Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: wx7ljafbM0MGACmrWy65aaN7RkyNWhJIyEEKtjoB74k=
Subject key identifier: 81:31:AE:95:5E:4E:DD:FD:A0:59:25:A9:54:F8:5D:6E:AE:94:EB:96
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 01A11718D6CA0ED8D986278A88C898CE1206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 1942
Signing time: Wed 07 Oct 2026 16:01:06 +0000
Manifest this update: Wed 07 Oct 2026 16:01:06 +0000
Manifest next update: Thu 08 Oct 2026 16:01:06 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: 2OTYlVKccnwZtLlltZRF1++vMqspOVovgrXU7h0l/KY=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:18:d6:ca:0e:d8:d9:86:27:8a:88:c8:98:ce:12:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Oct 7 16:01:06 2026 GMT
Not After : Oct 8 16:01:06 2026 GMT
Subject: CN=8131ae955e4eddfda05925a954f85d6eae94eb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:fd:4a:db:29:c3:5a:e8:ff:f2:80:d4:52:
83:ea:cb:51:a7:71:34:a8:62:aa:40:3a:d5:8f:6a:
67:6c:98:1b:e8:6c:68:bd:1f:2c:da:49:49:23:06:
d6:66:62:53:2b:c3:3e:93:9b:d8:04:ae:ab:62:9f:
eb:b9:81:4b:34:3c:c4:23:71:4c:c5:9b:6b:6c:73:
76:6f:98:41:a2:25:ad:92:23:bd:27:dd:ad:42:47:
ea:01:4d:55:d5:28:0f:37:68:3e:e4:a4:8c:31:0b:
5f:4b:bb:7e:d8:b3:e2:b8:ef:b4:60:7f:20:49:25:
25:af:93:70:dc:31:38:76:48:d4:d6:9b:d2:dd:37:
78:53:d1:51:f9:82:f6:01:5f:b2:43:dc:05:78:79:
5d:15:65:ea:d2:78:15:c3:2d:28:38:47:5b:ba:f3:
08:c4:af:c8:ed:06:94:14:75:c4:aa:b0:74:88:0f:
c5:96:8e:f6:c4:5b:ff:a0:af:08:81:9c:20:84:04:
8c:3f:b5:64:70:30:22:71:76:71:dc:ce:ad:6d:7f:
9f:06:80:49:b2:b4:48:4d:e5:78:6f:a8:65:da:41:
b5:35:ae:1a:35:1d:2e:fa:bc:21:7c:78:69:82:1e:
ba:4c:8f:f7:08:89:4e:e4:16:1b:bb:d6:f8:95:40:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:AE:95:5E:4E:DD:FD:A0:59:25:A9:54:F8:5D:6E:AE:94:EB:96
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3d:7f:62:9f:03:86:eb:15:08:09:5d:cd:ce:23:f5:05:59:
22:d7:e1:e7:40:88:35:75:f9:9b:e0:a6:58:fd:49:9f:b1:73:
96:26:5a:51:4a:3e:6a:46:13:58:28:09:91:db:9b:82:46:48:
c0:50:1d:7e:4d:9f:63:2b:d6:7d:bf:c7:11:90:16:4e:a9:fc:
65:2c:cc:78:9b:a3:22:6b:ae:91:ee:52:c1:d6:5b:8b:a9:2a:
a2:ba:c7:0a:2c:83:19:f2:8b:5b:ef:a4:4d:50:6f:c6:88:0b:
fa:e0:a6:bc:98:29:f2:e9:4c:fb:72:ea:3d:bd:d9:36:23:8d:
b5:ac:cf:8a:d8:42:f4:60:1c:9b:1c:43:02:db:37:65:19:2e:
9a:75:08:48:49:f6:64:f2:0d:32:d7:89:54:c8:4f:73:a1:08:
09:1e:e3:e0:db:be:36:22:4f:c9:d5:7d:97:8b:b8:04:20:13:
c3:88:ce:67:eb:b1:bb:3e:66:07:10:f9:5c:68:7b:44:02:d9:
11:fb:9c:b6:a9:76:30:de:41:00:15:68:f2:c0:5c:89:19:67:
45:32:47:a9:fd:3e:15:04:23:3a:8a:25:79:6b:4f:71:f5:e9:
2e:ba:06:c0:8d:43:12:39:cc:06:5a:8c:66:02:a8:9d:31:f1:
bc:c9:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:41:37 2026 by rpki-client