Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: iKBdzm6ERIb/J1RZ14fub+dr5aiNFnHcZhExLcZQsfs=
Subject key identifier: 94:9B:CA:31:7E:11:46:9F:06:27:A7:5E:E6:3D:77:B8:39:03:FE:D7
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01A08B6898CF28B5F57963EEAA3663D5B111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0C58
Signing time: Thu 10 Sep 2026 13:01:22 +0000
Manifest this update: Thu 10 Sep 2026 13:01:22 +0000
Manifest next update: Fri 11 Sep 2026 13:01:22 +0000
Files and hashes: 1: 2filITtLre0aS9h7s_J0lG8o9ac.roa (hash: tB33DYQNO/bXVdc5HAElPMFace/IjhKVV8TRM5FqCbw=)
2: B-jtVqVW9M43hbMxN6j_v-hrwB4.roa (hash: xV6nCB7rwxI+22ZkCjSqm8Ae38pQziS4ET9GFX+UA2o=)
3: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: eUlbNitv6ki5+zFRzjWHXtxvqvn+FehUtsMnerWQ2ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:98:cf:28:b5:f5:79:63:ee:aa:36:63:d5:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Sep 10 13:01:22 2026 GMT
Not After : Sep 11 13:01:22 2026 GMT
Subject: CN=949bca317e11469f0627a75ee63d77b83903fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:fa:bc:9e:c6:0b:b2:c2:0b:18:d2:8b:51:
20:87:19:61:e4:1f:8e:e9:8b:bb:d3:13:08:3e:cc:
06:53:45:12:2d:28:11:45:2c:83:71:ee:97:f6:f1:
7d:cf:ed:21:a6:d2:df:c0:31:4b:b1:bc:d3:96:06:
da:97:38:f5:ed:61:35:71:70:a9:4a:f6:62:db:18:
d0:02:f3:4c:1c:16:46:39:4e:e6:7e:36:fa:a6:7c:
72:af:89:ef:a4:a1:1f:ba:b2:9a:ca:8a:89:8e:71:
10:ee:92:85:ab:3b:85:cc:6e:c7:aa:7f:1a:3c:52:
51:a1:3a:92:c0:00:94:e4:29:bc:64:99:6e:10:52:
64:4a:ed:e1:c0:f5:6d:37:42:89:51:27:ca:0c:36:
9b:0c:97:a9:35:73:5d:d2:7e:13:98:06:d2:6f:3f:
e7:15:21:71:3b:46:53:49:1b:e9:fe:00:ec:9e:2f:
3a:73:4e:d7:a3:b1:c1:90:3c:5c:76:1f:52:74:db:
56:73:5e:9b:ac:d6:70:ad:e5:be:19:93:3f:26:f2:
52:d4:cc:71:99:4e:1b:6e:6b:b0:f2:e2:d9:89:cd:
c3:44:9f:85:4a:03:8a:c3:6f:5c:6e:85:27:e2:97:
fc:62:f8:66:f6:c3:eb:4f:82:de:1d:f3:82:d9:10:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:CA:31:7E:11:46:9F:06:27:A7:5E:E6:3D:77:B8:39:03:FE:D7
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:ac:5c:bc:25:4e:71:8e:0f:15:13:2c:a0:c0:8f:68:d1:
22:07:62:12:95:1d:f4:ab:29:c0:d7:1b:5d:f3:2b:04:19:4b:
ab:ec:8b:e3:22:87:d4:36:59:f7:3a:f1:75:bf:74:de:44:d0:
4b:40:26:1d:c8:7c:f8:d0:2c:e0:ed:09:ef:27:24:57:3d:9d:
46:c8:f3:4e:2d:3d:0c:72:db:3d:c8:96:6b:e4:de:64:da:eb:
70:a8:51:ec:37:6c:b7:00:0d:e5:87:11:7a:07:76:76:4e:2f:
09:4a:79:0f:d6:f0:27:1e:29:9d:73:02:6c:c2:2d:39:34:1d:
3f:fb:fe:45:f9:2c:05:27:11:10:f6:a2:7c:a3:79:53:b8:ff:
a6:2f:67:1c:33:f2:43:5c:25:4c:8b:ad:6f:3f:23:0c:eb:b0:
92:78:40:78:4f:70:6d:25:f6:48:ed:29:59:df:90:33:f9:b8:
36:32:81:52:84:d4:18:8b:ab:1c:f4:8a:75:fe:6f:77:c8:7e:
97:51:c9:32:45:18:a9:82:ed:9a:3a:d8:01:7f:0f:11:e0:57:
3a:62:52:ec:c0:a9:d6:3c:4b:63:7d:1a:7a:3f:0d:74:00:54:
4d:4e:eb:b0:a8:f7:1a:15:b0:d5:3c:b4:57:b2:23:03:c9:db:
d8:c2:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:35 2026 by rpki-client