
e8:71:14:31:53:78:46:a1:29:cc:87:ee:a8:1c:c3:
6d:0f:0b:e2:45:0f:0b:f7:ef:af:95:d5:f8:dc:44:
f4:0e:36:ef:55:69:df:cd:99:62:36:a8:47:8a:ab:
cb:87:17:ba:ca:51:16:ff:ec:60:f6:c9:45:e5:fc:
4e:42:70:60:39:28:d9:5a:cb:15:53:39:32:0e:e1:
2b:9c:b2:0f:10:0a:e9:3b:05:c8:a7:9b:e5:72:7c:
13:98:9c:3a:1c:d0:e2:5b:81:49:e7:b3:e5:d3:1d:
2a:3c:0b:45:56:af:e6:90:c5:96:d0:0b:2d:f2:71:
c0:8f:c3:d7:99:47:b1:14:b8:d5:77:38:f9:22:32:
b8:24:0e:00:4d:29:f4:aa:a3:df:f7:3b:a7:50:50:
b1:69:9a:fe:5d:45:0e:c7:91:e6:9a:eb:34:c0:9e:
c8:97:a0:13:d3:04:c8:ab:68:a3:92:15:be:75:55:
14:8f:26:6e:8c:cc:f5:15:44:68:ad:a8:41:58:7a:
ed:0f:3d:1a:ea:58:fb:af:d8:d1:ae:84:63:e6:a0:
c5:c7:94:c4:85:5b:42:a7:45:3b:f1:a2:de:7a:30:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:E4:C7:45:16:1D:81:2D:3D:9A:18:4C:23:A6:0B:63:4C:45:D2
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cf:f3:bc:4d:60:3e:56:98:15:ef:55:2f:23:df:29:96:42:
50:83:11:09:13:22:ac:3c:be:08:a4:94:94:02:93:ec:9e:47:
b2:78:ef:ad:6c:d0:f0:6f:15:87:96:ee:f7:83:c7:c7:91:a0:
e5:76:f7:c4:01:ed:90:ad:6c:6c:04:0d:e5:c5:38:0a:d3:42:
0c:f7:1c:88:e3:bf:7f:53:94:be:d9:fc:df:a6:b3:44:ec:4c:
23:46:7a:ac:0b:0e:0f:50:23:e2:aa:c5:af:e2:a7:55:bc:f0:
7b:54:4d:27:03:fe:d3:7b:e7:4f:fa:c0:83:b5:ef:e4:c8:b8:
27:b8:54:07:1e:43:bb:61:a8:19:d5:73:1e:c6:6c:d9:f5:54:
f3:ea:55:75:34:83:6a:ec:fe:78:31:8a:77:bc:fa:2e:e7:fc:
1d:6e:b2:0a:ad:6b:2f:81:53:9f:4f:23:b4:53:3b:1a:ab:11:
ed:5d:78:a6:16:b6:ab:36:97:71:dc:79:39:34:2d:83:51:40:
8c:d9:61:3b:97:e5:c0:ca:5d:bf:1e:28:d1:1e:6a:2e:c0:48:
36:cc:e7:e4:61:71:fc:c0:c3:2c:7e:bc:9e:36:47:1f:f1:10:
50:79:9d:24:87:0c:87:27:48:84:c0:bb:4f:40:00:ad:2a:12:
72:40:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:08:52 2026 by rpki-client