Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: oy/6TY1mk3RO7Vr4r5Sljp0XIosjhdIa3bdbX8qu4mY=
Subject key identifier: F8:A1:AE:54:4F:B3:79:37:4C:57:A0:84:80:9B:54:BE:28:50:35:58
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 01A09C92DFECCA34DCEC038BE9BBBDFFC87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1A51
Signing time: Sun 13 Sep 2026 21:01:06 +0000
Manifest this update: Sun 13 Sep 2026 21:01:06 +0000
Manifest next update: Mon 14 Sep 2026 21:01:06 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: ZJVMbXSHPnwYyO9ym7LnoOQ7Sbjw1t7HOPOiJPD+bCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:92:df:ec:ca:34:dc:ec:03:8b:e9:bb:bd:ff:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Sep 13 21:01:06 2026 GMT
Not After : Sep 14 21:01:06 2026 GMT
Subject: CN=f8a1ae544fb379374c57a084809b54be28503558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:19:bc:4f:b0:ee:13:37:a8:50:a1:f8:90:
03:75:3c:f3:45:76:21:13:5d:70:1c:05:d0:07:b1:
d5:7d:f9:fb:af:cb:2c:2c:17:fa:08:40:8c:68:6e:
24:31:d4:61:a6:7a:cd:cd:06:d8:0a:e4:e7:75:3d:
3b:36:3d:dd:ce:3c:9f:6c:06:1e:af:db:a7:c0:09:
19:82:fd:8d:a8:00:bf:48:87:0a:79:72:a9:8c:fa:
9b:13:30:34:e1:a6:99:f2:d4:62:96:91:2e:a3:59:
89:7e:71:c3:ea:16:9b:82:09:0a:56:13:0d:b2:e5:
51:f8:b9:df:91:68:0a:64:97:95:fb:da:7c:bb:ed:
fe:85:bd:2f:0a:ee:55:7e:ac:f3:13:3d:22:d3:b9:
47:d1:a1:e5:66:29:aa:e1:19:0b:f5:a9:e5:52:8b:
1c:6b:11:e9:b4:15:d1:ab:4e:02:4f:db:b8:8d:44:
12:84:99:d0:f0:7c:2c:8b:f2:c4:5f:e4:d5:4a:89:
5c:94:12:25:8c:1a:1c:a4:3d:b9:ae:06:a5:8e:d6:
f8:8e:da:1b:46:42:9b:84:bd:27:a1:bc:dc:56:32:
32:ee:e0:55:94:b5:9e:2f:11:88:8f:6b:a3:60:f3:
a8:42:21:62:fa:35:77:57:c5:c9:21:c5:40:bc:d3:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:AE:54:4F:B3:79:37:4C:57:A0:84:80:9B:54:BE:28:50:35:58
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:86:ae:ec:79:d7:27:ec:4c:9f:47:6d:38:c7:cf:2c:58:d8:
d2:64:12:50:55:81:2d:c7:8d:ac:5e:fd:45:b5:24:a2:77:2c:
a3:9a:9f:9a:e3:03:fa:89:29:f4:ed:b0:73:04:17:37:56:45:
66:83:22:e0:52:9b:a4:1a:b0:d9:9e:c3:0b:f0:ae:30:35:79:
c1:08:b0:43:6d:fb:2b:71:70:25:c9:4c:3d:fd:51:97:a8:c1:
fa:2d:ef:05:4d:19:0e:4f:39:8b:41:ef:c2:6d:25:eb:71:65:
cc:0d:1b:a0:1e:9a:6f:69:60:4f:93:11:22:cb:e1:79:23:db:
c6:94:e1:45:b5:1d:99:e0:a1:ef:88:cb:05:83:89:68:aa:cf:
9e:77:da:f8:86:0d:84:5d:74:dc:e3:6e:4b:35:93:5b:cb:ca:
49:2d:89:3d:e8:27:b3:d5:ce:ad:a4:93:ab:2c:05:56:88:1a:
ad:7c:8e:89:4a:4c:5b:7c:56:17:38:d2:65:7b:5e:49:67:71:
ae:8f:78:62:8e:c2:ca:3e:57:09:72:6b:57:49:2b:9e:8e:84:
d9:27:69:ea:6d:02:88:46:e5:cc:6a:f9:95:36:f5:b6:9e:ff:
ef:88:c7:4b:f6:e1:b3:a1:8c:f9:1c:b1:31:a6:48:54:71:ff:
d6:c9:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 01:20:37 2026 by rpki-client