Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: lmCWUWS+FgGatUufnd6i00IifGO9QeelXrmXi70gQTg=
Subject key identifier: A2:FE:18:08:16:F8:1D:5B:AB:29:F6:82:85:D8:F5:E7:7C:4F:2E:FE
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 01A0894339EE87CA8D4DC6D57B255605E0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0531
Signing time: Thu 10 Sep 2026 03:01:19 +0000
Manifest this update: Thu 10 Sep 2026 03:01:19 +0000
Manifest next update: Fri 11 Sep 2026 03:01:19 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: CeJ2QGoFftHBJtSFlZQNucT4GxqKrT10lQRZwow5vsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:39:ee:87:ca:8d:4d:c6:d5:7b:25:56:05:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Sep 10 03:01:19 2026 GMT
Not After : Sep 11 03:01:19 2026 GMT
Subject: CN=a2fe180816f81d5bab29f68285d8f5e77c4f2efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:c3:fa:a3:ae:7c:c3:0b:e0:4f:65:81:35:
32:3a:8c:0b:f2:31:27:d0:ab:21:c9:14:fd:35:e5:
d4:91:56:21:ee:b5:07:22:28:5e:35:b4:a7:86:40:
6b:54:31:41:fb:bf:d1:f3:ad:c7:bd:10:06:6b:4c:
f6:4d:af:cf:77:ac:03:24:33:cc:6c:1e:4b:70:a3:
bf:79:6a:19:f1:ce:a8:e6:6c:f7:0b:72:c8:8f:0b:
90:2f:e3:66:bc:09:13:32:54:e4:ae:be:4c:9f:c2:
4b:0a:d7:a6:b2:c8:b8:42:18:64:41:21:4c:18:6a:
3d:35:94:02:9b:13:8f:dd:f1:4a:2f:07:07:ea:6c:
41:98:ba:38:51:ad:af:52:02:28:c4:2f:2e:11:43:
59:ba:b2:f3:57:4b:5f:9f:4b:58:3f:67:0a:40:fa:
e3:9b:54:6f:6c:f5:dc:77:d1:65:14:ae:da:16:02:
81:a0:f2:2b:7d:9e:e6:a2:59:dc:d9:9b:fc:74:83:
d9:d3:2f:8d:bb:1e:94:81:24:da:e6:06:95:28:49:
32:a7:6d:b1:b5:d1:e7:cf:d3:65:97:45:32:31:f4:
1d:88:d2:5f:35:61:16:89:1e:79:36:47:15:0c:f5:
a5:59:b5:40:0e:60:16:04:a3:74:dc:e1:e0:2a:75:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:18:08:16:F8:1D:5B:AB:29:F6:82:85:D8:F5:E7:7C:4F:2E:FE
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7b:92:ff:6e:da:41:8e:8d:2a:34:88:ad:af:dc:c9:c0:71:
d2:86:2e:b0:41:3b:bc:16:1c:a8:60:8c:09:ec:5e:9d:fe:0e:
e0:e8:b9:85:3b:8a:db:4c:38:05:83:3a:8b:ab:aa:42:13:bd:
a4:8e:50:8a:87:06:bc:af:2f:0c:0a:1c:c0:70:d8:97:81:a5:
44:15:5d:51:16:f5:16:a7:e1:70:b1:22:9f:f0:fb:c7:5b:a5:
13:a5:38:ec:cf:41:74:5d:22:b6:98:7a:05:a8:c2:a7:c3:d8:
f2:15:a4:db:f9:2c:c5:b9:17:11:60:0b:84:89:f8:a6:da:4f:
ae:4c:36:de:4e:4d:43:28:98:ed:e9:e5:18:4d:63:b6:b1:99:
6a:82:4c:0d:fd:70:45:c7:3f:6f:94:ad:69:b7:54:f2:d0:ad:
6d:9c:df:0a:d1:2c:3a:8a:ed:c3:b6:4e:d6:a1:e2:46:3f:35:
fc:70:05:bb:d5:f9:40:4e:46:0e:75:89:bd:95:07:73:03:aa:
ed:23:0a:4e:39:9a:e9:c5:30:b5:5a:2b:81:ba:95:d5:e2:3f:
04:1f:e6:c3:1c:ab:e1:95:eb:e4:75:53:13:fc:8e:11:f9:29:
4a:68:ab:7f:62:ab:36:83:e3:14:bf:be:91:6d:d5:27:6f:2a:
d9:b8:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:09 2026 by rpki-client