Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: SXWa0yPjAih2uAdKrRKklNd56PHy4A1uVaPL7E/hWsw=
Subject key identifier: C2:5E:29:15:09:DE:FA:38:52:BB:6F:13:F0:6A:D8:3B:8D:8E:DE:17
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 01A08CB1C17B0DC16A72789D45DB3B58D723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1244
Signing time: Thu 10 Sep 2026 19:00:54 +0000
Manifest this update: Thu 10 Sep 2026 19:00:54 +0000
Manifest next update: Fri 11 Sep 2026 19:00:54 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: y0iM0UQcY+Om6ABLSy1btaV6APbnh71Ra7k42mwNmk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:c1:7b:0d:c1:6a:72:78:9d:45:db:3b:58:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Sep 10 19:00:54 2026 GMT
Not After : Sep 11 19:00:54 2026 GMT
Subject: CN=c25e291509defa3852bb6f13f06ad83b8d8ede17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:0d:b2:d4:48:41:e1:f6:6e:f4:21:d3:b5:
38:75:0a:83:84:8f:60:69:3f:d6:73:7a:d1:a0:90:
62:e3:ed:bc:ca:0b:78:d0:e2:8c:2f:b4:b4:8e:d2:
c2:6e:20:4b:1a:e0:da:7c:f2:00:12:a4:ec:6c:0d:
1d:da:8f:6b:9c:e6:d8:c3:b3:0a:6c:31:e8:f7:08:
fb:8c:0f:d9:29:c1:28:61:83:79:38:2b:1f:2e:f2:
1b:4b:47:ec:9e:e0:0a:3d:58:e7:06:0f:23:c4:ff:
4c:7c:86:a7:7d:81:ca:74:d8:c2:c0:58:85:24:c0:
04:7f:b8:ad:0c:7d:22:8a:0d:80:f2:b8:fc:94:9c:
5a:45:7e:72:d5:4b:10:5d:eb:88:b8:77:2b:92:dd:
b6:84:41:df:35:54:ee:95:f2:78:25:c4:8a:30:69:
7b:7b:64:14:18:4d:7b:89:6e:56:41:f5:d4:0b:f3:
a6:b3:e2:d3:2b:3a:26:6c:f5:eb:97:a8:1a:0d:85:
ac:53:03:74:3e:24:0f:89:41:d2:22:37:49:a6:96:
02:29:00:14:52:32:8c:07:91:7f:69:81:a4:ab:75:
f3:f2:18:00:78:89:64:ab:5e:66:6d:5c:8f:90:75:
6e:3b:56:88:68:06:4c:8d:ba:b0:09:27:d9:12:3e:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:29:15:09:DE:FA:38:52:BB:6F:13:F0:6A:D8:3B:8D:8E:DE:17
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:b1:c1:ff:aa:20:a8:f5:ad:ef:49:3a:a2:63:5e:c5:8d:
1c:23:28:00:bf:8d:a6:39:01:a4:75:e7:56:87:79:8d:79:26:
b2:9d:1e:2b:2f:d6:8f:47:17:48:02:c6:0e:17:e6:10:4d:ad:
e7:d7:6c:0b:8b:c7:7f:4e:17:f2:c0:12:2f:8c:0b:e3:cc:57:
28:81:c7:8c:e4:df:d3:ea:a4:43:54:e9:bb:ce:39:5e:4f:2a:
06:d9:6c:36:75:97:4b:a3:60:b8:45:53:62:32:28:ce:5d:30:
57:c9:5c:db:c1:c9:34:08:1a:e4:4e:af:ae:a9:77:41:91:e0:
a5:60:9f:8a:a4:c7:ac:02:3e:9c:df:fd:cc:d3:d7:78:2b:d8:
2f:69:7e:c1:88:4d:ff:e0:18:74:69:7d:86:05:0b:07:88:8f:
ad:dc:24:5a:5a:e8:ff:8a:1e:50:22:2e:83:c7:5c:16:43:92:
f8:57:0e:52:db:f7:ac:ac:6d:87:04:89:ea:8d:41:36:a9:95:
bf:ec:f3:ee:39:47:16:0a:72:c5:0b:82:ca:c7:6f:91:8e:87:
82:4c:b2:32:c7:ca:1b:3d:50:74:0c:9a:89:71:99:28:10:c9:
53:57:44:07:a4:cc:ab:cb:61:bf:d1:b5:3c:49:8d:8b:6f:4b:
e8:8b:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:23 2026 by rpki-client